Active Administrator 8.7 - Installation Guide

Chat now with support

Applying a license file Using a passphrase Setting the Active Administrator database Setting the Active Administrator archive database Configuring purge and archive settings Storing Active Administrator data Setting up features and the owner Configuring active template delegation enforcement Configuring group policy history Configuring Active Directory backups Configuring Active Administrator users Configuring service accounts Connecting to System Center Operations Manager and Enabling SNMP Notifications Reviewing selections

Installing Active Administrator console Setting up the console

Setting up auditing on domain controllers Installing audit agents Creating alerts

Setting up workstation logon auditing

Deploying the workstation logon audit agent Enabling the default port

Using Active Administrator

Appendix: Active Administrator Server Manager

Starting the Active Administrator Server Manager Managing the Active Administrator Foundation and Data Services

Updating Active Administrator licenses

Managing Security

Managing the passphrase Managing Active Administrator file security Managing Active Administrator database security Recovering from a lost passphrase

Managing Notification Services Web Server Configuration

Configuring Active Administrator users

Active Administrator® users have unrestricted access to the Active Administrator Console. By default, the user installing and running the configuration wizard is automatically considered an Active Administrator user.


	NOTE: Upon initial installation, the Domain Admins group is added automatically to the list. If you remove the Domain Admins group from the list and do not add any groups or users, the Domain Admins group is added automatically the next time you start the configuration wizard. After you complete the configuration wizard, you can use the Active Administrator Console to manage users by selecting Configuration \| Role Based Access.

To configure Active Administrator users

To add additional users, click Add, find and select users, click OK.

Click Next. See Configuring service accounts.

Configuring service accounts

The Domain Administrator account provides the necessary permissions for the Active Administrator foundation and notification services to operate properly.


	NOTE: After you complete the configuration wizard, use the AA Server Manager to manage service account logons.

To configure service accounts

Type a name for a group/user with domain administrator rights, or browse to locate a group/user.

Type the account password.

The default service port number is 15600. To change the port number, type a value.

To use the same account for the notification service, select the check box. Otherwise, type or browse for an account with domain administrator rights, and type the password.

Click Next.

If you have a license for the Active Directory Health module, see Connecting to System Center Operations Manager and Enabling SNMP Notifications. Otherwise, see Reviewing selections.

Connecting to System Center Operations Manager and Enabling SNMP Notifications

If you have a license for the Active Directory Health module and are using Microsoft® System Center Operations Manager (SCOM), you can choose to deploy the Quest® Active Administrator® management pack, which establishes a connection to SCOM and enables Active Directory Health alerts from the Active Directory Health Analyzer agent to appear in the Operations Manager Monitoring pane under the Quest Active Administrator folder. You can also enable SNMP alert notifications.


	NOTE: Only System Center 2016 Operations Manager is supported. NOTE: After you complete the configuration wizard, if you need to make any changes or if you skip this page, you can configure the SCOM connection and SNMP alert notifications in the Active Administrator console (Configuration \| SCOM and SNMP Settings). You also can restart the configuration wizard (Start \| AA Configuration Wizard). Page through the wizard until you reach the System Center Operations Manager and SNMP Notification page. NOTE: After you complete the configuration wizard, you can edit the System Center Operations Manager and SNMP Notification to configure which Active Directory Health Analyzer alerts to push to SCOM and SNMP.