We use it to manage the users to start with and to add on security and networks. Whatnot, you can do is authentication, multifactor authentication, enabling user access externally is also possible. We also use it for federation service. So far, we are using all the features of AD.
Devops consultant at Siemens Healthineers
Highly customizable installation and good stability and performance, minimal downtime
Pros and Cons
- "Stability and performance are good. So far, we have not observed any major downtime or performance issues since we deployed it."
- "There is room for improvement in the support."
What is our primary use case?
What is most valuable?
We are using most of the features because we are a large organization. So we need those kinds of services or features coming for enterprise versions, and we use most of it because we are 20,000+ people.
What needs improvement?
There is room for improvement in the support. For many use cases, we get good support; for some, we don't.
For how long have I used the solution?
I have been using this solution for 20 years.
I'm using the latest version, which is Active Directory, in the cloud.
Buyer's Guide
Microsoft Active Directory
December 2024
Learn what your peers think about Microsoft Active Directory. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
What do I think about the stability of the solution?
Stability and performance are good. So far, we have not observed any major downtime or performance issues since we deployed it.
What do I think about the scalability of the solution?
It is highly scalable. There are around 20,000+ users using AD in our organization. The number of users keeps increasing according to our requirements.
How are customer service and support?
We use the support frequently whenever we find a problem with the given feature or the used feature.
The response is good. Sometimes they slip the SLA or whatever, so we discuss it.
How was the initial setup?
The initial setup is pretty straightforward. It is very customizable as well as very easy to install or leverage the features of AD.
What about the implementation team?
To deploy AD, it took not more than two days because we needed to extend from AD to AD. So we just wanted to figure out which power start domain to choose from and then do it.
Moreover, there is a separate team involved in the deployment and maintenance of the solution.We have a combination of managers, engineers, developers, etc.
Which other solutions did I evaluate?
We used Bamboo Tableau charts, but we are not using it anymore. We moved to Azure DevOps, so we use the entire suite of DevOps tools.
What other advice do I have?
Overall, I would rate the solution a nine out of ten. I would definitely recommend using the solution.
Which deployment model are you using for this solution?
Public Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Technical Analyst at a computer software company with 10,001+ employees
A cost-efficient tool which is a must for those using Windows-based operating systems
Pros and Cons
- "The scalability of the solution is high...The initial setup of the solution is easy, and I would rate it an eight or nine out of ten on a scale of one to ten, where one being difficult and ten being easy."
- "In the solution, assigning permissions is complex, making it difficult to grant them at a granular level or to multiple users without templates or alternative tools."
What is our primary use case?
Microsoft Active Directory is used to centrally manage all objects and provide access. It also serves as the authentication mechanism for most of our Windows and non-Windows applications using Kerberos. User and device management are also handled through Active Directory.
What is most valuable?
One of the most valuable features of the solution that I like is that it allows our company to apply GPOs properly to many users.
What needs improvement?
The GUI of Microsoft Active Directory is very basic. At our company, we can go for automation since we don't have many tasks. In the solution, assigning permissions is complex, making it difficult to grant them at a granular level or to multiple users without templates or alternative tools. Although achieving the RBAC or Zero Trust model is challenging due to the same limitations in Microsoft Active Directory, third-party tools are available to assist with this task. Even the Native Azure AD does not have these capabilities.
For how long have I used the solution?
I do have experience with Microsoft Active Directory. Our company is a customer of the solution. Also, I have been using this solution for maybe eight to ten years. I am using the solution's latest version.
What do I think about the stability of the solution?
For stability, on a scale where one is not stable and ten is very stable, I rate this solution a seven since there are issues. The solution has its own set of issues concerning patches, compatibility issues, and a few more things. The few other issues are something that actually depends, in a sense, that every month, they roll out the patches, and then they try to close the vulnerabilities, creating issues. So, maybe encryption, and also there are many things.
What do I think about the scalability of the solution?
The scalability of the solution is high. Scalability-wise, I rate this solution may be above eight out of ten. There are around 4,00,000 users of this solution.
The solution is used very often, daily, since it serves as a primary tool for various tasks, including authentication and other functions. At present, we do not plan to increase the number of users using the solution, as we are trying to reduce the footprint.
How are customer service and support?
I rate the technical support for the solution between six to seven out of ten. While technical support is proactive, there are times when we cannot get through a call and don't always receive the support we expect from Microsoft's technical support team.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup of the solution is easy, and I would rate it an eight or nine out of ten on a scale of one to ten, where one being difficult and ten being easy.
The deployment time of the solution varies depending on the team responsible for it. Since it's not primarily our team's responsibility, I'm unsure of the exact time required for deployment. I don't think more than one person is required for the entire deployment process. The number of people required to maintain the solution depends on the company's size.
