--- title: Microsoft Defender for Identity Reviews meta_title: 'Microsoft Defender for Identity Reviews 2026: Details, Pricing, & Features | G2' meta_description: Filter 98 reviews by the users' company size, role or industry to find out how Microsoft Defender for Identity works for a business like yours. aggregate_rating: rating_value: 4.3 review_count: 98 scale: '5' date_modified: '2026-07-12' parent_category: name: User Threat Prevention url: https://www.g2.com/categories/user-threat-prevention --- # Microsoft Defender for Identity Reviews **Vendor:** Microsoft **Category:** [Identity Threat Detection and Response (ITDR) Software](https://www.g2.com/categories/identity-threat-detection-and-response-itdr) **Average Rating:** 4.3/5.0 **Total Reviews:** 98 ## About Microsoft Defender for Identity Microsoft Defender for Identity enables you to integrate Microsoft Defender for Identity with Defender for Endpoint, for an even more complete threat protection solution. While Defender for Identity monitors the traffic on your domain controllers, Defender for Endpoint monitors your endpoints, together providing a single interface from which you can protect your environment. ## Microsoft Defender for Identity Reviews ### 1. Powerful Security with Seamless Integration **Rating:** 4.5/5.0 stars **Reviewed by:** Devender K. | Jr. Solution Architect, Enterprise (> 1000 emp.) **Reviewed Date:** May 19, 2026 **What do you like best about Microsoft Defender for Identity?** I find Microsoft Defender for Identity very easy to use. I really like its seamless integration with Defender for Endpoint and other solutions like Defender for 365 or Defender XDR, allowing for flawless default integration. This makes it straightforward to see all the loggings and alerts in a single portal, which is great for better threat hunting and detection monitoring. The ease of initial setup and integration with our SIEM solution also stands out to me. **What do you dislike about Microsoft Defender for Identity?** I find it could be more flexible for raw data hunting. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** I use Microsoft Defender for Identity for securing access management, detecting malicious activities, and proactive monitoring without needing to write extensive detections. It integrates well with Defender for Endpoint and XDR, offering a single portal for logs and alerts, enhancing threat detection and monitoring. ### 2. Effective Identity Security **Rating:** 5.0/5.0 stars **Reviewed by:** Rawad A. | Project Management, Mid-Market (51-1000 emp.) **Reviewed Date:** April 28, 2026 **What do you like best about Microsoft Defender for Identity?** how deeply it integrates identity security into the broader Microsoft ecosystem while remaining easy to use and highly effective. **What do you dislike about Microsoft Defender for Identity?** Licensing can feel expensive outside E5, Best value only within Microsoft ecosystem, Limited customization for advanced detections, Some alerts need tuning to reduce noise. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** It benefits me by providing early, behavior‑based detection of suspicious activity tied to user identities, reducing manual investigation time and helping stop attacks before real damage occurs. ### 3. Microsoft defender user **Rating:** 4.5/5.0 stars **Reviewed by:** Paridhi M. | Data engineer , Information Technology and Services, Enterprise (> 1000 emp.) **Reviewed Date:** March 22, 2026 **What do you like best about Microsoft Defender for Identity?** Security on cloud services like azure, average performance on a windows machine **What do you dislike about Microsoft Defender for Identity?** Slow to use on a local windows system **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** Offers default protection from virus . No special anti-virus req ### 4. Microsoft ATA - Best threat tool for Active Directory **Rating:** 4.0/5.0 stars **Reviewed by:** Verified User in Information Technology and Services | Mid-Market (51-1000 emp.) **Reviewed Date:** January 23, 2024 **What do you like best about Microsoft Defender for Identity?** Provisioning by Microsoft makes it fully compatible with active directory. You can easily see suspicious ldap accesses for onpremies. I like that it can be used without allocating a serious budget. **What do you dislike about Microsoft Defender for Identity?** The initial installation phase can be a bit complicated, but once installed it works fine. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** Monitoring and analyzing suspicious ldap sessions is very useful in environments using Active Directory as central authentication. We can also forward the logs to a syslog application. ### 5. Microsoft Defender - AV **Rating:** 4.5/5.0 stars **Reviewed by:** Sumit K. | Cloud Security, Enterprise (> 1000 emp.) **Reviewed Date:** July 17, 2024 **What do you like best about Microsoft Defender for Identity?** - I like this product very much since it provides robust detection capabilities for advanced threats, including lateral movement, identity compromise, and reconnaissance activities within a network. - It is quiet easy integration compare to other product like integration with other Microsoft security products like Microsoft Sentinel, Endpoint defender etc allows for a unified security approach. - It has also helped on zero day attack and provide easy way (GUI) of understanding threat pattern for analysis. - It provides regular update and keep our system prevented from the attack and due to this reason most of company started moving to this provide. - We can easily isolate the machine from the network if machine is infected **What do you dislike about Microsoft Defender for Identity?** Setting up and managing Microsoft Defender for Identity are little bit complex and it require a good understanding on AD. It provides more false positive alert compare to similar products. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** It helps us on security investigation by providing the detailed incident information, including user activity, timelines etc. It also provide the sequence of events, facilitating faster and more accurate investigations and responses.This makes easy for investigation and reduce 50% work. It helps us on making threat detection pattern in order to block the file execution. ### 6. Best tool for cybersecurity team **Rating:** 4.5/5.0 stars **Reviewed by:** Raghav S. | Support Engineer, Enterprise (> 1000 emp.) **Reviewed Date:** May 15, 2023 **What do you like best about Microsoft Defender for Identity?