Chat now with support
Chat mit Support

Change Auditor 7.3 - Installation Guide

Installation Overview Install Change Auditor Add Users to Change Auditor Security Groups Connecting to the Clients Deploy Change Auditor Agents Upgrade Change Auditor Installation Notes and Best Practices Deployment Options Workstation Agent Deployment Agent Comparison Install an agent to audit ADAM (AD LDS) on workgroup servers Windows Installer Command Line Options

Manual workstation agent deployment

When installed manually, the workstation agent installer must be run as an account with the local administrator account privileges and with elevated User Account Control (UAC) permissions.

* 
NOTE: Depending on the UAC policies (see User Account Control (UAC) Settings), elevated UAC permissions may require starting the installer using one of the following methods:
•
Shift + Right-click installer to select ‘Run as a different user’
•
From the Windows Task Manager, select File | Run New Task, browse and select the Change Auditor Workstation Agent installer file, and select the ‘Create this task with administrative privileges’ option, then click OK.
To manually install a workstation agent:
1
Copy the appropriate agent installer package from the Change Auditor service installation directory to the workstation to monitor. The default directory is %ProgramFiles%\Quest\ChangeAuditor\Service\Change Auditor Workstation Agent (x64).msi.
2
Run the installer file on the workstation to open the Workstation Agent Setup wizard which steps you through the installation.
3
If the computer is member of the local forest where coordinator resides, select This agent connects to a coordinator in the local forest. If the computer is a workgroup member or member of a foreign forest where no coordinator resides, select This agent connects to a coordinator in a foreign forest. For more information see Installing agents in a foreign forest.
4
The Installation Name screen prompts you to enter the installation name to identify the database where the coordinator is located. Click Browse to select the required installation.
5
Choose the destination folder and click Next.
6
Click Next to begin the installation.
User Account Control (UAC) Settings
•
UAC policies typically use different settings for the ‘Administrator’ account and other accounts with Administrative privileges, so it may be easier to run the Change Auditor Workstation Agent installer with elevated UAC permissions if the Administrator account is used.
•
General UAC elevation and prompt level configurations can be accessed through the Control Panel User Access Control configuration.

•
More specific UAC policies can be configured in the Local Security Policy or a Group Policy Object (where appropriate) to determine whether all Administrators or the built-in Administrator account are run in Admin Approval Mode, the elevation prompt level, whether the secure desktop is used for prompting, whether elevation is possible without prompting, and so forth.

Deploying workgroup agents (non-domain workstations)

•
A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers:
•
UDP port 137 (name services)
•
UDP port 138 (datagram services)
•
TCP port 139 (session services)
•
A routable network path must exist between the workgroup computer, domain controllers, and the coordinator servers. Name resolution of domain controllers and the coordinator servers is also required from the non-domain computer, whether DNS server configuration, NetBIOS/WINS configuration or local hosts file entries are used.
•
Agents must be deployed manually. See Manual workstation agent deployment.
•
During installation, the agent installer prompts for Active Directory domain and credential information to locate a coordinator and installation name.
•
When the first agent is installed on workgroup computer, a ChangeAuditor Agents - <InstallationName> security group is created. User accounts must be added to this security group to properly authenticate.
•
The agent installer allows you to add the domain user account to the ChangeAuditor Agents – <InstallationName> security group, if appropriate LDAP and network protocol access is available.
* 
NOTE: Sometimes, you might need to pre-stage\create the ChangeAuditor Agents – <InstallationName> security group and manually add the configured workstation agent user account to the security group.
•
You can also use the Coordinator Credential Configurator to change between coordinator domains at any time after the agent is installed.
* 
NOTE: The Coordinator Credential Configurator application can be launched using the CoordinatorCredentialConfigurator.exe file in the agent installation folder on the workstation. The default agent installation location is: %ProgramFiles%\Quest\ChangeAuditor\Agent
* 
NOTE: If User Account Control is enabled, you may need to authorize the Coordinator Credential Configurator tool to use the required elevated permissions by right-clicking on the tool and selecting 'Run as administrator' option

 

Agent Comparison

There are a few client features that are not available for workstation agents. The following table displays the agent-related features that are available for server and workstation agents.

 
Table 6. Agent comparison
Page and Feature
Available for server agents?
Available for workstation agents?
Deployment Page

The Deployment page does not display non-member objects, such as ADAM workgroup servers or non-Active Directory workstations, because agents cannot be deployed to non-member objects using the Deployment tab.

