Skip to main content

Netwrix Auditor Licensing FAQs

What Is the Netwrix Auditor Licensing Model?

By default, Netwrix Auditor applications are licensed based on subscription. A subscription license enables you to use Netwrix Auditor for a certain period. The subscription is purchased on a monthly or yearly basis, and it includes product updates and technical support.

What License Counts Are Used in Netwrix Auditor Licenses?

Most Netwrix Auditor applications are licensed per enabled AD user. Review the tables below for more information:

On-Premises

ApplicationsLicense Counter
Netwrix Auditor for Active DirectoryPer enabled AD user
Netwrix Auditor for EMCPer enabled AD user
Netwrix Auditor for NetAppPer enabled AD user
Netwrix Auditor for Network DevicesPer device
Netwrix Auditor for Nutanix FilesPer enabled AD user
Netwrix Auditor for Oracle DatabasePer processor
Netwrix Auditor for SQL ServerPer enabled AD user
Netwrix Auditor for VMwarePer enabled AD user
Netwrix Auditor for Windows File ServersPer enabled AD user
Netwrix Auditor for Qumulo File ServersPer enabled AD user
Netwrix Auditor for Synology File ServersPer enabled AD user
Netwrix Auditor for Windows ServerPer enabled AD user
or
Per server
Netwrix Auditor for Access ReviewsPer enabled AD user

Cloud

ApplicationsLicense Counter
Netwrix Auditor for Microsoft Entra ID (formerly Azure AD)Per enabled Microsoft Entra ID user

Hybrid Licenses

ApplicationsLicense Counter
Netwrix Auditor for ExchangePer enabled user mailbox on-premises and in the cloud
Netwrix Auditor for SharePointPer enabled Microsoft Entra ID user
Netwrix Auditor for MS TeamsPer enabled Microsoft Entra ID user

How Can I Count Enabled AD Users?

To count the number of licenses, you should provide the number of enabled AD user accounts, that is, calculate the number of your Active Directory user accounts in the Enabled state. Follow the instructions provided in this Netwrix Auditor Knowledge Base article: Determining the Number of Enabled Active Directory User Accounts. Then round up the calculation result to reserve some space for growth and to prevent scalability issues. For example:

  • If the calculation script returns 214, round up this value to 220 when applying for the license.
  • If the calculation script returns 1841, round up this value to 2000 when applying for the license.

IMPORTANT:

  • Service accounts are also counted. The accounts under which the services run in your infrastructure are included in the license count and, eventually, in the cost of a license.
  • Deleted, disabled, group, or computer accounts are not included in the license count.
  • You can use either Omitallowedpathlist omit list to reduce user count by omitting certain OUs from being audited or specify omitted OUs in the Netwrix Auditor UI. You will not gain any information from these OUs; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: Reducing the Used Active Directory and Entra ID License Counts. For additional information on omit lists, refer to the following article: How to Use Omit Lists.

What Should I Provide for Netwrix Auditor for Network Devices Licensing?

You should provide the number of source IP addresses of your network devices. This count is used to estimate the number of licenses required to audit the Network Devices data source. To learn more, read the How to Count the Number of Your Network Devices in Your Configuration article: How to count the number of your network devices in your configuration?.

IMPORTANT: You should count all physical devices regardless of your forwarding configuration.

What Should I Provide for Netwrix Auditor for Oracle Database Licensing?

The licensing for Netwrix Auditor for Oracle Database is based on the number of processor licenses utilized by the entire Oracle Database deployment, that is, the number of processor licenses you purchased from Oracle. Oracle defines the number of processor licenses as follows: “The number of required licenses shall be determined by multiplying the total number of cores of the processor by a core processor licensing factor specified on the Oracle Processor Core Factor Table.”

If you are unsure how many Oracle processor licenses you have, check your processor type, find the corresponding factor in the Oracle Processor Core Factor Table, and multiply it by the number of CPU cores on your Oracle Database deployment. To obtain the number of CPU cores, go to the How to Count Number of CPU Cores on Your Oracle Database Deployment article: /docs/kb/auditor/system-administration/database-management/how-to-count-number-of-cpu-cores-on-your-oracle-database-deployment.

What Should I Provide for Netwrix Auditor for Windows Server Licensing?

Netwrix Auditor for Windows Server is licensed either by the number of enabled AD users or the total number of virtual and physical servers. Refer to the questions above for more information on how to count the number of AD accounts in the Enabled state. For per-server licensing, count and provide the total number of the servers (physical or virtual) you are going to monitor with Netwrix Auditor.

What Should I Provide for Netwrix Auditor for Microsoft Entra ID Licensing?

