Quest On Demand Audit Hybrid Suite for Office 365


Security and compliance auditing for hybrid Microsoft environments

According to Microsoft more than 50 percent of user accounts in Azure AD are hybrid.1 Chances are your organization will make that transition soon if it hasn’t already. However, even as you move to a hybrid Microsoft environment, you need to maintain your legacy infrastructure and this doubles the area that your IT team needs to manage and protect. As your data footprint expands due to more workloads moving to the cloud, your infrastructure is exposed to more and more security threats. Unfortunately, native on-premises and cloud-auditing tools are limited in their ability to address the security and compliance needs of this new hybrid business model. What if you could secure your hybrid environment and ensure continuous compliance by searching any change made on premises or in the cloud from a single dashboard? What if you could normalize what individual changes look like across your on-premises and Office 365 workloads? What if you could delegate audit data access so users get exactly the reports they need and nothing more? What if you could keep as much audit data as you need for as long as you need it?

Quest® On Demand Audit Hybrid Suite for Office 365 provides a single, hosted view of user activity across hybrid Microsoft environments, giving you visi-bility to all changes taking place, whether on-premises Active Directory (AD), Azure AD or Office 365 workloads such as Exchange Online, SharePoint Online and OneDrive for Business.
The hybrid suite is delivered as a subscription service that gives you licenses to both Change Auditor for Active Directory and On Demand Audit. We make it easy to pair them together in just a few clicks.



Change Auditor is the industry’s lead-ing solution for in-depth, high-fidelity auditing of on-premises Microsoft envi-ronments. It provides real-time auditing, alerting and forensics on all critical configuration, user and administra-
tor changes across AD, including those made to Group Policy Objects (GPOs), your DNS, server configurations, nested groups and much more.



On Demand Audit is an Azure-hosted SaaS that tracks all activity across Azure AD, Exchange Online, SharePoint Online and OneDrive for Business. As part of the hybrid suite, it consolidates and correlates the on-premises audit data gathered by Change Auditor together with cloud activity from Azure AD and Office 365 workloads.


With Change Auditor and On Demand Audit combined in the On Demand Audit Hybrid Suite for Office 365, you get a single view for your on-premises and cloud audit data from which you can quickly investigate incidents with responsive search and interactive data visualization, and store audit history for up to 10 years in the On Demand tenant.

Most cloud-based auditing products don't provide you a view of your on-premises activity, and those that do (e.g. SIEM tools) rely on native event logs, which lack the fidelity of auditing that Change Auditor provides.

Change Auditor gets data from a light-weight agent installed on each domain controller. As a result, it can audit faster and more accurately than native auditing tools.  Change Auditor displays all events in an easy-to-read, normalized format of the five Ws — who, what, when, where and originating workstation — along with the previous and current values for each change. Change Auditor can even prevent changes to critical data, such as privileged groups, GPOs and sensitive mailboxes, even if the user has the native permissions to make those changes.

On Demand Audit surfaces  
on-premises Change Auditor events, while also auditing activity across Azure AD and Office 365 workloads, to provide a single, hosted view of:

  • AD and Azure AD users, groups, roles, identities and more
  • Azure AD sign-in failures and their source
  • Exchange Online mailbox logins, activity, non-owner mailbox access, distribution groups and more
  • SharePoint Online and OneDrive for Business file access, external sharing of data, anonymous links and more


Correlated identities

On Demand Audit correlates identi-ties across on premises and cloud, so you can search by either and get all results regardless of where the activity originated.

Real-time alerts on the move

Maintain constant visibility and respond from anywhere — and on any device —to vital policy changes and suspicious events, regardless of whether they occur on premises or in the cloud. With the On Demand Audit Hybrid Suite for Office 365, you can send real-time alerts to email and mobile devices to prompt immediate action, even while you’re not on site.



Responsive, flexible search

Slash investigation time with fast, intui-tively built searches across tenants that deliver immediate results. On Demand Audit provides flexible searches on any event or any field, including by actor, changed attributes, activity details or cloud-only objects.

Interactive data visualizations

Transform hundreds and millions of on-premises and Office 365 audit events into stunning, visual dashboards that help you simplify compliance reporting and investigate incidents faster.

Normalized audit view

Unlike native tools, On Demand Audit streamlines security and compliance auditing by displaying detailed informa-tion from every on-premises and cloud change event in a simple, normalized format to help you quickly make sense of the data.

Granular, delegated access

In just a few clicks, you can give your security and compliance teams, help desk staff, IT managers and even exter-nal auditors and partners exactly the reports they need and nothing more. On Demand Audit provides granular, dele-gated access, safely empowering users to get the insights they need without making any configuration changes and setting up additional infrastructure.


Long-term storage

On Demand Audit stores all audit history for up to 10 years — which is significantly longer than the native retention period — at a fixed subscription price. This enables you to keep as much audit data as you need to satisfy security and compliance policies — without increasing your own Azure storage costs.  

Secure, scalable and reliable SaaS

On Demand Audit delivers the security standards, service level and scalability that you need, backed by award-win-ning, global support ready to help you 24/7/365. Certifications include ISO/IEC 27001:2013, ISO/IEC 27017:2015 and ISO/IEC 27018:2019.

Fast, easy setup of hosted auditing dashboard

Onboard to Quest On Demand with ease. Start auditing in minutes. No installation, no upgrades, no complex configuration. — no sweat! 


Rapid innovation

We keep pace with Microsoft updates so you don’t have to. As an Azure-hosted SaaS platform, Quest On Demand auto-matic updates deliver new features, customer-requested enhancements and security patches quickly and without any effort on your part.


If you are looking for the Quest Software and One Identity technologies (presentation, demo, poc, consultation, training), please feel free to contact Prianto value-added distributor team from Hungary or CEE/Adriatic region.