Change Auditor 7.4 - Installation Guide


	NOTE: Sometimes, you might need to pre-stage\create the ChangeAuditor Agents – <InstallationName> security group and manually add the configured workstation agent user account to the security group.

•

You can also use the Coordinator Credential Configurator to change between coordinator domains at any time after the agent is installed.


	NOTE: The Coordinator Credential Configurator application can be launched using the CoordinatorCredentialConfigurator.exe file in the agent installation folder on the workstation. The default agent installation location is: %ProgramFiles%\Quest\ChangeAuditor\Agent


	NOTE: If User Account Control is enabled, you may need to authorize the Coordinator Credential Configurator tool to use the required elevated permissions by right-clicking on the tool and selecting 'Run as administrator' option

Agent Comparison

There are a few client features that are not available for workstation agents. The following table displays the agent-related features that are available for server and workstation agents.

Table 6. Agent comparison

Page and Feature

Available for server agents?

Available for workstation agents?

Deployment Page

The Deployment page does not display non-member objects, such as ADAM workgroup servers or non-Active Directory workstations, because agents cannot be deployed to non-member objects using the Deployment tab.

Included in topology harvest

Yes

Install or Upgrade (deploy agent)

Yes

Advanced Options | Specify Agent Installation Location

Yes

Advanced Options | Specify a Custom Share on the Remote Server

Yes

Advanced Options | Launch ServiceStatusTray on startup

Yes

Advanced Options | Restart Agent on failure

Yes

New Servers | Enable Auto Deployment on New Servers

Yes

Overview Page

Agent Status Pane

•

Enterprise View (member objects)

•

Workstation View (member objects)

•

Other View (non-member objects)

•

<Domain> (member and non-member objects)

Yes

Count of Events Pane

•

Location (member and non-member objects)

Yes

Top Agent Activity Pane

•

All (member and non-member objects)

•

DCs (member objects)

•

Servers (member objects)

•

Workstations (member objects)

•

Others (non-member objects)

Yes

Search Properties Tabs

Agent Statistics Page

Included in Agent Statistics page

Yes

Start | Stop | Restart agent (member objects)

Yes

Start | Stop | Restart agent (non-member objects)

Set Agent Uninstalled

Yes

Hide | Show Uninstalled agents

View resource properties

Yes

Administration Tasks Page — Agent Configuration

Included in Agent Configuration page

Yes

Assign agent configurations

Yes

No
(Uses Default Configuration)

Configuration Setup dialog | System Settings

Yes

Yes
(From Default Configuration)

Configuration Setup dialog | File System settings
(Change Auditor for Windows File Servers, Change Auditor for EMC or Change Auditor for NetApp)

Yes

Configuration Setup dialog | AD Query settings
(Change Auditor for Active Directory Queries)

Yes

Configuration Setup dialog | Exchange settings
(Change Auditor for Exchange)

Yes

Agent system tray icon

Yes

NOTE: For workstation log management (such as Get Logs and View Agent Logs), the following must be enabled on the workstation:

•

Windows Management Instrumentation (WMI) in the firewall rule set (usually domain) on the workstation

•

Network Discovery and File Sharing

•

Remote Registry Service set to ‘Start Automatically’. By default, this service is stopped and set to ‘Manual’ for Windows 10.

Install an agent to audit ADAM (AD LDS) on workgroup servers

Change Auditor audits Active Directory Application Mode (ADAM) or Active Directory Lightweight Directory Services (AD LDS) events. This section provides information regarding the agent installation necessary for auditing ADAM (AD LDS) instances on workgroup servers.

Agent installation


	NOTE: An agent must be installed on the server where the ADAM (AD LDS) instance to audit resides.

To install agents to audit ADAM (AD LDS) on workgroup servers:

NOTE: A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers:

•

UDP port 137 (name services)

•

UDP port 138 (datagram services)

•

TCP port 139 (session services)

Copy the appropriate agent installer package from the Change Auditor service installation directory to the workgroup server to monitor. The default directory is %ProgramFiles%\Quest\ChangeAuditor\Service\ Change Auditor Agent (x64).msi.

Run the installer file on the workgroup server to open the Change Auditor Agent wizard which steps you through the installation.

Review the following table for additional requested information in this wizard. This table only covers unfamiliar information. It does not include all the wizard screens or field descriptions.

Table 7. Change Auditor Agent wizard
Active Directory Information screen On the Active Directory Information screen, enter the Active Directory information required for the agent to establish a coordinator connection.
Name of Active Directory Root Domain (domain.com)	Enter the DNS name (domain.com) of the root domain of Active Directory.
Account Name (domain\user)	Enter the name of the user (domain\user) that can find and connect to a Change Auditor coordinator in the Active Directory forest.
Account Password	Enter the password associated with the previously entered user account.
Installation Name screen The Installation Name screen prompts you to enter the installation name to identify the database to which the coordinator is to be connected. A workgroup agent must join an existing Change Auditor installation.
ChangeAuditor Installation Name	Enter an existing Change Auditor installation or click Browse to select from a list of existing installations.