Included in topology harvest

Yes

Yes

Install or Upgrade (deploy agent)

Yes

Yes

Advanced Options | Specify Agent Installation Location

Yes

Yes

Advanced Options | Specify a Custom Share on the Remote Server

Yes

Yes

Advanced Options | Launch ServiceStatusTray on startup

Yes

No

Advanced Options | Restart Agent on failure

Yes

Yes

New Servers | Enable Auto Deployment on New Servers

Yes

No

Overview Page
Agent Status Pane
•
Enterprise View (member objects)
•
Workstation View (member objects)
•
Other View (non-member objects)
•
<Domain> (member and non-member objects)

 

Yes

No

Yes

Yes

 

No

Yes

Yes

Yes

Count of Events Pane
•
Location (member and non-member objects)

 

Yes

 

Yes

Top Agent Activity Pane
•
All (member and non-member objects)
•
DCs (member objects)
•
Servers (member objects)
•
Workstations (member objects)
•
Others (non-member objects)

 

Yes

Yes

Yes

No

Yes

 

Yes

No

No

Yes

Yes

Search Properties Tabs

Where Tab

Yes

Yes

Origin Tab

Yes

Yes

Agent Statistics Page
Included in Agent Statistics page

Yes

Yes

Start | Stop | Restart agent (member objects)

Yes

Yes

Start | Stop | Restart agent (non-member objects)

No

No

Set Agent Uninstalled

Yes

Yes

Hide | Show Uninstalled agents

Yes

Yes

View agent logs

Yes

Yes
(See Note below)

View resource properties

Yes

Yes

Administration Tasks Page — Agent Configuration
Included in Agent Configuration page

Yes

No

Assign agent configurations

Yes

No
(Uses Default Configuration)

Configuration Setup dialog | System Settings

Yes

Yes
(From Default Configuration)

Configuration Setup dialog | File System settings
(Change Auditor for Windows File Servers, Change Auditor for EMC or Change Auditor for NetApp)

Yes

No

Configuration Setup dialog | AD Query settings
(Change Auditor for Active Directory Queries)

Yes

No

Configuration Setup dialog | Exchange settings
(Change Auditor for Exchange)

Yes

No

Agent system tray icon

Yes

No

 
 
* 
NOTE: For workstation log management (such as Get Logs and View Agent Logs), the following must be enabled on the workstation:
•
Windows Management Instrumentation (WMI) in the firewall rule set (usually domain) on the workstation
•
Network Discovery and File Sharing
•
Remote Registry Service set to ‘Start Automatically’. By default, this service is stopped and set to ‘Manual’ for Windows 8.1 and 10.

Install an agent to audit ADAM (AD LDS) on workgroup servers

Change Auditor audits Active Directory Application Mode (ADAM) or Active Directory Lightweight Directory Services (AD LDS) events. This section provides information regarding the agent installation necessary for auditing ADAM (AD LDS) instances on workgroup servers.

Agent installation
* 
NOTE: An agent must be installed on the server where the ADAM (AD LDS) instance to audit resides.
To install agents to audit ADAM (AD LDS) on workgroup servers:
* 
NOTE: A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers:
•
UDP port 137 (name services)
•
UDP port 138 (datagram services)
•
TCP port 139 (session services)
1
Copy the appropriate agent installer package from the Change Auditor service installation directory to the workgroup server to monitor. The default directory is %ProgramFiles%\Quest\ChangeAuditor\Service\ Change Auditor Agent (x64).msi.
2
Run the installer file on the workgroup server to open the Change Auditor Agent wizard which steps you through the installation.
3
Review the following table for additional requested information in this wizard. This table only covers unfamiliar information. It does not include all the wizard screens or field descriptions.
Table 7. Change Auditor Agent wizard
Active Directory Information screen

On the Active Directory Information screen, enter the Active Directory information required for the agent to establish a coordinator connection.

Name of Active Directory Root Domain
(domain.com)

Enter the DNS name (domain.com) of the root domain of Active Directory.

Account Name (domain\user)

Enter the name of the user (domain\user) that can find and connect to a Change Auditor coordinator in the Active Directory forest.

Account Password

Enter the password associated with the previously entered user account.

Installation Name screen

The Installation Name screen prompts you to enter the installation name to identify the database to which the coordinator is to be connected. A workgroup agent must join an existing Change Auditor installation.

ChangeAuditor Installation Name

Enter an existing Change Auditor installation or click Browse to select from a list of existing installations.

Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen