ManageEngine ADSolutions vs Netwrix Auditor

Comparison of ManageEngine ADSolutions suite of products with Netwrix products.

Features	Description	ManageEngine ADManager Plus	NetWrix
Active Directory Account Management
User Life Cycle Management	Create, Manage and Delete User Accounts, Computers, Groups and Contacts in Active Directory
User Account De-provisioning	Delete User account when they become inactive or disabled or expired
Restore Deleted Users in bulk	Restore deleted users in Active Directory
Group Life Cycle Management	Create and Manage Security and Distribution Groups in Active Directory
Computer Life Cycle Management	Create and Manage Computers in Active Directory
Restore Deleted Computers	Restore Deleted computers in bulk
Contact Life Cycle Management	Create and manage Contacts in Active Directory
Bulk Provisioning/ Re-provisioning with CSV import	Create Users, Computers, Groups and Contacts and edit their attributes in Bulk by importing them from a CSV file
Template based Provisioning/Re-provisioning	Create custom templates with common attributes for provisioning/re-provisioning of Users, Computers, Groups and Contacts
Exchange Mailbox Management
Bulk Exchange Mailbox Provisioning	Create Exchange Mailboxes in bulk by importing a CSV file
Bulk Mailbox Re-provisioning/De-provisioning	Modify attributes of mailboxes in bulk
Bulk Mailbox Migration	Migrate Exchange Mailboxes from to the required version in a single click
HelpDesk Delegation
Role-based / OU-based Secure Delegation	Delegate different tasks to a particular user with a scope limited to specific Organizational Units and also track their activities
Active Directory Workflow
Customizable Workflow	Build a workflow structure, with required number of workflow agents based on your needs
Active Directory Automation
Complete Automation of vital AD tasks	Automate crucial and often repeated Active Directory tasks
Additional Features
File Server Management	Add file servers in your network and manage their NTFS and Share permissions
GPO Management	Create GPO objects and link them to computer and user objects
AD Search and Employee Search	Search Active Directory for Users, Computers, Groups and Employees contact information

Features	Description	ManageEngine ADAudit Plus	Netwrix Auditor for Active Directory
1. Active Directory auditing
1.1 Logon auditing	Provides information on both successful and failed logons.
1.2 Account lockout analysis	Notifies of a lockout along with information on the reason of lockout.
1.3 Object change audit	Provides information on user, computer, group, and OU management actions.
1.4 GPO change audit	Provides information on GPO management actions and GPO settings changes.
1.5 Permission change audit	Provides information on changes to objects' permissions.
1.6 Schema and configuration change audit	Provides information on changes made to schema and objects inside the configuration containers such as sites.
1.7 Replication auditing	Provides information on AD replication status.
1.8 Privileged user monitoring	Provides information on all activities performed by privileged users in the domain.
1.9 Before and after values of changes	Provides information on the old and new values of changed attributes in the domain.
1.10 User session recording	Provides a video recording of user screen activity.
2. Azure AD/Microsoft Entra ID auditing
2.1 Logon auditing	Provides information on all successful and failed logons.
2.2 Risk Detection	Provides insights into risky sign-in attempts.
2.3 User and device change auditing	Provides information on all user and device management actions.
2.4 Group membership and role change auditing	Provides information on membership changes to groups and dynamic groups, and the assignment and removal of roles to users.
2.5 Application change auditing	Provides information on applications that have been added, updated, and deleted, and consent given to APIs.
3. File server auditing
3.1 File/folder access audit	Provides information on file/folder read, create, delete, and modify actions.
3.2 File/folder permission change audit	Provides information on file/folder DACL and SACL changes.
3.3 File/folder failed attempts audit	Provides information on failed attempts to read, write, and delete file/folder.
3.4 Supported environments	Windows, Windows failover cluster, NetApp, and EMC.	+Synology, Hitachi, Huawei, Amazon FSx for Windows, QNAP, and Azure	+Nutanix
4. Windows server and workstation auditing
4.1 Local user logon auditing	Provides information on both successful and failed logons on local machines.
4.2 Local object change audit	Provides information on local user and group management actions.
4.3 Local policy change audit	Provides information on changes to local security policy.
4.4 File integrity monitoring	Provides information on new programs and modifications to executable files.
4.5 AD Federation Service (AD FS) auditing	Provides information on both successful and failed AD FS logons.
4.6 LAPS auditing	Provides information on who is viewing or modifying local admin credentials.
4.7 User work hour tracking	Provides information on employees' actual work hours (excluding idle time).
4.8 Printer auditing	Provides information on printer usage.
4.9 PowerShell auditing	Provides information on PowerShell processes that run in your environment along with the commands executed in them
4.10 AD Certificate Services (AD CS) auditing	Provides information on certificate-related activities on your AD CS servers.
4.11 Scheduled task and process auditing	Provides information on scheduled tasks that have been created, deleted, or modified, and processes that have been started or stopped.
5. Key functionalities
5.1 Real-time auditing	Allows tracking of security events in real-time.
5.2 Real-time alerts	Provides instant notifications upon of security events.
5.3 User behavior analytics	Allows detection of abnormal user behavior based on users' previous activity patterns.
5.4 Video recording of user screen activity	Allows capturing of user screen activity even if no logs are produced.
5.5 Who, when, where, and what of changes	Provides complete user audit trail— who did what, when, and from where.
5.6 Before and after values of changes	Provides information on changed attribute values (before and after) of AD objects.
5.7 Quick search	Allows tracking down specifics quickly.
5.8 Graphs	Provides a visual representation of audit data.
5.9 Prepackaged reports	Provides audit data with one click.
5.10 Report customization	Allows creation of reports according to user needs.
5.11 Compliance reports	Provides prepackaged IT compliance reports for SOX, HIPAA, PCI, GLBA, and GDPR.
5.12 Automated report generation	Allows automatic generation of reports at user defined time intervals.
5.13 Automated report delivery	Allows automatic emailing of reports to user specified email addresses.
5.14 Export of reports	Allows the export of reports to multiple formats like PDF, XLS, CSV, and HTML.
5.15 Alert delivery	Allows email and SMS delivery of alerts.
5.16 Alert thresholds	Allows configuration of thresholds based alerts.
5.17 Incident response	Allows execution of a predetermined action when an alert gets triggered.
5.18 Long-term log retention	Allows long term retention of audit data.
5.19 SIEM integration	Allows forwarding of audit data to SIEM solutions.
5.20 Web-based console	Allows access to the product over the web.
5.21 Multiple domain auditing	Allows configuration of multiple domains for auditing.
5.22 Role-based access	Allows role-based user access to product.
5.23 Architecture	Offers both agentless and agent-based audit data collection
6. Evaluation and purchase
6.1 Evaluation	Provides online demo, free instant trial, and personalized demo.
6.2 Ease of installation	Does not require professional assistance to deploy the solution.
6.3 Licensing and pricing		Licensed based on the number of domain Controllers/ File servers/ Windows servers/ Azure AD tenants Pricing starts at $595 (annual subscription fee for 2 DCs).	Licensed based on number of user accounts*. Pricing information is not publicly available.

