We performed a comparison between Netwrix Auditor and One Identity Active Roles based on real PeerSpot user reviews.
Find out in this report how the two Active Directory Management solutions compare in terms of features, pricing, service and support, easy of deployment, and ROI."Netwrix provides features that no other solution on the market does."
"I have found user behavior analysis and the ability to run risk assessments important features. Additionally, the interface and online documentation are very good."
"The most valuable features of Netwrix Auditor are its affordability compared to similar products and its comprehensive monitoring of admin activities."
"I am impressed with the tool's reporting feature and notifications."
"What I find the most valuable about Netwrix Auditor is the way it shows risk. The reports are very clear."
"It maintains audit logs for the duration of time that you wish, as long as you have the storage capacity to do so."
"The most valuable feature is the real-time monitoring."
"Because of Active Roles, we're able to synchronize on an even more regular basis. It enables us to provide even more information to the Active Directory, which helped us to group our users in a more consistent manner."
"It gives us attribute-level control and the AD management features work very well."
"Having a tool to manage all changes to AD from a single pane of glass is awesome."
"The provisioning and deprovisioning saves a lot of time and skips a lot of errors."
"Secure access is the most valuable feature."
"Active Roles improved the management of users, groups, and AD objects in the organization."
"The most valuable features include auditing, dynamic grouping, and creating dynamic groups based on AD attributes."
"Another good feature is the change history. It's centralized in a single place and allows us to manage people's Active Directory domains from a central location. We can also drill down into individual objects in a troubleshooting or even an auditing situation. We can show evidence to auditors by drilling down into the individual history. It gives you all the history of what happened around an individual object. That is something that would be almost impossible to do in Active Directory, or extremely complicated."
"When there are issues I would like remediation to be in one place."
"The solution lacks self-service on password reset. It also needs to improve its scalability."
"I expect usability features to become more refined over time. I'm interested to see how it evolves and continues to improve."
"The Linux compatibility of this solution could be improved."
"There is room for improvement with the introduction of AI functionality."
"There is room for improvements when it comes to the licensing."
"An improvement would be if there was an another way to manage the logs besides email because it's not so practical."
"If you buy direct, there is a minimum of 150 licenses that must be procured. The price point and barrier of entry is a little bit higher than it would be if you purchased the solution from an authorized reseller partner, rather than buying it and managing yourself."
"The ability to send logs to a SIEM would be very beneficial."
"In terms of improvement, it could be made even more user-friendly for administrators when they need to create new workflows and rule sets."
"Another issue we have with the product is that we run a lot of custom tasks. You have to program them to run on one particular host and there's no automatic failover to a second host. If that host is down when a task is supposed to run, it has to wait until the next time it runs when that host is up."
"Most of the time it just works."
"When doing a workflow, we would like a bit better feedback on the screen, as we're trying to get it to work. For example, there is a "Find" function that you need set up in a workflow to do some of the automation. It is not the easiest to get a result from those finds when you're trying to do that. In the MMC, they have a couple different types of workflows. In this particular case, we use their workflow functionality to find all of X within the environment, then if you find it, do X, Y, and Z. You can have multiple steps. When you do that search function within that workflow, it's really hard to find out, "Is my search working?" It would be nice if there was some feedback on the screen so you could see if your search is working properly within the workflow."
"The user and group management in Azure AD could be better. Our focus these days is dynamic sharing with several on-prem Microsoft applications like SharePoint."
"It also has workflows and those are really powerful, but there are no built-in workflows. When it comes to them, it's empty. I would personally love for it to come with ten, 15, or 20 workflows where each achieves a certain task... I could just look at how each is done, clone them, copy them, modify them the way I want them, and be good to go. Right now we have to invent things from scratch."
"The initial setup was quite easy, but it was time-consuming. It took about three months."
Netwrix Auditor is ranked 2nd in Active Directory Management with 7 reviews while One Identity Active Roles is ranked 3rd in Active Directory Management with 17 reviews. Netwrix Auditor is rated 9.2, while One Identity Active Roles is rated 8.6. The top reviewer of Netwrix Auditor writes "Can track every admin action in large environments and includes AI modules to detect and prevent unauthorized changes". On the other hand, the top reviewer of One Identity Active Roles writes "Single interface and workflows simplify AD and Azure AD management efficiency and security". Netwrix Auditor is most compared with Quest Change Auditor for Active Directory, Lepide, ManageEngine ADAudit Plus, SolarWinds Access Rights Manager and ManageEngine ADManager Plus, whereas One Identity Active Roles is most compared with Microsoft Entra ID, ManageEngine ADManager Plus, SailPoint Identity Security Cloud and One Identity Manager. See our Netwrix Auditor vs. One Identity Active Roles report.
See our list of best Active Directory Management vendors.
We monitor all Active Directory Management reviews to prevent fraudulent reviews and keep review quality high. We do not post reviews by company employees or direct competitors. We validate each review for authenticity via cross-reference with LinkedIn, and personal follow-up with the reviewer when necessary.