Introducing ADAudit Plus' Attack Surface Analyzer—Detect 25+ AD attacks and identify risky Azure configurations. Learn more×
 
Support
 
Phone Get Quote
 
Support
 
US: +1 888 720 9500
US: +1 888 791 1189
Intl: +1 925 924 9500
Aus: +1 800 631 268
UK: 0800 028 6590
CN: +86 400 660 8680

Direct Inward Dialing: +1 408 916 9892

Moore Barlow LLP moves from manual log reviews to real-time AD monitoring with ADAudit Plus

About Moore Barlow LLP

Moore Barlow is one of the UK's leading regional law firms, formed in May 2020 through the merger of two established South East practices, Moore Blatch and Barlow Robbins. The firm focuses on three groups of clients—private individuals and families, entrepreneurial businesses and organisations, and people whose lives have been affected by serious injury or clinical negligence—and is consistently ranked by Chambers and The Legal 500 across its practice areas. With around 70 partners, more than 270 lawyers and legal professionals, and a total staff approaching 500, Moore Barlow operates from six offices in Southampton, Guildford, Woking, Lymington, and two London locations in Richmond and the City. As a firm regulated by the Solicitors Regulation Authority and entrusted with highly sensitive client matters, Moore Barlow depends on a well-monitored, stable IT environment.

Company

Moore Barlow LLP

Industry

Legal services

Location

United Kingdom

Business challenges

  • No day-to-day monitoring: The IT operations team had no routine monitoring of Active Directory (AD) activity in place, leaving it without a live picture of what was happening in the environment.
  • Manual log review as the only option: The only way to investigate activity was to look through raw logs by hand, a slow and basic method that could not surface issues as they occurred.
  • Limited visibility into changes and user behaviour: Without real-time insight into who was changing what in AD, or into unusual patterns in user activity, errors and anomalies were hard to catch and correct quickly.

The problem

Moore Barlow's IT operations team is responsible for keeping the firm's Active Directory environment stable and secure across its six offices and several hundred users. Before implementing ADAudit Plus, the team had no day-to-day monitoring of AD activity. When something needed investigating, the only method available was to look through logs manually, which was time-consuming and gave the team no way to see events as they happened.

"A lack of any day-to-day monitoring was an issue. Looking through logs was the only basic method we had. ADAudit Plus gave us the tools to implement real-time monitoring."

Dan Skidmore, IT Ops Manager, Moore Barlow LLP

The same gap made it difficult to maintain visibility over changes made by the wider team and to spot when an account's activity departed from its normal pattern, both of which matter to a firm where stability and control over access are essential.

The solution

Moore Barlow deployed ManageEngine ADAudit Plus and used it to put real-time monitoring of Active Directory in place for the first time. Change auditing is central to how the team maintains stability: ADAudit Plus gives the IT operations team visibility across everything the team does in AD, so that if a change is made in error, it can be identified and rolled back.

"To ensure stability, ADAudit Plus ensures you have visibility throughout your team, giving you the ability to roll back any errors in changes."

Dan Skidmore, IT Ops Manager, Moore Barlow LLP

Daily reports have replaced manual log trawling as the team's routine view of the environment. Each report gives a snapshot of recent events, and the ability to customise the reports to the firm's own needs has proved particularly valuable. On the user monitoring side, the team tracks not only logon activity but also unusual day-to-day behaviour, which the IT Ops Manager describes as a game changer for the firm.

Support has been consistently good, covering everything from licensing to renewals.

"We believe it's been one of the best additions to our monitoring suite—highly recommended should anyone be looking for an easy monitoring tool."

Dan Skidmore, IT Ops Manager, Moore Barlow LLP

By moving from manual log reviews to real-time change auditing, customisable daily reporting, and user behaviour monitoring, Moore Barlow has gained the day-to-day visibility into Active Directory it previously lacked. The team rates its overall experience with ADAudit Plus at 9 out of 10 and is highly likely to recommend it.

About ADAudit Plus

ADAudit Plus is a real-time Active Directory change auditing solution that features file and folder monitoring, plus access and permission change capabilities. With more than 200 event-specific reports and real-time email alerts, it provides in-depth knowledge about changes made to both the content and configurations of Active Directory, Azure AD, and Windows servers. Additionally, ADAudit Plus provides thorough insights on workstation and file server access (including NetApp and EMC). For more information about ADAudit Plus, visit https://www.manageengine.com/products/active-directory-audit/.

Similar case studies

 

Take control of your IT security posture with ADAudit Plus

Discover how ADAudit Plus helps your organization monitor and secure your IT infrastructure through continuous, real-time visibility.

Get your copy now!

Fill in the details below and get instant access to the case study.

  •  
  •  
  • By clicking " Submit now", you agree to processing of personal data according to the Privacy Policy.