サポートと今すぐチャット
サポートとのチャット

Change Auditor - For Advanced Users 7.0.3 - Technical Insight Guide

Change Auditor Services Change Auditor licensing processes Change Auditor network communications Coordinator internal tasks Registry Settings Change Auditor built-in fault tolerance Change Auditor protection Database Considerations Account exclusions best practices

Forest topology collection

Change Auditor maintains a view of Active Directory in the database. Each event that Change Auditor captures is linked with a forest, domain, or server (or workgroup server) found in the topology collection. When the coordinator service starts, the topology collection begins. The following Active Directory objects are collected and stored:

•
Domain Objects (crossref objects) found in CN=Partitions,CN=Configuration,<Forest Root Distinguished Name>
•
Site Objects (site objects) found in CN=Sites,CN=Configuration,<Forest Root Distinguished Name>
•
Exchange Servers (msExchExchangeServer objects) found in CN=Microsoft Exchange,CN=Services,CN=Configuration, <Forest Root Distinguished Name>
•
Server Objects (computer objects) – For each domain found, Change Auditor searches the domain for the following types of server objects:
•
Exchange 2010 and higher servers found in the following groups:
•
Exchange Install Domain Servers
•
Exchange Servers
•
All computer objects found using the following filter:
•
(&(objectCategory=computer)(|(operatingSystem=*Windows*))
* 
NOTE: If the operatingSystem field contains ‘server’, the computer is a server object. If the operatingSystem field does not contain ‘server’, the computer is a workstation object.

Group expansion

The group expansion scheduled task is for expanding nested membership of Active Directory groups that are referenced in searches (Who search criteria) or groups that are defined in the Member of Group feature. Group membership is recursively enumerated in order to determine nested group membership.

The refresh frequency can be configured using the Group Membership Expansion pane on the Coordinator Configuration page (Administration Tasks tab) of the client.

Alert processing

Change Auditor reports that have been alert enabled are executed on a scheduled basis determined by the user selected alert priority. After all the reports have been processed for alerting, Change Auditor alert transport tasks (SMTP, SNMP and WMI) send the alerts.

To set the priority for an alert, use the Alert tab (one of the Search Properties tab) on the Searches page of the client.

License check

The coordinator service performs a valid license check once every 5 minutes, or during service startup. For more information on the license check process, see Change Auditor licensing processes.

関連ドキュメント

The document was helpful.

評価を選択

I easily found the information I needed.

評価を選択