What was our ROI?
The solution is worth the money paid for it.
What's my experience with pricing, setup cost, and licensing?
I'm unsure about the cost of the solution, as I was never involved in that aspect. However, I don't think it would be expensive. It might be average, around four or five out of ten. I believe the licensing costs are volume licensing for on-premises, so it shouldn't be monthly. I think it's a one-time purchase for the server, and it comes with the necessary licenses. We don't have to buy any additional licenses.
What other advice do I have?
My advice for those planning to use Microsoft Active Directory as a solution is that it is a scalable and stable platform that has been used for many years. It is a necessary tool for companies using Windows-based operating systems to manage their objects. Overall, I rate this solution an eight out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Microsoft Active Directory
December 2024
Learn what your peers think about Microsoft Active Directory. Get advice and tips from experienced pros sharing their opinions. Updated: December 2024.
824,067 professionals have used our research since 2012.
IT Engineer at United Nations
Is easy to use, but can be restricted to the specific local area networks
Pros and Cons
- "It is easy to handle, and it gives a hundred percent results with the group policies."
- "If you are using the Active Directory, the main concern is that the policy is restricted to the specific local area network."
What is our primary use case?
We use Microsoft Active Directory as an identity provider. Active Directory checks users and accounts.
How has it helped my organization?
It is extremely easy to use compared to the other identity providers. It also allows us to have group policies for all sorts of authentication. It also supports Cisco's 802.1X authentication. Moreover, it’s easy to integrate with any kind of product that will support Active Directory authentication.
What is most valuable?
It is mostly useful for its group policies. We can achieve everything with it, including some kind of restrictions on the users or servers. It is easy to handle, and it gives a hundred percent results with the group policies. Also, there has been significant improvement with the newer version, especially for Active Directory 2016.
What needs improvement?
Most of the features which are required for the active directory are already introduced into the Azure Active Directory. If you are using the Active Directory, the main concern is that the policy is restricted to the specific local area network. The users may not be in that specific local area network, like the office network, and won't get the updates and new policies.
However, upgrading is not easy because it has to come in a hierarchy from top to bottom. If you are a global administrator and have limited rights, it might be difficult as you are responsible for the whole entity.
For how long have I used the solution?
I have been using Microsoft Active Directory for seven years.
What do I think about the stability of the solution?
It is a stable solution. Azure Active Directory has a very high SLA, but the local active directories face update issues. Those issues need configuring and that is the reason I am giving it a seven out of ten.
What do I think about the scalability of the solution?
It's easy to scale and in my organization, almost 7,000 users are using this solution. Currently, we are downsizing in Africa and might shift to Azure Active Directory. However, the data is on the cloud, so it won’t affect the processing. I would rate the scalability a ten out of ten.
How was the initial setup?
My overall experience with the initial setup is satisfactory. My job role and use of Active Directory is very limited to using it as an identity source. At the moment, it is a hybrid model. We have on-premises and private cloud solutions internally. Currently, we are doing an assessment with Azure and AWS and might go with Azure.
It takes two days maximum to deploy. In our case, we already had the solutions in place. We need to give the Wi-Fi authentication to either a VIP user or a standard user. We define the active directory groups, and out of those specific groups, we ground the access accordingly. I rate the initial setup a seven out of ten.
What other advice do I have?
If the data is not that confidential, a company can choose a cloud solution like Active Directory. I would rate the solution a seven out of ten.
Which deployment model are you using for this solution?
Hybrid Cloud
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Information Technology Executive at Akums Drugs & Pharmaceuticals Ltd.
A scalable solution with high stability and multiple features
Pros and Cons
- "The most valuable feature is the configured appliance system in Hypervisor."
- "The technical support team does not give prompt responses."
What is our primary use case?
We only use Active Directory in my location for login purposes. We give permissions to file servers.
What is most valuable?
The most valuable feature is the configured appliance system in Hypervisor. We find Active Directory to be simple and effective. We mainly use it for file servers and user security. We don't utilize many advanced features.
What needs improvement?
The initial setup should be easier. It's complex and has replication and synchronization issues.
The technical support team does not give prompt responses.
For how long have I used the solution?
I have been using the solution for the last four years.
What do I think about the stability of the solution?
It is a stable solution as there are no crashes or downtime. I rate it a ten out of ten. It is very good performance-wise.
What do I think about the scalability of the solution?
It is a scalable solution. In my location, we have a total of 46 users. I rate it a ten out of ten.
How are customer service and support?
The technical support team is not good as they do not provide prompt support. I rate them a five out of ten.
How would you rate customer service and support?
Neutral
How was the initial setup?
