--- title: Microsoft Defender for Identity Reviews meta_title: 'Microsoft Defender for Identity Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 98 reviews by the users' company size, role or industry to find out how Microsoft Defender for Identity works for a business like yours. aggregate_rating: rating_value: 4.3 review_count: 98 scale: '5' date_modified: '2026-09-22' parent_category: name: User Threat Prevention url: https://www.g2.com/categories/user-threat-prevention ---

Microsoft Defender for Identity Reviews & Product Details

Profile Status

This profile is currently managed by Microsoft Defender for Identity but has limited features.

Are you part of the Microsoft Defender for Identity team? Upgrade your plan to enhance your branding and engage with visitors to your profile!

Value at a Glance

Averages based on real user reviews.

Time to Implement

5 months

Return on Investment

16 months

User Insights

Average based on 98 real user reviews.

Implementation Time

5 months

Perceived Cost

$$$$$

Microsoft Defender for Identity Reviews (98)

View 2 Video Reviews
Reviews

Microsoft Defender for Identity Reviews (98)

View 2 Video Reviews
4.3
98 reviews

What do users say?

Generated using AI from real user reviews
Users consistently praise the product for its real-time visibility into suspicious activities and its ability to detect advanced threats effectively. Many appreciate its integration with other Microsoft solutions, which enhances overall security management. However, some users note that the initial setup can be complicated, requiring significant expertise.
Search reviews
Filter Reviews
Clear Results
G2 reviews are authentic and verified.
Devender K.
DK
Devender K.
Jr. Solution Architect
Enterprise (> 1000 emp.)
"Powerful Security with Seamless Integration"
4.5/5
What do you like best about Microsoft Defender for Identity?

I find Microsoft Defender for Identity very easy to use. I really like its seamless integration with Defender for Endpoint and other solutions like Defender for 365 or Defender XDR, allowing for flawless default integration. This makes it straightforward to see all the loggings and alerts in a single portal, which is great for better threat hunting and detection monitoring. The ease of initial setup and integration with our SIEM solution also stands out to me. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

I find it could be more flexible for raw data hunting. Review collected by and hosted on G2.com.

Rawad A.
RA
Rawad A.
Project Management
Mid-Market (51-1000 emp.)
"Effective Identity Security"
5/5
What do you like best about Microsoft Defender for Identity?

how deeply it integrates identity security into the broader Microsoft ecosystem while remaining easy to use and highly effective. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

Licensing can feel expensive outside E5, Best value only within Microsoft ecosystem, Limited customization for advanced detections, Some alerts need tuning to reduce noise. Review collected by and hosted on G2.com.

Paridhi M.
PM
Paridhi M.
Data engineer
Information Technology and Services
Enterprise (> 1000 emp.)
"Microsoft defender user"
4.5/5
What do you like best about Microsoft Defender for Identity?

Security on cloud services like azure, average performance on a windows machine Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

Slow to use on a local windows system Review collected by and hosted on G2.com.

Verified User in Information Technology and Services
UI
Verified User in Information Technology and Services
Mid-Market (51-1000 emp.)
"Microsoft ATA - Best threat tool for Active Directory"
4/5
What do you like best about Microsoft Defender for Identity?

Provisioning by Microsoft makes it fully compatible with active directory. You can easily see suspicious ldap accesses for onpremies. I like that it can be used without allocating a serious budget. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

The initial installation phase can be a bit complicated, but once installed it works fine. Review collected by and hosted on G2.com.

Sumit K.
SK
Sumit K.
Cloud Security
Enterprise (> 1000 emp.)
"Microsoft Defender - AV"
4.5/5
What do you like best about Microsoft Defender for Identity?

- I like this product very much since it provides robust detection capabilities for advanced threats, including lateral movement, identity compromise, and reconnaissance activities within a network.

- It is quite easy to integrate compared to other products. Integration with other Microsoft security products like Microsoft Sentinel, Endpoint Defender, etc., allows for a unified security approach.

- It has also helped with zero-day attacks and provides an easy way (GUI) of understanding threat patterns for analysis.

