In this article:

• Objective

• Prerequisites

• Steps to follow

• Validation and confirmation

• Tips

• Related topics and articles

Objective  

This article explains how to configure business hours in ManageEngine ADAudit Plus, allowing organizations to define their standard working hours. Setting business hours helps in generating more accurate audit reports, identifying after-hours activity, and improving anomaly detection and user behavior analysis.

Prerequisites  

• Access to ADAudit Plus web console

• A user account with Administrator privileges or a Technician account with delegated permissions to configure administrative settings

• Awareness of the organizational work schedule

Steps to follow

1. Log in to the ADAudit Plus web console as an administrator, or with a technician account with delegated permissions to create or modify alerts.

2. Navigate to the Admin tab.

3. Under the Administration section, select Business Hours.

4. Click the Add button to create a new business hours profile.

5. In the Business Hour Name field, enter a name for the profile (e.g., Default Working Hours).

6. Use the From and To dropdowns to define the start and end times of the standard working day.

7. In the Select Days field, choose the weekdays that fall within your business hours (e.g., Monday to Friday).

8. Click Save to apply the business hours profile.

Validation and confirmation

1. Verify business hour filtering in reports by navigating to Active Directory > User Logon Reports > User Logon Activity.

2. In the Hours dropdown, select Business [Business Hours] to ensure the report displays only events that occurred within the specified business days and working hours.

Tips

• Use business hours to flag unusual logins or file access that occur outside normal working hours—a potential indicator of insider threats or compromised accounts.

• Improve accuracy of anomalous logon detection by identifying deviations based on business hour boundaries.

• Use business hours in alert filters to trigger alerts only for off-hours events, reducing noise and increasing focus on critical activities.

Related topics and articles

• How to configure an alert profile when activity is logged during non-business hours