Netwrix Active Directory Change Reporter (ADCR) for the purpose of control of IT infrastructure of Transcapitalbank

The Netwrix company completed an implementation project of Netwrix Active Directory Change Reporter (ADCR) for the purpose of control of IT infrastructure of Transcapitalbank. A system provides operational identification and response to the incidents arising in the field of information security that significantly increases controllability of IT infrastructure in general.

Transcapitalbank works at the market of financial services since 1992 and steadily enters in TOP-50 the largest and TOP-30 the most reliable Russian banks. For the purpose of data storage security, the Bank pays much attention to protection of the IT infrastructure taking into account the cybersecurity standards adopted in financial systems.

Situation: need of control of actions of the selected users and the notification about changes in the Active Directory and group politicians

Service of IT infrastructure of bank is executed by group of specialists with different administrative powers and spheres of responsibility which actions are closely connected among themselves.

"We came up against situations when the change in the Active Directory made by one of administrators caused a certain failure of work of business applications or services for which other technical specialist was responsible. We tried to solve a problem at the administrative level what the corresponding regulations of approval of carrying out technical works were developed for. However, the need for the automated tool which is fixing changes in the Active Directory and group politicians and also which is quickly notifying on it continued to remain relevant", - Oleg Rzhevsky, the deputy head of department of technical support of Transcapitalbank notes.

Solution: Netwrix Active Directory Change Reporter for control of the IT system online

Selection process of the solution took place in several stages. Initially specialists of Transcapitalbank considered option of use of the built-in means Windows for audit of objects of the Active Directory and event logs on domain controllers. But it became soon clear that these data are not enough. During testing it became clear - standard auditing facilities do not provide the complete information about changes, namely do not display an object status before modification that complicates process of operational recovery of operation of applications.

"One of my colleagues sent article about the products Netwrix. We were attracted by the fact that Netwrix Active Directory Change Reporter does not install the additional software on domain controllers, relying only on regular functions of audit. Netwrix ADCR obtains missing information by means of periodic creation of snapshots - instant pictures of AD", - Oleg comments.

At the final stage the pilot project using trial version of Netwrix Active Directory Change Reporter which has all functions of the commercial software was started. Upon termination of test drive the full-function version of a product was unrolled that did not involve big time and labor costs.

Result: operational identification of incidents of information security, continuity of business processes

Use of software products of Netwrix allows to receive the broadest picture of a status of the IT system during certain periods. There is an opportunity not only to monitor changes in infrastructure or separate applications, but also to have an idea of access to corporate information, to trace the history of work with files. Auditing facilities of Netwrix allow to receive notifications about changes in real time that reduces load of IT departments, allows to avoid unnecessary risks and failures in work.

"The project on implementation of Netwrix ADCR met our expectations. Now the administrators working with AD are it is aware of all changes. Each planned action becomes more weighed and responsible", - Oleg Rzhevsky, the deputy head of department of technical support, Microsoft MVP concluded.