1. Pre-create the Change Auditor groups with the proper naming syntax in AD then Domain Admin privileges will not be required during installation of the Change Auditor coordinator. Then, you can install the coordinator using a domain user who is only a local Administrator account. The naming syntax must be correct and these groups must be created prior to installing the first coordinator in the domain. Any warnings during installation about not being able to create the Change Auditor groups can be safely ignored at that point and the installer will continue.
Domain group #1: ChangeAuditor Administrators – Default
Domain group #2: ChangeAuditor Operators – Default
Domain group #3: ChangeAuditor Web Shared Overview Users – Default
Note: 'Default' being the default Installation Name. Adjust accordingly based on the Installation Name you have selected.
2. To install the Change Auditor client you only require local Administrator privileges on the computer where you are installing it.
3. To deploy agents to domain controllers you require administrator privileges on the DCs, which by default is provided via Domain Admin credentials or by membership of the Built-In Administrators group in the domain. If you deploy the agents outside of Change Auditor via some other method, such as Group Policies, then Domain Admin or Built-In Administrator privileges are not required by Change Auditor.