After getting the system up and running it has been a great tool for being proactive when monitoring our environment. The automated reports work great.

Automation!! Set it and forget it. Once you set up the items you want to monitor, you have the ability to shift your focus to other important items and then be alerted when the criteria matches your rules.

A little complicated to get things working at first.

Overall, things have been great while using the Netwrix Auditor. Support is fantastic, the tool has a lot of useful reports for compliance, permissions, identifying broken accounts, monitoring and more. The Active Directory auditing is also useful; something I missed on putting in the Pro section because of a character limit. I hope others find this tool as helpful as I have.

Let me start off by saying that there are many things to love about the Netwrix Auditor. If you are looking for a tool that can bring value and accountability to your department, continue reading. One of the primary things I like about the Netwrix Auditor is the reporting tool; there are reports for anything you can think of. These reports are useful to present to different departments in your company for different things. Management may find utile reports that show all permissions a folder has. This can help them weed out any members that should not have access to things. The IT department may also find useful reports that identity orphaned SIDs. There are also reports that can be used for anomaly detection - meaning, when a mass action (such as a deletion and movement of files) is done, an email will be sent. Another facet of the Netwrix Auditor I like is the setup of the subscription plans. Unlike the ad-hoc nature of reports, these subscription plans can be used to run certain reports on a schedule. This allows you to always be informed when things are triggered or when looking for a scheduled report needed for management. The alerting feature works great and has never caused an issue. One last Pro I will mention is how easy it is to upgrade the Netwrix Auditor. When there is a new version being released, upgrading is very straight forward. Upgrading retains your monitoring plans, subscription reports, and also providers better features with the new version.

The only Con I can mention about the Netwrix Auditor is that the reporting feature can appear difficult to use. You will spend some time trying to get reports to work with the fields they give you. Although, it's not difficult, you just need to jump into it. Support will very gladly help you with any issues or bumps you run into; support is amazing! Given what they offer in reporting, this is my only minor complaint. If you ever find that you are looking for a report they don't have, contact support.

The visibility on changes in Active Directory is incredibly valuable.

When the software works as advertised the information collection and reporting is far easier than attempting to extract the date from convoluted Microsoft logs using problematic scripts. The advertised data collection is extensive, and covers the most critical areas needed by a small business IT department with a limited staff. The active directory reporting is incredibly valuable and should be a mandatory for any business with or without a dedicated IT department.

Getting the data collection to work, and then keeping the data collection working is almost nothing short of an exercise in futility. The purpose of the software is to collect and report data, and yet Netwrix does not seem to hold back on making the process seem like a customer problem by providing numerous dead end resolutions. The lack of data collection troubleshooting tools does not go unnoticed.

I find visibility to be one of the greatest tools as a network manager. Netwrix gives me the ability to monitor file actions as well as account actions that may tip me off to a security breach on the network. Or, if an employee wants to know the exact reason a file went missing I am able to query Netwrix and provide an exact answer, even a screen capture of the event in progress if I wanted. With customizable notifications I am able to get on the spot information when specific events occur, like somebody attempting to log into a Domain Administrator's account without authorization. Though a little expensive, it is better to have the security Netwrix auditor provides than to allow a network breach go unnoticed until it is too late.

Easy to setup monitor AD, Logs, Events, etc customizable notifications visibility into files, Group Policy, Active Directory, Office 365, Azure, etc advanced features that help track down file actions, like screen captures or recordings of the actual event

The interface is sluggish can cause some network interference if not tuned properly cost