Features	Description	ManageEngine ADSelfService Plus	Netwrix Password Manager
Key Features
Password Reset / Account Unlock	Users can reset their forgotten passwords and unlock their lockedout Windows accounts without calling helpdesk
Password Expiry Notification	Notify users to change password before it expires via email		(Available as a separate product)
Multi-Platform Password Synchronizer	Synchronize password and account changes with a wide range of cloud-based and on-premises applications	(Supports Google Apps, Office 365, Salesforce, HP UX, IBM AS400, Oracle DB, Oracle Ebusiness Suite)	(Supports Google Apps and Salesfoce only)
Employee Directory Update	Employees can update their profile information in Active Directory
Employee Search	Users can search for their colleagues information
Group Subscription	Users can opt-in and opt-out of Secruity and Distribution Groups at their will based on policies set by administrator
Change Password	Users can change their password from anywhere, anytime
Mobile Password Management	Self-Service Password Reset and Account Unlock via Mobile Devices
Client Software (GINA/Credential Provider) extension	Password Reset/Account Unlock from Windows logon screen (CTRL+ALT+DEL)
Built-in Reporting Mechanism	Reports on various aspects of user actions and their password status
Identity Verification Methods	Users identity are verified before they can reset their password or unlock their account	Security Q&A and SMS/Email based Pin code Verification	Security Q&A and Email Verification
Additional Features
Easy Installation and Deployment	Easy Installation and Deployment		(Requires .NET framework v3.5 SP1 installed and IIS 6.0 or above)
Multi-language support	Support for multiple languages	(Supports 15 languages)	(Supports 13 languages)
Automatic Password Reset / Account Unlock	Expired passwords/locked-out accounts are automatically reset/unlocked
Multiple Enrollment Options	Force Enrollment, Enrollment Reminders and Automatic Enrollment Options
Encryption standards	Encryption protocols used to securely store the Security Questions & Answers	SHA-2 and MD5	MD5 only
Licensing & Pricing
License Type	Type of Licenses available for purchase	Annual Subscription & Perpetual Model based on no. of users	Perpetual only based on no. of users
Starting Price	Price of the products for 500 users	$1490 (price of perpetual license)	Password Manager - $2750 plus Expiry Notifier - $550

Features	Description	ManageEngine Exchange Reporter Plus	Netwrix Exchange Change Reporter
OWA and Active-Sync Reports
OWA Access Report	Reports on OWA access to Exchange with info on the user, client IP, browser and server used in the process
ActiveSync Request and General Report	Reports on sync requests coming from all ActiveSync devices and on policies concerning ActiveSync
Exchange Traffic Reports
Mailbox Traffic Report	Mailbox traffic data based on both numbers and size
Organization Traffic Report	Track the overall number and size of messages sent and received in an Exchange organization
Exchange Mailbox Reports
Mailbox Size Report	Get the current mailbox size of Exchange users
Mailbox Size Growth Report	Report on mailbox size growth over a period of time
Mailbox Size Restrictions Report	Report on users with specific mailbox storage limits
Mailbox Content Report	Report to monitor emails based on keywords, attachment size, extension, etc.
Other Reports
Distribution Lists Report	Reports on Distribution Lists, its members and Inactive Distribution Lists
Exchange Auditing
Non-Owner Mailbox Logon Auditing	Report on all non–users who have gained excessive rights to access other users’ mailboxes
Mailbox Permission Changes Auditing	Reports on all critical changes made to mailbox permissions with details of who changed what
Mailbox Property Changes Auditing	Report on the changes made to the mailbox properties
Store Changes Auditing	Report on any store mount or dismount and store status
Address List and Recipient Policies Auditing	Report on changes to the exchange address lists and recipient policies
Store Group Auditing	Auditing of addition, deletion and modifications of Storage Group and Stores
Additional Features
Report Scheduler	Reports can be exported for later use in a targeted file format and scheduled for automatic email delivery
Custom Reports	Create your own custom reports based on your requirements
Licensing & Pricing
License Type	Type of Licenses available for purchase	Annual Subscription & Perpetual	Perpetual only
Starting Price	Price of the products	$1240 (perpetual license for 200 mailboxes)	$2200 (for 200 users). For both MS Exchange and AD Auditing.

*Disclaimer: Netwrix Auditor's licensing information is not publicly available, the details in this document have been obtained from third-party sources.