Change Auditor 7.2 - Installation Guide


	NOTE: Previous versions of Change Auditor agents (6.0, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0 , and 7.1) can connect and work a Change Auditor 7.2 coordinator and client. Direct upgrades to the latest version are supported from versions 6.0, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, and 7.1.

The Change Auditor agent requires .NET 4.6.2. See the System statistics and facilities system requirements for the list of supported platforms.

To upgrade Change Auditor agents:

Open the client and select View | Deployment.

Select the agents to upgrade and click Install or Upgrade.


	NOTE: If you get an Access Denied status in the Deployment Results column, use the Credentials \| Set command to enter the proper credentials for installing agents.

Select one of the following options to schedule the deployment task:

•

Now (default)

•

When

If you select the When option, enter the date and time when you want the deployment task to initiate. Click OK to initiate or schedule the deployment task.

Post upgrade considerations

Querying the Change Auditor database directly is not supported

Querying the database directly is not supported. Any 5.x scripts previously created to manipulate the 5.x (or earlier) events do not work with Change Auditor 7.0 and later.

Data gateway service

The Data Gateway Service is no longer used in Change Auditor for capturing user logon activity events. If you had an earlier version of this service running, you can remove it.

Active Roles integration

If the Active Roles scripting module has been deployed in a previous Change Auditor version, refer to the following knowledge base article which details the process to move to the updated version of these scripting modules that are available in Change Auditor 6.x: https://support.quest.com/change-auditor/kb?k=119136

Exchange Online auditing templates

When you upgrade the client and coordinator from Change Auditor version 6.8 or earlier:

•

Previously created Exchange Online auditing templates are deleted from the database and no longer display in the client.

•

Agents previously assigned to audit Exchange Online stop auditing the tenant.


	NOTE: You can still search and report on previously captured events. All legacy events are shown in the Office 365 subsystem, or Office 365 Exchange Online Mailbox and Office 365 Exchange Online Administration facilities.

To capture new events and avoid losing any audited activities after an upgrade:

Upgrade an existing agent to the latest version.

Create an Office 365 auditing template.

Azure Active Directory and Office 365 auditing templates

As of Change Auditor version 7.0.4, additional Microsoft Graph API permissions are required to audit Azure Active Directory and Office 365. If you are updating from version 7.0.3 or older see Updating Azure Active Directory templates in the Office 365 and Azure Active Directory User Guide.

Installation Notes and Best Practices

This section contains notes and best practices that should be considered when installing Change Auditor. These notes and best practices are listed under the following topics:

•

Licensing Change Auditor products

•

Permissions

•

Other installation notes

•

Change Auditor for Windows File Servers

•

Change Auditor for Exchange

•

Change Auditor for Authentication Services

•

Change Auditor for SharePoint

•

Backup notes

•

Agent behavior notes

•

Client notes

•

ADAM (AD LDS) auditing

•

Change Auditor for SQL Server — SQL auditing

Licensing Change Auditor products

Upgrading Change Auditor

You can upgrade from the following versions of Change Auditor: 6.0, 6.5, 6.6, 6.7, 6.8, 6.9. 7.0., and 7.1

NOTE: As of Change Auditor 7.0 a new license is required for all modules.


	NOTE: The Change Auditor for Lync license has been deprecated. You must obtain and import a new Change Auditor for Skype for Business license file to continue auditing Skype for Business and Lync 2013.

Applying licenses for multiple Change Auditor products

The following Change Auditor products all require separate licenses which can be applied during the coordinator installation process:

•

Change Auditor for Active Directory

•

Change Auditor for Exchange

•

Change Auditor for Windows File Servers

•

Change Auditor for SQL Server

•

Change Auditor for Active Directory Queries