ADAudit Plus helps Bama Nordic AB stay vigilant against cyberthreats

Business challenges

• Threat visibility:Bama Nordic AB's IT team had no visibility into end-user issues, such as logon failures and admin logon attempts. Monitoring these events proved to be essential for ensuring the organization's cybersecurity.

The problem

Before implementing ADAudit Plus, Bama Nordic AB faced significant visibility issues within their AD environment. The IT team had no insight into failed logon attempts, administrative access logs, or unauthorized changes, which left potential security gaps. As Martin Bergstrom, the IT Service Owner for Security and Infrastructure, described it, “We did not have any clue about failed logons, admin logon attempts, etc.” This lack of monitoring hindered their ability to remain compliant and proactive in addressing IT risks.

The solution

ADAudit Plus, ManageEngine's IT auditing solution, provided Bama Nordic AB with the real-time auditing and alerting capabilities they needed to overhaul their security monitoring. By enabling failed login tracking across all users, including privileged accounts, Bama Nordic AB was able to integrate alerts with their ticketing system and respond swiftly to potential threats. ADAudit Plus' scheduled user reports—at least ten generated on a weekly or monthly basis—now provide insights into inactive users and computers, helping IT admins take timely security actions, such as bulk account deprovisioning.

ADAudit Plus also empowered the team to detect anomalous behavior using its ML-based User Behavior Analytics (UBA), such as unusual login times or mass file deletions and movements. “We now can see strange behavior like login times that are not normal for our users, huge amounts of files deleted or moved, etc.,” Bergstrom noted.

Alerts for account lockouts and the ability to trace them to their source have been particularly valuable. As Bergstrom shared, “I like the alerts on account lockouts and being able to track the source. [ADAudit Plus] saves me a lot of time that I can use for something else.”

From implementation to delivering upgrades, Bergstrom noted that the technical support Bama Nordic AB had received from ManageEngine was efficient and helpful. “Onboarding went just fine, and the upgrade also—no issues. Quick help when we needed it,” Bergstrom commented.

With ADAudit Plus, Bama Nordic AB now has complete oversight of their Active Directory environment. Real-time alerts, scheduled reports, user behavior insights, and source-based lockout tracking have dramatically improved both security posture and operational efficiency. Bergstrom rated their experience a perfect 10/10 and expressed strong confidence in recommending ADAudit Plus to peers in the industry.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.