Active Directory's initial setup is complex because, for some parts, like replications or synchronization, there are some problems that need to be verified.
There is an expert-level requirement, and we are not experts. So we speak to Microsoft's support, but they are also not capable.
Role deployments will take two to three hours. But fresh installation, if we are installing and configuring it, takes one to two hours.
What about the implementation team?
Our team configured it and performed the installation and configuration.
What's my experience with pricing, setup cost, and licensing?
The pricing model differs for India and other countries. Our procurement was based in India for a Microsoft license. The branch in our location is responsible for providing us with the software and licenses. They have an IT team that takes care of all the software-related matters.
What other advice do I have?
Since we started to use it and configured it with our server, we haven't experienced any downtime, instability, or crashes. I have had a good experience with this solution and with Microsoft.
I rate the solution a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Manager at PSPC
Easy to use, reliable deployment options, with minimal cost
Pros and Cons
- "The most valuable features are it is easy to use, manage, create a repository, and create the OM."
- "I would like to see the integration with Mac and IOS products improved."
What is our primary use case?
Our primary use case is to inform the user of access and single sign-on support to the internet.
What is most valuable?
The most valuable features are it is easy to use, manage, create a repository, and create the OM.
What needs improvement?
I would like to see the integration with Mac and IOS products improved. I would also like to have some similar functionalities in the on-premise solution that they have on the cloud solution.
For how long have I used the solution?
I have been using Microsoft Active Directory for the past six to seven years.
What do I think about the stability of the solution?
Microsoft Active Directory is a stable solution and there are patches available when there are issues.
What do I think about the scalability of the solution?
There is definitely scalability, we currently have around one thousand six hundred users.
How are customer service and support?
Customer support is available however going directly to a technician is not our primary support option. We are able to use online forums and documentation before we involve a customer service technician.
How would you rate customer service and support?
Positive
How was the initial setup?
In most cases the initial setup is straightforward. If you work in a greenfield environment, then it is easy to perform. But if you are using any previous products like the earlier versions of Microsoft Active Directory, then it is actually difficult to take the downtime and then reconfigure the Microsoft Active Directory on the new server and then re-implement the users in it. The initial migration is complex and challenging, but the greenfield implementation is okay.
What's my experience with pricing, setup cost, and licensing?
The license is perpetual and the cost is minimal. If you purchase Microsoft Windows then Microsoft Active Directory comes with the package.
What other advice do I have?
I think it is highly recommended to use Microsoft Active Directory knowing how it operates. I would rate Microsoft Active Directory an eight out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Enterprise Systems Specialist at KCB Bank Group
Offers its users to use its authentication and authorization capabilities
Pros and Cons
- "The solution's technical support is good."
- "Microsoft Active Directory fails to provide MFA. MFA, which is also known as multi-factor authentication on top of the password and username, is what I would like to see in the product's future releases."
What is our primary use case?
My company uses Microsoft Active Directory as an identity and access management solution. The tool is used for its authentication capabilities in my company.
What is most valuable?
The most valuable features of the solution are its capabilities in areas like authentication and authorization, which include aspects like configuring permissions on folders and assigning permissions to security groups configured in Microsoft Active Directory.
What needs improvement?
I feel that Microsoft Active Directory is a superior solution to the other products available in the market.
Microsoft Active Directory fails to provide MFA. MFA, which is also known as multi-factor authentication on top of the password and username, is what I would like to see in the product's future releases.
For how long have I used the solution?
I have been using Microsoft Active Directory for more than ten years.
How are customer service and support?
The solution's technical support is good.
How was the initial setup?
The product's initial setup phase was straightforward as it can be done within the operating system, after which you can take care of the configuration part to complete the setup process.
The solution is deployed on a hybrid cloud model.
What other advice do I have?
Microsoft Active Directory is an excellent product.
I rate the overall tool a ten out of ten.
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Identity and Access Management Manager at a retailer with 10,001+ employees
User-friendly solution with essential access control features
Pros and Cons
- "It is a stable solution."
- "The solution's price could be better."
What is our primary use case?
We use the solution as a user repository for window servers and platforms. Also, we have Line App platforms, actively using Line Asset Align to host our account and claim access based on active directory code.
What is most valuable?
The solution's most valuable feature is its ability to plan and manage different policies and functionalities.
What needs improvement?
The solution's price could be better.
For how long have I used the solution?
I have been using the solution for more than ten years.
What do I think about the stability of the solution?
The solution is relatively stable. There are no issues of stability right now.
What do I think about the scalability of the solution?
The solution is easy to scale. Our entire enterprise uses it.
How are customer service and support?
The solution's technical support is good if you purchase the premium service.
How would you rate customer service and support?
Positive
How was the initial setup?
