ManageEngine ADManager Plus

Lots of reporting and even has some automation (more on that later). You can make a lot of AD changes at once, audit groups and permissions. It has a lot of useful tools if you work in AD alot then this is your best friend.

Automation workflow which helps easily setup automation and then track history records. Easy tracking of errors in automation and lots of feasible options available to setup automation in various aspects. Easily fetch all reports in one place from Onprem AD, Azure AD and M365. Schedule reports to receive as email notification and easily analyze data. Customization is possible to achieve automation as per our requirements.

ADManager has helped us streamline our onboarding and user account creation. It integrates well with our hybrid environment of Azure and On-Prem AD, allowing for our techs to go to a single location to create on-prem users and also create their MS365 account and email. The reports for many AD functions and changes are very useful, like figuring out when an account or group was created or deleted, or the last time a user logged in to the domain. Lots and lots of reports. Can add users, groups, OU's right from one app. It's been a real time saver in training up Helpdesk and Desktop Support staff and keeps them out of the DC.

I won't list 3 things but I have a major one that cause a huge company wide outage. This was all caused by a bug in a recent patch. We used automation for disabling accounts and removing permissions. This is very specific and is only applied to an OU of accounts that were manually disabled and moved into that OU. The automation will review if the account is disabled, strip permissions and then move it to another OU for archival. Well, after an update, the scheduled automation ran, just like it always has. Except, this time it completely ignored it's automation rules and instead disabled every single account in AD as well as strip all of the permissions. Can you imagine what my day was like after this??? You don't want to know. Once we figured it out it was hours of server restores and fixing permission issues, groups.....the works. Very very bad day. I reached out to support and provided logs, they provided a fix but at that point I didn't trust it. We ended up disabling all the automation until we can confirm the fix worked (which it did work). There support didn't seem to care that much that we had a huge company outage and only provide their temporary fix for US that is manually added into a Fix folder and their explanation. There was a recent code enhancement introduced in the Group Members Report functionality(from build 8020) to support cross-domain objects. However, this update introduced an issue that caused the automation to ignore the group filter specified in the configuration. We've identified the root cause and have since resolved it. A patch has been provided to address this behavior. Please let us know once it's applied, or if you need any assistance with the update. Yes it was bad but the product for the most part is great. Just a really bad day

AD Manager plus is very slow and consumes more RAM at times and we need to keep restarting the services to bring down the memory. Upgrading the product takes a lot of time which impacts production sometimes. The support service team lacks knowledge about the tool and things remain unresolved and all features sent are not fulfilled due to which we need to live with bugs in the tool.

Our biggest issue isn't necessarily with the product itself, but the need to really get in there and get everything set up. Creating workflows and automation is still something we're struggling with. It would be nice if there were an easier way to get that set up.