- It provides regular updates and keeps our system protected from attacks, and for this reason, most companies have started moving to this provider.

- We can easily isolate the machine from the network if it is infected. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

Setting up and managing Microsoft Defender for Identity is a little bit complex and requires a good understanding of AD. It provides more false positive alerts compared to similar products. Review collected by and hosted on G2.com.

Raghav S.
RS
Raghav S.
Support Engineer
Enterprise (> 1000 emp.)
Business partner of the seller or seller's competitor, not included in G2 scores.
"Best tool for cybersecurity team"
4.5/5
What do you like best about Microsoft Defender for Identity?

It's basically quite precisely working on endpoints without any hassle and keep the workload managed. IAM team has everything in front of the dashboard. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

It's sometimes hard to detect from cloud side as it provides false positives alarms as well. So Microsoft have to remove these bugs in future patches. Also it does not identify the real threats sometimes. Review collected by and hosted on G2.com.

Maria R.
MR
Maria R.
Procurement analyst
Enterprise (> 1000 emp.)
"Good security software"
4/5
What do you like best about Microsoft Defender for Identity?

This was the most reliable security barrier that the company had, personally as a user it was quite relaxing to know that the information was safe and there were different controls to access the information, it was also easy and fast to use. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

As a user of the software I have no negative comments about the software, I had no complications at the time of entering the information, the software was fast to perform the entry. Review collected by and hosted on G2.com.

Mohammad A.
MA
Mohammad A.
Small-Business (50 or fewer emp.)
"Microsoft Defender for Identity is a requirement in today's world"
4.5/5
What do you like best about Microsoft Defender for Identity?

Microsoft Defender for Identity offers several advantages. It utilizes advanced analytics and machine learning to monitor user behavior, identify suspicious activities, and promptly detect threats. It provides a comprehensive view of user activities and generates alerts when potential security risks are detected, allowing for quick response and investigation. Furthermore, the integration with other Microsoft security solutions, such as Azure Active Directory, enhances the overall security posture of organizations. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

Microsoft Defender for Identity is a robust security tool. However, there are several important factors to consider. Firstly, the initial setup and configuration can be intricate, requiring a comprehensive understanding of the environment and the risks associated with identities. Additionally, smaller organizations may need to take into account the cost involved as this solution is part of the Microsoft Defender suite, which entails licensing and subscription fees. Review collected by and hosted on G2.com.

Eugene T.
ET
Eugene T.
Service Manager
Small-Business (50 or fewer emp.)
"Microsoft Defender Protection"
5/5
What do you like best about Microsoft Defender for Identity?

The best feature from Microsoft Defender is the Threat Detection and easy integration into the 365 tenancy. This keeps everything under one portal and makes life so much easier. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

Cost is the main concern when it goes to this, while it is competitive to the market and similar products, it's still the main factor why not all of our companies are using the product. Review collected by and hosted on G2.com.

SS
Steven S.
CEO
Small-Business (50 or fewer emp.)
"On-premises Advanced Security Analytics"
3.5/5
What do you like best about Microsoft Defender for Identity?

Proprietary network parsing algorithm that is designed to capture and parse network traffic across multiple protocols like DNS, RPC, Kerberos, NTLM and others. Review collected by and hosted on G2.com.

What do you dislike about Microsoft Defender for Identity?

ATA is going to be sunset for Defender for ID that is hosted through the cloud. Review collected by and hosted on G2.com.

Questions about Microsoft Defender for Identity? Ask real users or explore answers from the community

Get practical answers, real workflows, and honest pros and cons from the G2 community or share your insights.

mochi f.
MF
mochi fajar
•
Last activity over 3 years ago

The best

Pricing Insights

Averages based on real user reviews.

Time to Implement

5 months

Return on Investment

16 months

Average Discount

10%

Microsoft Defender for Identity Comparisons
Microsoft Defender for Identity Features
Continuous Analysis
Behavioral Analysis
Data Context
Anomaly Detection
Incident Alerts
Activity Monitoring
Investigate
Monitoring
Misconfigurations
Remediation
Audit