You should provide the number of enabled Microsoft Entra ID user accounts. Starting from version 9.96, guest/external users are not included in the license count. Follow the instructions outlined in the How to Determine the Count of Enabled Microsoft Entra ID Accounts article: /docs/kb/auditor/configuration-and-setup/microsoft-365-integration/determining-the-number-of-enabled-microsoft-entra-id-accounts.

You can use omitUPNlist.txt omit list to reduce user count by omitting certain user UPNs from being audited. You will not gain any information on these users; however, the amount of licenses will be reduced. For additional information on reducing the user count via Netwrix Auditor UI, refer to the following article: Reducing the Used Active Directory and Entra ID License Counts. For additional information on omit lists, refer to the following article: How to Use Omit Lists.

What Should I Provide for Netwrix Auditor for Exchange Licensing?

For the Exchange data source, Netwrix Auditor offers a convenient hybrid pricing model specifically designed for prospects with a hybrid Exchange (on-premises Exchange Server and Exchange Online) deployment. You can also have an on-premises-only or a cloud-only Exchange environment. To get a hybrid Exchange license, you need to provide the total number of user mailboxes, both on-premises and online.

For example, if you have 200 online mailboxes and 300 on-premises Exchange mailboxes, you need to purchase a license for 500 mailboxes.

To calculate the number of user mailboxes used in your Microsoft Office 365 tenants, refer to the guidelines presented in the article titled How to Count Number of Licenses Required for Auditing a Microsoft Office 365 Tenant: How to count number of licenses required for auditing a Microsoft Office 365 tenant?.

IMPORTANT: A user mailbox can be a personal mailbox, an Online Archive mailbox, or both. Shared and resource mailboxes do not count. For example, if an Exchange Online user has one personal mailbox and one Online Archive mailbox, this user will be counted as a single licensed object. If a user has no Online Archive mailbox but three personal mailboxes, this will be counted as three licensed objects.

What Should I Provide for Netwrix Auditor for SharePoint Licensing?

For the SharePoint data source, Netwrix Auditor offers a convenient hybrid pricing model specifically designed for prospects with a hybrid SharePoint (on-premises SharePoint and SharePoint Online) deployment. You can also have an on-premises-only or a cloud-only SharePoint environment. To get a hybrid SharePoint license, you need to provide the total number of AD users (both enabled AD users on-premises and cloud-only Microsoft Entra ID users).

For example, if you have 450 enabled on-premises AD users and 50 active Microsoft Entra ID users, you need to purchase a license for 500 users.

I’m Auditing SQL Servers Only, and the Licenses Window Shows That the License Was Exceeded Not Only for the SQL Server but Also for Active Directory and Others. Why?

When Netwrix Auditor is running, the number of enabled AD user accounts (license count that applies to the corresponding monitoring areas) is refreshed by the Netwrix Auditor component responsible for AD data collection. If this count is exceeded, your SQL Server audit gets out of compliance with the existing license. Moreover, you have no opportunity to start auditing any other data source that depends on this count (for example, VMware or Windows Server).

How Can I Obtain a License?

To obtain a proper license for your infrastructure, you should provide the corresponding counts to Netwrix. Then you will receive the license key to address your auditing needs, based on the numbers you provided. For evaluation purposes, you can use a free trial version of Netwrix Auditor that has a bundled trial license.

To update or add a license in Netwrix Auditor Console:

  1. Go to Settings > Licenses and click Update.
  2. In the dialog that opens, do one of the following:
    • Select Load from file, click Browse, and point to a license file received from your sales representative.
    • Select Enter manually and type in your company name, license count, and license codes.

To request more licensing information, please contact licensing@netwrix.com.

What Is Displayed in the License Window of the Product UI?

You can use the Licenses window to review the status of your current licenses, update them, and add new licenses. On the Netwrix Auditor main screen, click the Settings tile and then select Licenses. The window will look as shown below.

![Licenses window in Auditor UI showing license status and counts]./../0-images/ka0Qk000000DbzR_0EM4u000002PbUM.png)

Here:

  • The Total count field shows how many licensed objects (enabled AD users, processors, or mailboxes) are included in your current license. This number is displayed for each licensed monitoring area. If you are running a trial version, this field will show “Unlimited” for all data sources.
  • The Used licenses field shows the number of licensed objects counted at the moment.

NOTE: The number of used licenses is displayed only in the cells that correspond to the baseline data sources: Active Directory (and Microsoft Entra ID), Exchange, and Network Devices.

How Do I Remove License Information for an Unused Application?

You may choose to no longer audit a data source, and thus not renew the license for the corresponding application. Unused licenses do not need to be removed from Netwrix Auditor, with the exception of one special case. This case is upgrading a Netwrix Auditor installation that has some expired licenses. Most recent (9.95 and up) versions of Netwrix Auditor allow you to remove a license directly from the user interface. If you have an older version of Netwrix Auditor and need to remove an expired license as it blocks your upgrade, contact Netwrix Technical Support.