Directory change auditing
Investigate supported changes to users, groups, computer objects and policies with the event detail available in the chosen edition.
ManageEngine products / UKManageEngine
ManageEngine
ADAudit Plus
Answer who changed the directory, what changed and when.
ADAudit Plus collects and reports on supported identity and system activity, with Active Directory auditing at its core. It helps security and infrastructure teams investigate account activity and maintain evidence of changes.
Who it is forActive Directory auditing.
Active Directory auditing.
A defined role.
For organisations that need more practical directory investigations than ad hoc event-log searches, or whose auditors need repeatable evidence. The useful scope may include domain controllers, file servers, workstations and Entra ID, each with its own coverage and licensing.
Capabilities that matterWhat ADAudit Plus
What ADAudit Plus
helps you do.
The proposed edition and supported environment determine the available scope.
Logon investigations
Review relevant authentication and account activity across the sources in scope.
Alerts
Route selected suspicious activity or configuration-change events to an owner who can investigate them.
File and endpoint auditing
Add supported file servers, member servers and workstation activity where that evidence is needed; these are additional licence scopes.
Entra ID auditing
Assess the supported cloud-directory events and tenant permissions separately from on-premises AD auditing.
Audit reports
Retrieve evidence for defined review questions, with suitable access rights and retention rather than assuming reports establish compliance.
Deployment, integration & migrationProve the evidence,
Prove the evidence,
not just the dashboard.
Plan the supported Windows installation, event collection, required audit policy, credentials and storage. Standard and Professional paid editions have different audit depth; Professional includes additional attribute and permission auditing in the current matrix. Additional source types must be identified explicitly.
ADAudit Plus can forward selected data and alerts to an external SIEM or syslog receiver. The vendor documents Splunk HTTP Event Collector and ArcSight integrations. Validate the parser, event fields, transport and categories you need; not every report category is forwarded.
Editions & UK quotation
Count the systems you want to audit.
ADAudit Plus has Standard and Professional paid editions. Domain-controller auditing and additional scopes such as file servers, member servers, workstations and Entra ID tenants have separate pricing entries. Advanced audit requirements should determine the edition, rather than assuming the entry licence covers every event.
For a quotation: domain controllers, tenant count, file-server platforms, member servers, workstations and the audit events required. Identify backup/recovery and file-analysis requirements separately.
Scope a ADAudit Plus quotation ↗UK purchasing, renewals & evaluation guide ↗
Before purchasingYour ADAudit Plus
Your ADAudit Plus
buying questions.
Will the entry edition show every attribute change?
Do not assume that. Use the current Standard/Professional matrix for attribute, permission and policy requirements, then demonstrate a controlled change with the detail you need.
Is it licensed by the number of employees?
Domain-controller auditing is sized by domain controllers, with additional counters for other audited systems and tenants. Identify the required sources rather than substituting your total user population.
Does installing it make us compliant?
No. The organisation still owns audit policy, retention, access controls and responding to findings. The product can support the required evidence and monitoring process.
A focused evaluation.
A clear commercial scope.
We help define the audit questions and source inventory for your ADAudit Plus evaluation. That makes the edition, domain-controller count and any file, endpoint or cloud additions clear before your team requests pricing.
Our approach ↗Trusted to advise.
Committed to deliver.
Make the next step usefulArrange your ADAudit Plus
Arrange your ADAudit Plus
demonstration or quotation.
Tell us about your existing tools, the work you want to improve and your timescale. We’ll help define a focused demonstration or a properly scoped UK quotation.