Pacific Canbriam Energy elevates AD security and operational efficiency with ADAudit Plus

Business challenges

• Complex Reporting and Incident Investigation: Generating accurate reports and investigating security incidents posed a significant challenge, especially without a streamlined way to track changes in AD or Group Policy Object (GPO).
• Lack of Visibility for Compliance: Monitoring changes and login behavior was essential to ensure the organization's adherence to the organization’s change request process and security policies.

The Problem

PCE’s IT team faced challenges in generating timely reports and tracking unauthorized changes within AD. Thayer Ramahi, the IT Manager of PCE, mentioned that the organization was posed with a challenge of monitoring login failures, password expirations, and GPO modifications. They required an efficient auditing solution that would not only streamline their reporting needs but also improve visibility into user activities and GPO changes.

The Solution

Since implementing ADAudit Plus, PCE has achieved granular security and operational efficiency, as Ramahi mentioned, they use ADAudit Plus to "improve security and accountability, track changes, and monitor abnormal login failures." The tool provides PCE with daily monitoring capabilities for critical aspects of AD, such as GPO changes, login failures, and password expirations. ADAudit Plus’ reporting features are used daily, with monthly reports shared with the Group security team to ensure continued compliance.

The IT team also praises ADAudit Plus’ support team for their responsiveness and expertise, dubbing them "knowledgeable, helpful, kind, and professional." Having used ADAudit Plus and ADManager for over a decade, PCE’s IT Manager regards these tools as essential for maintaining AD security and compliance: "I have been using ADManager and ADAudit for the past 10 years, I was never disappointed. They are must-have tools, plus it is easy to use and maintain."

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.