Chat now with support
Chat mit Support

Change Auditor 7.4 - Release Notes

Skype for Business auditing

Table 32. Skype for Business auditing requirements
Components
Supported Versions

Change Auditor

Change Auditor for Skype for Business

Skype for Business

Microsoft Skype for Business Server 2019

The SQL Server versions where the Central Management Store (CMS) is deployed
•
Microsoft SQL Server 2016 SP2
•
Microsoft SQL Server 2017
•
Microsoft SQL Server 2019
•
Auditing is not supported on high availability and disaster recovery technologies such as SQL clusters and SQL Data mirroring.
•
Encrypted databases are not supported.

Required rights and permissions

Each Microsoft Skype for Business Server installation requires one template assigned to the agent running on the Central Management Store (CMS) SQL Server. Ensure that the credentials for the account specified when you create a template has the following permissions:

•
Permission to open a connection to the CMS database.
•
Read permissions on CMS tables and system tables.
•
VIEW SERVER STATE permission.

Additional requirements
•
To audit changes to security setting stored in Active Directory agents must be deployed to Active Directory domain controllers.
•
To audit changes to management data such as topology, configurations, and policies stored in the Central Management Store (CMS) database, agents must be deployed on the SQL server hosting the CMS.
•
Auditing is only supported for CMS databases in Full and Bulk logged recovery models. If the recovery model is not Full or Bulk, the transaction logs are cleaned up more aggressively and Change Auditor might not have time to capture the event resulting in missed events. An initial backup is required for both Full and Bulk logged databases before the transaction log can support auditing.

For more information

See the Change Auditor for Skype for Business User Guide.

 

Office 365 auditing

Office 365 auditing
Table 33. Office 365 auditing requirements
Component
Supported versions

Change Auditor

Change Auditor for Exchange

Change Auditor for SharePoint

Office 365 subscriptions

Change Auditor can audit the various Office 365 plans offered by Microsoft including business and enterprise subscriptions.

Windows PowerShell

Windows PowerShell version 5.1 on the computer where the agent is installed.

URLs

The agent configured to monitor Office 365 must be able to access the following URLs:

•
https://login.microsoftonline.com
•
https://manage.office.com
•
https://outlook.office365.com/powershell-liveid
•
https://graph.microsoft.com

Ports

•
A firewall outbound exception for remote port 443 (https) must exist for every agent computer used for Office 365 auditing. Port 443 is used for communicating with the Microsoft cloud.
•
If an agent is separated from the coordinator by a firewall, you must create a firewall exception for port 8373 on every agent computer to be used for Office 365 or Azure Active Directory auditing. Port 8373 is the default port that enables the coordinator to communicate with the agent. A different port number can, however, be specified by running Set-CAConfiguration command. For details, see the Change Auditor PowerShell Command Guide.

Required rights and permissions

•
When creating an Office 365 or Azure Active Directory auditing template that requires Azure web app creation the user will be prompted to log in with Azure administrator credentials.

For more information

See the Office 365 and Azure Active Directory Auditing User Guide.

Azure Active Directory auditing

Azure Active Directory auditing
Table 34. Azure Active Directory auditing requirements
Component
Supported versions

Change Auditor

Change Auditor for Active Directory

Azure Active Directory

Change Auditor can audit the Azure Active Directory that is included with an Office 365 subscription or the Azure Active Directory Basic subscription.

URLs

The agent configured to monitor Azure Active Directory must be able to access the following URLs:

•
https://login.microsoftonline.com
•
https://graph.microsoft.com

Ports

•
443 (HTTPS) — for the agent to connect to the Azure Active Directory.
•
8373 — for the Change Auditor coordinator service to connect to the agent computer.

Required rights and permissions

•
When creating an Azure Active Directory auditing template that requires Azure web app creation, the user is prompted to log in with Azure administrator credentials.

Synchronized environments

When auditing Azure Active Directory in a synchronized environment, Change Auditor provides more event details by mapping identities from on-premises directories with Azure Active Directory.

The following conditions must be met for Change Auditor to perform the mapping:

•
Synchronization performed with Azure Active Directory Connect (AD Connect).
•
Azure AD Connect synchronization process is active in your on-premises environment and directory sync is active in your cloud environment.
•
An Azure Active Directory auditing template has been created to audit your online environment that is being synchronized with on-premises Active Directory.
•
The agent that is specified in the auditing template, must be a member server of the forest that is being synchronized with the Azure Active Directory.

When Federation with AD FS is used as the single sign-on method, Azure logon events will no longer be generated since the authentication is done by the on-premises AD FS instance.

For more information

See the Change Auditor for Active Directory User Guide.

Product licensing

As of Change Auditor 7.0 a new license key is required. Please obtain the new key before installing the new release. To obtain a new key, refer to the License Key Upgrade page.

You will need the license number from each license that is applied. To get this information, select the license in the License Manager and choose Details.

If you purchased multiple Change Auditor products, you only need one instance of the Change Auditor product. The license keys determine what features are enabled and disabled in the product.

The following products require separate licenses which can be applied during the coordinator installation process:

•
Change Auditor for Active Directory
•
Change Auditor for Active Directory Queries
•
Change Auditor for EMC
•
Change Auditor for Exchange
•
Change Auditor for Logon Activity User (to capture logon activity from server agents)
•
Change Auditor for Logon Activity Workstation (to capture logon activity from workstation agents)
•
Change Auditor for Skype for Business
•
Change Auditor for NetApp
•
Change Auditor for SharePoint
•
Change Auditor for SQL Server
•
Change Auditor for Windows File Servers

If you are licensing multiple Change Auditor products, you can apply the licenses in any order but must apply all the licenses provided.

To enable a trial or purchased commercial license:
1
Copy the Change Auditor license files to your desktop, or other convenient location.
2
If you have not installed the Change Auditor components, browse to the folder where the Change Auditor package was downloaded, and run the Quest Change Auditor Coordinator (x64).msi file to open the Change Auditor Coordinator Setup wizard.
3
During the coordinator installation, you are prompted to locate the Change Auditor license files. Click Open License Dialog to locate and apply a license.
4
Review your installed licensed components by right-clicking the coordinator icon in the system tray and selecting Licensing or by selecting Help | About | Licensing in the client.
To apply licenses after initial installation:

If you purchased more Change Auditor products after the initial installation, you can apply new licenses from the coordinator icon in the system tray.

1
Right-click the coordinator icon in the system tray and select Licensing.
2
From the Licenses tab, click Select License.
3
Locate and apply the new product licenses.
The new licenses are applied once the configuration is updated.
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen