Chat now with support
Chat mit Support

Change Auditor - For Advanced Users 7.1.1 - Technical Insight Guide

Change Auditor Services Change Auditor licensing processes Component Start-up Considerations Change Auditor network communications Coordinator internal tasks Registry Settings Change Auditor built-in fault tolerance Change Auditor protection Database Considerations Account exclusions best practices

User counts

The coordinator determines maximum licensed users by comparing the value associated with the component license to the total count of users in each domain. The coordinator does this by issuing LDAP queries to Active Directory using specific filters for a precise count.

Generic User Count Query (for Active Directory, File System, SQL Server, EMC, NetApp, SharePoint, Skype for Business, Logon Activity User licensing):

(&(objectCategory=Person)(objectClass=user)(userAccountControl:1.2.840.113556.1.4.803:=512)(!userAccountControl:1.2.840.113556.1.4.803:=2))

Mail Enabled User Count Query (for Exchange licensing including Office 365 Exchange Online):

(&(samAccountType=805306368)(|(&(!userAccountControl:1.2.840.113556.1.4.803:=2)(msExchHomeServerName=*))(&(userAccountControl:1.2.840.113556.1.4.803:=2)(msExchMasterAccountSid=*))))

Workstation Installation Count (for Logon Activity licensing):

Workstation counts are based on the actual number of workstations harvested in the topology.

 

Component Start-up Considerations

This section describes installation notes and best practices:

•
Start up delays

Start up delays

When set to ‘false’ the GeneratePublisherEvidence setting is used to bypass digital signature verification for programs on start-up which allows for faster start up time. This is set to false by default for the following components in Change Auditor: Coordinator, Windows Client, Agent plug-in for VMWare auditing, Coordinator Configuration and Coordinator Status in the system tray.

If required, you can change this setting to 'true' to allow digital signatures to be verified, by modifying the following files:

Component
File

Coordinator

Program Files\Quest\ChangeAuditor\Service\ChangeAuditor.Service.exe.config

Windows Client

Program Files\Quest\ChangeAuditor\Client\ChangeAuditor.exe.config

Agent Plug-in for VMWare auditing

Program Files\Quest\ChangeAuditor\Agent\Plug-in for VMWare\VMWarePluginCA.exe.config

Coordinator Configuration

Program Files\Quest\ChangeAuditor\Service\ConfigureDatabase.exe.config

Coordinator Status

Program Files\Quest\ChangeAuditor\Service\CoordinatorTray.exe.config

Modify the configuration file as follows to change the setting to ‘true’:

<configuration>

<runtime>

<generatePublisherEvidence enabled="true"/>

</runtime>

</configuration>

Change Auditor network communications

This section explains the network communications used by Change Auditor including a description of how it uses Service Connection Points (SCPs) to locate the coordinator, the listening ports used for communication between the Change Auditor services, and the network encryption used to secure sensitive information.

•
Service Connection Points
•
Ports and protocols
•
Network encryption
Verwandte Dokumente

The document was helpful.

Bewertung auswählen

I easily found the information I needed.

Bewertung auswählen