The Add Agents, Domains, Sites dialog is displayed when Add With Events is clicked in the Where search properties tab. This dialog contains a list of all the agents, domains, and sites that have an event associated with it in the Change Auditor database.
To include an agent, domain, or site in your search query, select one or more items from the data grid at the top of the dialog and click Add to add the items to the selection list. After you have selected all the items to include in your search, click OK to save your selections and close the dialog.
This dialog contains the following information and controls:
Data grid
The data grid displays a list of all the agents, domains, and sites that have an event associated with it in the Change Auditor database. For each object listed, the following information is displayed:
Selection list
The list box at the bottom of this dialog displays the agents, domains, and sites selected for inclusion in the search definition. That is, only the objects listed are searched for changes. Use the buttons located above this list box to add or remove an object:
|
• |
Add — Select an item from the data grid and click Add to add it to the selection list box. |
|
• |
Remove — Select the object to remove from the selection list and click Remove. |
Add Wildcard Expression
Click this button to display the Add Where dialog where you can enter a wildcard expression to use to search for an agent (NetBIOS name), domain, or site.
On the Add Where dialog:
By default, the wildcard expression is used to search for an agent. To search for a domain or site, select the Domain or Site option.
An Add Container dialog is displayed when one of the following buttons are used on the What search properties tab (Searches page or the Purge Options page in the Purge Jobs wizard):
From this dialog, select the Active Directory, Exchange, or ADAM (AD LDS) objects to include in the search.
A similar dialog, Choose the Agents, Domains, or Sites to Include dialog is displayed when the Add button is used on the Where tab. When accessed from the Where tab, use this dialog to locate and select an individual agent, domain or site to include in the search.
The following information and controls are included on this dialog:
Scope
To define the scope of coverage, select one of the following options:
|
• |
All Active Directory Objects ( All Exchange Objects or All ADAM (AD LDS) Objects) — select this option to include all objects (Default when Add is used) |
|
• |
This Object — select this option to include the selected object only (Default when Add With Events is used) |
|
• |
Members of this group - select this option to show changes made to users in a specified group. Nested groups are not supported. |
Actions
The Actions check boxes allow you to define what types of actions to include in the search definition.
By default, All Actions is selected meaning that all the activity associated with the object is included. However, you can clear the All Actions option and select individual options to include specific actions in your search definition. The options available are:
|
▪ |
All Actions — select this option to include when any of the following actions occur (Default) |
|
▪ |
Add Attribute — select this option to include when an attribute is added |
|
▪ |
Rename Object — select this option to include when an object is renamed |
|
▪ |
Add Object — select this option to include when an object is added |
|
▪ |
Delete Object — select this option to include when an object is deleted |
|
▪ |
Move Object — select this option to include when an object is moved |
|
▪ |
Other — select to include other types of activities against the selected object |
The Transport check boxes allow you to specify the type of transport protocol used to secure Active Directory changes that are initiated through an AD query.
By default, All Transports is selected. However, you can clear the All Transports option and select the individual options to include specific transports. The options available are:
|
▪ |
All Transports - select to include LDAP operation or LDAP queries regardless of the transport protocol used (Default) |
|
▪ |
SSL/TLS - select to include LDAP operation or LDAP queries that are secured using SSL or TLS technology |
|
▪ |
Kerberos- select to include LDAP operation or LDAP queries that are signed using Kerberos-based encryption |
|
▪ |
Simple Bind - select to include LDAP operation or LDAP queries that are secured using simple bind authentication (neither SSL\TLS or Kerberos used) |
|
▪ |
Port - select to identify a specific port used for communication |
|
|
NOTE: When you clear the All Transports check box and select both the SSL/TLS and Kerberos check boxes, only AD queries using both of these transport protocols are included in the search results. |
Directory Object Picker
If you have selected a scope other than the All Active Directory Objects, the directory object picker is enabled allowing you to select the objects to include in the search definition. Use either the Browse or Search page to search your environment to locate and select the directory objects to include.
If required, use the Forest drop-down box to select in which forest the objects reside. Foreign agent forests may require foreign forests credentials which can be entered on the Credentials Required dialog.
Use the Options page to view or modify the search options used to retrieve directory objects.
See Directory object picker for more information about using the Browse, Search, or Options page of the Directory Object Picker.
You can also select Import Objects to import a .csv (comma separated value) file containing a list of directory objects. Using this list, you can specify object names and optional values for the search criteria. You can use the * wildcard character to match any string of zero or more characters when specifying the Name values.
The import will fail and an error message will be displayed if any errors are detected with the column names or specified values.
|
|
|
|
Name (Required) |
The name of the directory object to import. Name values must be specified in canonical name format.
Examples:
Column: Name
Values:
|
|
Actions (Optional) |
Possible values include: Add Attribute, Delete Attribute, Modify Attribute, Rename Object, Add Object, Delete Object, Move Object or Other.
When specifying multiple values they must be separated by the Pipe character '|'.
Examples:
Columns: Name,Actions
Values:
|
|
Transports (Optional) |
Possible values include SSL/TLS, Kerberos or Simple Bind.
When specifying multiple values they must be separated by the Pipe character '|'.
Examples:
Columns: Name,Actions,Transports
Values:
|
|
Port (Optional) |
The number of the required port.
Examples:
Columns: Name,Actions,Transports,Port
Values:
|
Data Grid
The data grid replaces the directory object picker when the Add With Events option is selected. This grid displays a list of all the objects that have an audited event associated with it in the Change Auditor database.
|
|
NOTE: The data grid is displayed when Grid View is selected at the top of the Choose the Agents, Domains, or Sites to Include dialog and the Select the agent that hosts the ADAM/AD LDS instance dialog. This data grid displays a list of the agents located within your environment. |
Wildcard expression fields
When the This Object scope option is selected, the wildcard expression fields are enabled. Use the wildcard expression fields to specify the expression to use to search for Active Directory (or Exchange) objects (Object Name column in Search Results grid).
For example, LIKE *admin* finds all Active Directory (or Exchange) objects that contain 'admin' anywhere in their name.
|
3 |
Click Add to add the wildcard expression to the Selected Objects list at the bottom of the dialog. |
Selected objects list
The list box at the bottom of this dialog displays the objects selected for the search definition. That is, only the objects listed are included in the search (or excluded from the search if the Exclude the Above Selection(s) is selected). Use the buttons located above this list box to add, remove, or update an object:
|
▪ |
Add - Click the Add button to add the selected object to the search definition. |
|
▪ |
Remove - From the Selected objects list, select the object to remove, and click Remove. |
|
▪ |
Update Scope, Action(s) - Select an object in the list, modify the scope or actions as required, then click Update Scope, Action(s to apply the changes made. |
|
|
NOTE: The Update Scope, Action(s) button does not display on the Choose the Agents, Domains, or Sites to Include dialog. These buttons are not displayed on the Select the agent that hosts the ADAM/AD LDS instance dialog; click OK to save your selection. |
Exclude the Above Selection(s)
Select this option to exclude the selected directory objects from the search. When this check box is selected, Change Auditor returns events generated in all directory objects except those listed in the Selected Objects list.Runtime Prompt
Select the Runtime Prompt check box to prompt for the Active Directory/Exchange/ADAM(AD LDS) objects to include whenever the search is run. That is, when Run is selected, the appropriate Add Container dialog is displayed allowing you to select the containers to search.
|
|
NOTE: When Runtime Prompt is selected, the Active Directory, Exchange, or ADAM (AD LDS) option is disabled on the Add tool bar buttons on the What tab. |
