ManageEngine ADSelfService Plus vs Quest Password Manager
The comparison: Apart from normal feature-to-feature comparison, this document also throws some light on to what extent these two software products achieve the “basic qualities desirable in a software”.
The main differences between ADSelfService Plus and Quest Password Manager lie in the following aspects:
|ADSelfService Plus||ADSelfService Plus provides “Self Update”, a feature that allows end users to enter their personal information directly into active directory. This feature, which is absolutely free of charge, has been an important USP for ADSelfService Plus since its inception.|
|Quest Password Manager||Quest does not offer any bonus features.|
ManageEngine ADSelfService Plus
|Qualities||ManageEngine ADSelfService Plus
|Quest Password Manager|
ADSelfService Plus is relatively user-friendly and self-explanatory. Right from installing and deploying the product, the customer is at great ease with ADSelfService Plus.
ADSelfService Plus does not depend on any external software or services.
|Good but has few shortfalls.
Quest Password Manager’s reporting system is entirely dependent on SQL Reporting Services, whereas ADSelfService Plus queries the Active Directory/ self-contained database directly for reports.
|Extent of Access||Excellent; the software can be accessed over web (from any machine in the domain) by administrator or end user with equal ease.
||Excellent and easy access only in the case of end users. However, for administrators, the product poses certain problems.
ManageEngine ADSelfService Plus
|Quest Password Manager||Comments|
|Web based software|
|Self Reset Password|
|Option for the user to search and locate his account in a domain, should he forget the username||Both features work with the assumption that the user ID comprises a part of user’s name in it|
|Global access||Medium (for administrators)||In Quest, administrators will not be able to view reports, if they accessed the site from a machine devoid of SQL Reporting Services server|
|Identity verification and establishment based on Security Questions|
|Strong encryption for security answers|
|Self Unlock Account|
|Change Password||This feature is for users who remember their passwords and are willing/forced to change it|
|Self Update||This feature allows users to enter their personal information directly into Active Directory. (Administrator decides the fields which the user can update.)|
|Provision to notify users about impending password expiry|
|Options to choose desired language|
|Resetting passwords right at Windows logon prompt||In Quest this feature is a paid feature. In ADSelfService Plus, this comes as a part of Professional package.|
|Cross-platform password synchronization||Basic; ADSelfService Plus supports only Active Directory||High|
ManageEngine offers a more effective “helpdesk delegation” as a part of another product ADManager Plus, which simplifies Active Directory management.
|Not just password reset task, but several administrator-specific tasks can be delegated to a helpdesk agent through ADManager Plus.|
|Multiple domain and OS support|
|Dashboard view of main components of the software|
|Provision to find inactive users and free their space in license count||This feature of ADSelfService Plus allows you to view a comprehensive report of inactive users, restrict them and include other users in the license count. Saves your money.|
|Force users to register with the product|
|Prompt users to register through email reminders|
|Schedule registration email notifications|
|Performing bulk updates of Security Questions and Answers||A special request has to be dispatched to Quest to acquire this feature. It is not clear if it is free of cost.|
|Configuration of security question list|
|Prevent users from modifying security questions|
|Automatic Password Reset|
|Customize the logo on password reset software (you can include your company logo too)||In Quest, user can insert desirable logo only in windows logon prompt (if the GINA extension feature is installed)|
|Password Policy Management||ADSelfService Plus uses the password policy defined in the Active Directory by the administrator. It does not alter it.|
|Exclude users from email notifications||This feature of Quest requires an IT administrator to manuallycreate groups and make any user who should not receive email notification, a member of it.|
|Locked-out user report|
|Soon-to-expire passwords report|
|Password-expired user report|
|Enrolled user report|
|Un-enrolled user report|
|‘Password reset’ audit report||
(Bundled with user activity report)
|‘Self unlock’ audit report||
(Bundled with user activity report)
|Self update audit report||Not applicable|
|Provision to track users (by their IP) and actions performed by them|
|Security Q&A encryption using irreversible hashing algorithm|
|Lock out users who fail security question and answer authentication|
|Hide security answers|
|Captcha (word verification image) on password reset and unlock pages||Information not available|
|Option to run as a secure SSL connection|
Can the solution be considered value for money?
The professional version starts at $ 1195 for 500 users.
Both ManageEngine ADSelfService Plus and “Namescape myPassword” provide the basic self service password reset benefits.
- ADSelfService Plus allows users to self update their own personal information in the Active Directory. Thus making the software more convenient when compared to myPassword.
- ADSelfService Plus facilitates configuring OU Based Self Service Policies for Password Reset, Unlock Account, Self-Update and Change Password.
- The Automatic Password Reset facilities, single sign on option, soon-to-expire password notification via email to users are other added benefits of ADSelfService Plus solution.
- Namescape myPassword requires additional frameworks to be installed even before installing the application. No such framework requirements for ADSelfService Plus. This makes the software readily available for download and evaluation.
- ManageEngine ADSelfService Plus comes in 2 Versions Standard and Professional and provides the choice of deployment. The Standard edition of ADSelfService Plus starts $ 595 for 500 users and the professional version starts at $ 1295 for 500 users. The pricing of ADSelfService Plus is competitive and is readily available in our website for your reference and comparison. We are not aware of the pricing details of myPassword however we are confident of the pricing and value that ADSelfService Plus will add to any environment.
What customers say about us
CAMH will be able to save close to $26,000 a year on service desk calls related to Active Directory password resets and locked accounts, and will see a return on investment within the first six months of product implementation.
Judy OlivierProject Manager, CAMH
This tool helps me be in command of the technical environment in my Active Directory network. It is easier to find logs and manage more effectively. The cost for the many features got our attention.
Diego PontesTecnisa SATecnisa SA
Just about the best piece of security software that would put a smile on any security administrator
Jacinto GodinhoAdministrator: Quality Assurance and IT Security, Al-Ahli Bank of Kuwait