Microsoft Active Directory is quick and easy to install. As for the deployment, it is a matter of a few hours. It takes about one or two engineers to deploy. Also, as for maintenance, one person is enough. The patching can be configured automatically.
What's my experience with pricing, setup cost, and licensing?
We purchase the license for the solution on a yearly basis. However, they have converted the licensing model into a subscription. But it is worth the money.
What other advice do I have?
There are no issues in terms of the performance and configuration of the solution. It is user-friendly and has a lot of UI features. Also, they are about to deploy new AI-based features.
Microsoft offers higher licenses as well. Thus, I advise others to select the licenses that fit their company's requirements. Otherwise, they will end up paying more.
I rate the solution a nine out of ten.
If public cloud, private cloud, or hybrid cloud, which cloud provider do you use?
Microsoft Azure
Disclosure: I am a real user, and this review is based on my own experience and opinions.
IT Enterprise System Administrator at Nafeza
We can delegate the administration of Active Directory objects and apply group policies, manage replication between sites, and is straightforward to set up
Pros and Cons
- "We can also have separate domain controllers in different Active Directory sites based on their location."
- "If Microsoft is going to add anything to the on-prem solution, it should be an updated GUI."
What is our primary use case?
Active Directory has been a valuable tool throughout my career in IT. We have not found anything that can compete with it in terms of functionality or solutions. With Active Directory, we can manage users, groups, and machines, add domains and forests and create trust relationships between domains. This is just a small sampling of what Active Directory can do. Windows Server is a great platform on which Active Directory is built.
How has it helped my organization?
The solution helped us create and modify objects for each user in our environment. We gave them the delegation and permission they needed based on their function. It was very helpful, especially in managing these users on each site. We were able to implement domain controllers as a primary and additional domain controller as a redundancy for each other. We were also able to create users and additional UUs. It depends on the departments, the business need, and the group policies that we are going to apply.
What is most valuable?
We can delegate the administration of Active Directory objects and apply group policies to groups of OUs. This is the best way to manage Active Directory. We can also have separate domain controllers in different Active Directory sites based on their location. We manage replication between sites through Active Directory sites and services. We can provide insight into what is being done, which will replicate across these domain controllers in just a few seconds. This will ensure that our data or any modifications, any creations have been replicated successfully to the other domain controllers.
What needs improvement?
There is no room for improvement because Microsoft's solutions have moved from on-prem to the cloud. We won't see any improvement or enhancement in these on-prem solutions because, according to the Microsoft websites, all the information related to Active Directory and Windows Server has been retired and there is no more information about it. Microsoft has discontinued the solution and moved on. Microsoft has verified that all on-prem solutions will stop receiving support by 2030.
The GUI has been the same from 2012 to 2016, and from 2019 to 2022. If Microsoft is going to add anything to the on-prem solution, it should be an updated GUI.
For how long have I used the solution?
I have been using the solution for six years.
What do I think about the stability of the solution?
I give the stability a nine out of ten.
What do I think about the scalability of the solution?
I give the scalability a nine out of ten.
How are customer service and support?
The Microsoft Support team often lacks the ability to provide timely support. Their response time is often slow, which can be frustrating for customers.
How would you rate customer service and support?
Neutral
How was the initial setup?
The initial setup is straightforward. I am very familiar with the solution and the setup is a piece of cake.
I give the ease of setup a ten out of ten.
What was our ROI?
I have seen a return on investment with the solution.
What other advice do I have?
I give the solution a ten out of ten.
We need to know how many domain controllers we require in our environment in order to create a primary and redundant domain controller. Additionally, we need to follow a naming convention to avoid duplicate users and misspellings. The number and size of RAMs needed for our Active Directory will depend on our workload. We need to design our Active Directory well to ensure a good experience.
Which deployment model are you using for this solution?
On-premises
Disclosure: I am a real user, and this review is based on my own experience and opinions.
Buyer's Guide
Download our free Microsoft Active Directory Report and get advice and tips from experienced pros
sharing their opinions.
Updated: December 2024
Popular Comparisons
Microsoft Entra ID
Fortinet FortiAuthenticator
Ping Identity Platform
IBM Security Verify Access
Evidian Enterprise SSO
Buyer's Guide
Download our free Microsoft Active Directory Report and get advice and tips from experienced pros
sharing their opinions.
Quick Links
Learn More: Questions:
- When evaluating Single Sign-On, what aspect do you think is the most important to look for?
- CA SiteMinder vs IBM Tivoli Access Manager
- How much time does SSO save?
- Why is SSO needed?
- What single sign-on platform do you recommend?
- Why is Single Sign-On (SSO) important for companies?
- IBM Tivoli Access Manager vs CA SSO