** It's basically quite precisely working on endpoints without any hassle and keep the workload managed. IAM team has everything in front of the dashboard. **What do you dislike about Microsoft Defender for Identity?** It's sometimes hard to detect from cloud side as it provides false positives alarms as well. So Microsoft have to remove these bugs in future patches.Also it does not identify the real threats sometimes. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** Microsoft defender for identity helps in identifying the ongoing issues with Windows devices facing and keeping them compliant without any external support. Cybersecurity team requires to be updated all the time with new threats and vulnerabilities. ### 7. Good security software **Rating:** 4.0/5.0 stars **Reviewed by:** Maria R. | Procurement analyst, Enterprise (> 1000 emp.) **Reviewed Date:** October 27, 2023 **What do you like best about Microsoft Defender for Identity?** This was the most reliable security barrier that the company had, personally as a user it was quite relaxing to know that the information was safe and there were different controls to access the information, it was also easy and fast to use. **What do you dislike about Microsoft Defender for Identity?** As a user of the software I have no negative comments about the software, I had no complications at the time of entering the information, the software was fast to perform the entry. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** The drawback that the software solved was to create a certain barrier for the information to keep confidential information secure, the login of each person's users to be non-transferable and secure. ### 8. Microsoft Defender for Identity is a requirement in today's world **Rating:** 4.5/5.0 stars **Reviewed by:** Mohammad A. | Small-Business (50 or fewer emp.) **Reviewed Date:** July 18, 2023 **What do you like best about Microsoft Defender for Identity?** Microsoft Defe­nder for Identity offers se­veral advantages. It utilizes advance­d analytics and machine learning to monitor user be­havior, identify suspicious activities, and promptly dete­ct threats. It provides a comprehe­nsive view of user activitie­s and generates ale­rts when potential security risks are­ detected, allowing for quick re­sponse and investigation. Furthermore­, the integration with other Microsoft se­curity solutions, such as Azure Active Directory, e­nhances the overall se­curity posture of organizations. **What do you dislike about Microsoft Defender for Identity?** Microsoft Defe­nder for Identity is a robust security tool. Howe­ver, there are­ several important factors to consider. Firstly, the­ initial setup and configuration can be intricate, re­quiring a comprehensive unde­rstanding of the environment and the­ risks associated with identities. Additionally, smalle­r organizations may need to take into account the­ cost involved as this solution is part of the Microsoft Defe­nder suite, which entails lice­nsing and subscription fees. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** As a professional focuse­d on security and safeguarding user ide­ntities, I have found Microsoft Defe­nder for Identity to be an invaluable­ solution. It effectively de­tects and responds to threats, e­nsuring proactive protection for both user ide­ntities and my organization's environment. ### 9. Microsoft Defender Protection **Rating:** 5.0/5.0 stars **Reviewed by:** Eugene T. | Service Manager, Small-Business (50 or fewer emp.) **Reviewed Date:** August 23, 2023 **What do you like best about Microsoft Defender for Identity?** Th best feature from Microsoft Defender is the Threat Detection and easy intergration into the 365 tenancy. This keeps everything under one portal and makes life so much easier. **What do you dislike about Microsoft Defender for Identity?** Cost is the main concern when it goes to this, while it is competive to the market and similar products, its still the main factor why not all of our companies are using the product. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** It helps with email and threat protection. It keeps our network secure from cyber attacks at the workstation and user level. I ticks our cyber compliance policy. ### 10. On-premises Advanced Security Analytics **Rating:** 3.5/5.0 stars **Reviewed by:** Steven S. | CEO, Small-Business (50 or fewer emp.) **Reviewed Date:** February 23, 2023 **What do you like best about Microsoft Defender for Identity?** Proprietary network parsing algorithm that is designed to capture and parse network traffic across multiple protocols like DNS, RPC, Kerberos, NTLM and others. **What do you dislike about Microsoft Defender for Identity?** ATA is going to be sunset for Defender for ID that is hosted through the cloud. **What problems is Microsoft Defender for Identity solving and how is that benefiting you?** Microsoft is providing a solution that addresses insider threats. ## Microsoft Defender for Identity Discussions - [The best](https://www.g2.com/discussions/36626-the-best) - 1 comment, 1 upvote - [View Microsoft Defender for Identity pricing details and edition comparison](https://www.g2.com/products/microsoft-defender-for-identity/reviews/microsoft-defender-for-identity-review-7744935?section=pricing&secure%5Bexpires_at%5D=2026-07-22+16%3A33%3A43+-0500&secure%5Bsession_id%5D=29f4b65d-8294-4583-9a91-b7b34c263a83&secure%5Btoken%5D=a1d3d8bb1d4bc0e0f4957e5ab252d1fb37cefcb4b2242c09f9cd60f8fa6131d9&format=llm_user) ## Microsoft Defender for Identity Features **Monitoring** - Investigate - Monitoring - Misconfigurations - Integrate - Visability **Agentic AI - User and Entity Behavior Analytics (UEBA)** - Autonomous Task Execution - Multi-step Planning - Proactive Assistance - Decision Making **Analysis** - Continuous Analysis - Behavioral Analysis - Data Context - Activity Logging **Remediation** - Remediation - Audit **Detection** - Anomaly Detection - Incident Alerts - Activity Monitoring ## Top Microsoft Defender for Identity Alternatives - [CrowdStrike Falcon Endpoint Protection Platform](https://www.g2.com/products/crowdstrike-falcon-endpoint-protection-platform/reviews) - 4.6/5.0 (416 reviews) - [Falcon Identity protection](https://www.g2.com/products/falcon-identity-protection/reviews) - 4.1/5.0 (13 reviews) - [SentinelOne Singularity Endpoint](https://www.g2.com/products/sentinelone-singularity-endpoint/reviews) - 4.7/5.0 (195 reviews)