Behbehani Motors company gains full visibility into Active Directory with ADAudit Plus

Business challenges

• Limited AD insights: Behbehani Motors Company's (BMC) IT team struggled to gain critical visibility into their domain controller (DC) activities, missing crucial insights into administrator privilege usage and group policy changes.
• Audit logging gaps: The lack of comprehensive audit logs for AD created blind spots, making it challenging to track file deletions, modifications, and unauthorized logins.

The problem

Without proper audit logs and detailed reports, BMC’s IT team faced limitations in tracking administrative privileges and monitoring group policy changes on their domain controller. According to Yusuf Motagamwala, the IT Manager at BMC, the organization had challenges in monitoring file deletions, modifications, and unusual logins leaving them exposed to potential security risks, as they lacked a reliable way to detect and respond to malicious activities. BMC urgently required a solution that could fill these security gaps and provide detailed reports to support compliance.

The solution

Since implementing ADAudit Plus, BMC has gained valuable insights into their AD environment. The solution's detailed tracking capabilities, ranging from its file integrity monitoring to user behavior analytics, enabled BMC to closely monitor administrative privilege usage, file changes, and group policy modifications. The reporting capabilities allowed the team to review unusual login activities, including after-hours access, improving their ability to maintain compliance and enforce security policies. The user monitoring capabilities in ADAudit Plus further strengthen BMC’s AD security by enabling the tracking of login and failed login attempts, helping the team detect and address unauthorized access.

Overall, ADAudit Plus has provided BMC with a comprehensive AD auditing solution that empowers them to proactively manage security within their AD environment, which was succinctly summarized by Yusuf: "We are glad to have [ADAudit Plus] installed in our environment as this helps us gain insight into AD and allows some control on AD access."

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.