Active Administrator 8.6.2 - Installation Guide

Chatee ahora con Soporte

Applying a license file Creating a passphrase Setting the Active Administrator database Setting the Active Administrator archive database Configuring purge and archive settings Storing Active Administrator data Setting up the email server Setting up features and the owner Configuring active template delegation enforcement Configuring group policy history Configuring Active Directory backups Configuring Active Administrator users Configuring service accounts Connecting to System Center Operations Manager and Enabling SNMP Notifications Reviewing selections

Installing Active Administrator console Setting up the console

Setting up auditing on domain controllers Installing audit agents Creating alerts

Setting up workstation logon auditing

Deploying the workstation logon audit agent Enabling the default port

Using Active Administrator

Appendix: Active Administrator Server Manager

Starting the Active Administrator Server Manager Active Administrator Foundation and Data Services

SQL Full-Text Search

Web Server Configuration Managing Security

Managing the passphrase Managing file security Managing database security Recovering from a lost passphrase

Setting up the email server

The Active Administrator notification service sends automatic emails to specified recipients. On this page, identify the email server to use.


	NOTE: After you complete the configuration wizard, you can use the Active Administrator Console to modify the email server settings by selecting Configuration \| SMTP Settings.

To set up the email server

Type the name of the SMTP server that sends the alert emails.

Type the number of the TCP/IP port on which the SMTP server is listening.

If your SMTP server requires authentication, type the username and password in the SMTP User Name and SMTP Password boxes.

Select to use secure socket layer (SSL), if desired.

Type the email address that to appear in the From box of the alert email. By entering something meaningful, you can use the From box to filter your email.

Choose a format for the email.

Click Test Settings.

Click Next. See Setting up features and the owner.

Setting up features and the owner

On many tasks, an email is sent automatically to the Administrator’s email address. You also have the opportunity to enable or disable key features of Active Administrator®. If you disable a feature, you can enable it within the Active Administrator console.

To enable Active Administrator features and set the owner

Type a valid email address or accept the default.

By default, the listed Active Administrator features are enabled. To see an explanation of each feature, hover the cursor over the icon. Disable any feature you do not want.

NOTE: The first time you run the configuration wizard, the check boxes are enabled. The next time you run the configuration wizard, the check boxes are disabled, so you need to use Active Administrator Console to enable/disable the features.

•

Inactive Users and Computers
To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Inactive Accounts.

•

Change Your Password Reminder Policy
To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Password Policy.

•

Enable Account Expiration Notification
To modify the feature, finish the wizard, start Active Administrator Console, and select Security & Delegation | Account Expiration.

•

Active Directory Replication Monitoring
To modify the feature, finish the wizard, start Active Administrator Console, and select AD Infrastructure | Replication Monitoring.

•

Active Directory Health Assessment Reports
To modify the feature, finish the wizard, start Active Administrator Console, and select Settings | Assessment Report.

Click Next. See Configuring active template delegation enforcement.

Configuring active template delegation enforcement

Active Templates, which are used to grant specific sets of Active Directory® rights to an object, can be configured so that they are automatically reapplied if any of their permissions within the template are accidentally removed. Additionally, you can alert administrators automatically by email when an Active Template is repaired.


	NOTE: After you complete the configuration wizard, you can use the Active Administrator® Console to manage active template delegation enforcement by selecting Configuration \| Active Template Settings.

To configure active template delegation enforcement

By default, Active Administrator checks Active Template delegations every 30 seconds.

To disable the enforcement of Active Template delegations, clear the check box.

To send reports of broken templates to selected users by email, click Add to add email addresses to the list. To suppress the reports, clear the list of email addresses.


	NOTE: You must have configured the Email server to continue. If necessary, click Back to return to the Email Server Settings page. See Setting up the email server.

Click Next. See Configuring group policy history.

Configuring group policy history

You can set how often selected domain controllers are polled for Group Policy Object (GPO) changes. The polling interval is set to 60 seconds by default. We recommend a polling interval of 60 seconds as this gives administrators enough time to make a few changes to the GPO without creating new versions for every change.


	NOTE: After you complete the configuration wizard, you can use the Active Administrator Console to manage group policy history by selecting Configuration \| GPO History Settings.

To configure group policy history

Specify the polling interval.

To add additional domains, click Add Domain, select a domain from the list, and click OK.

If the list of domains is long, you can filter the list by typing in the box.

Click Next. See Configuring Active Directory backups.