Quest Change Auditor for Active Directory Reviews

The primary use case is to manage human errors, like protecting identities from being modified by the software, and to audit security. This includes monitoring high-privilege accounts and having the ability to back up previous values if unauthorized modifications occur in the Active Directory.

This solution helps manage human errors by protecting identities and allows auditing of high-privilege accounts. It also provides the capability to backup previous values when unauthorized changes occur.

The most valuable features are the ability to protect Active Directory accounts and groups, and the real-time notifications that help manage Active Directory more effectively.

Areas that could be improved include having more management capabilities with command-line scripts and more flexibility in general. Often this type of tool could benefit from better scripting capabilities.

I have been using this solution for about two years.

I have never experienced any outage or latency with this solution. It is highly stable.

The product is very scalable; we handle a large number of accounts without performance issues.

I have only used the documentation on the website, which has been technically sufficient to answer my questions. I haven't had to call support.

The price can vary based on the components purchased and the needs and budget of the organization. It is considered a bit pricey, especially for smaller companies.

To configure the solution effectively, protect groups as well as high-privilege accounts to prevent privilege escalation. Focus on a detailed and well-thought-out configuration, not just the default settings.

I'd rate the solution nine out of ten.