Duncan Aviation gains complete visibility into AD changes with ADAudit Plus

Business challenges

• Lack of visibility into AD changes: Before implementing ADAudit Plus, Duncan Aviation struggled to track who made changes in Active Directory and what modifications were performed. The absence of a centralized auditing system made security monitoring difficult.
• Challenges in tracking user and group activities: The IT team required a solution that could monitor account creations, group membership modifications, logins, Group Policy changes, and OU permission adjustments to ensure security and compliance.
• Limited user monitoring and incident response: Without real-time tracking of bad logins, failed password attempts, file changes, and helpdesk modifications, the company lacked full visibility into user activity, increasing security risks.

The problem

Prior to ADAudit Plus, Duncan Aviation faced challenges in tracking AD changes and identifying unauthorized modifications. Sven Brandt, network engineer at Duncan Aviation, explained, “We lacked visibility into what changes were made and who made them. With ADAudit Plus, we are now able to track who is doing what.”

Additionally, the absence of detailed reporting made it difficult to verify user activity, detect security threats, and maintain confidence in system integrity. The organization required an automated, real-time AD auditing solution to eliminate blind spots and enhance IT governance.

The solution

The IT team at Duncan Aviation implemented ADAudit Plus, ManageEngine's unified IT auditing solution, which provided real-time visibility into all Active Directory changes. The solution allowed the IT team to track group membership modifications, account creations, login attempts, Group Policy updates, and OU permission changes, ensuring greater security and operational control.

The reporting capabilities of ADAudit Plus played a crucial role in improving audit readiness. Brandt noted, “[ADAudit Plus'] reports are very effective. The visibility has made a huge difference. We are more confident in our environment, knowing that all changes are being tracked.” The automated logs and structured reports helped the company maintain security compliance effortlessly.

Additionally, ADAudit Plus enhanced user monitoring, allowing Duncan Aviation to track bad logins, successful logins, failed password attempts, file modifications, and helpdesk actions. This capability streamlined security event detection, enabling the IT team to proactively address unauthorized activities.

Brandt also praised ADAudit Plus' straightforward licensing model, stating, “I like that licensing is simple and straightforward. The product is very capable.” While his team has only required support on a few occasions, he noted that each experience was positive and professional. Brandt concluded, “ADAudit Plus has been a positive experience. The product is very capable, and the visibility it provides has made a huge difference.”

With a 9/10 rating, Duncan Aviation highly recommends ADAudit Plus for organizations seeking a robust AD auditing solution.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.