An account under which site computers (Operations Manager servers) will be accessed is either specified explicitly in the site’s settings (Advanced tab), or inherited from the site, job, task, or InTrust server, as described in this section. To access Operations Manager servers, this account requires the following:
All available accounts are listed below in order of usage priority (inheritance order). If an account with higher priority is not specified in the corresponding entity’s properties, then the account with lower priority that follows will be used:
Usage Priority | Account |
Where the Account Is Set |
---|---|---|
1 | Account intended for connection to Operations Manager server |
On the Accounts tab of the data source-related site properties (site’s Advanced Settings | data source properties | Accounts) |
2 | Account used for site objects access |
On the Accounts tab of the site properties (if the site is processed without agents) |
3 | Account specified for site-processing job |
In the job properties |
4 | Account specified for the task containing site-processing job |
In the task properties |
5 | Account used for InTrust Server operation (if gathering without agents) or for agent operation (if gathering with agents) | During the setup. The account for the currently-running agent can be changed in the Quest InTrust Agent service properties. |
The ACS database will be accessed using the account from those listed below (also listed in descending priority order).
Usage Priority | Account |
Where the Account Is Set |
---|---|---|
1 | Account intended for ACS database connection | On the Accounts tab of the data source-related site properties (site’s Advanced Settings | data source properties | Accounts) |
2 | Account used for connection to Operations Manager server | On the Accounts tab of the data source-related properties (site’s Advanced Settings | data source properties | Accounts) |
3 | Account used for site objects access |
On the Accounts tab of the site properties (if the site is processed without agents) |
4 | Account specified for site-processing job |
In the job properties |
5 | Account specified for the task containing site-processing job |
In the task properties |
6 | Account used for InTrust Server operation (if gathering without agents) or for agent operation (if gathering with agents) |
During the setup. The account for the currently-running agent can be changed in the Quest InTrust Agent service properties. |
Usually audit trails are collected using agents. You can install an InTrust agent to a dedicated computer (recommended) or to the Operations Manager server. In some cases you may need to gather event data without agents. Each option is described below.
To use an agent on a dedicated computer
|
Caution: For data to be collected using an InTrust agent on a dedicated computer, the Operations Manager console must be installed on that computer. Make sure that the console is the same version as the Operations Manager console running on your Operations Manager server. |
When the gathering job starts, InTrust agents will be automatically deployed on the specified computers.
To use an agent on the Operations Manager server
To gather data without agents
|
Caution: If you plan to collect data without using InTrust agents, then the Operations Manager console must be installed on the computer hosting the InTrust Server. Make sure that the console is the same version as the Operations Manager console running on your Operations Manager server. |
To enrich native reporting with reports on consolidated data collected by InTrust, a special Report Pack for the Operations Manager console (named Quest InTrust for ACS Reports) is provided with the Quest solution. It offers ten predefined reports on various aspects of network security, including user and computer management, file and object access, and user and administrator activity, along with a special report that helps you discover the InTrust for ACS management pack deployment status.
This Report Pack should be deployed on the Microsoft SQL Server Reporting Services (SSRS) that is used to run the Operations Manager console.
To install the Report Pack
|
Note: Some reports may create temporary tables in the data source. To clean them up, a special job is created and scheduled during Report Pack setup. For the Temporary Tables Cleanup job schedule to be applied, make sure the SQL Server Agent is running. If not, start the Agent, and then use data source’s properties in SSRS Report Manager to schedule the cleanup. |
After the setup is complete, you can open the Operations Manager console and go to the Reporting tab. Select the Quest InTrust for ACS Reports node in the tree to see the newly installed reports. To generate a report, select it and click Open from the shortcut menu, or use the toolbar button.
© ALL RIGHTS RESERVED. Conditions d’utilisation Confidentialité Cookie Preference Center