Tchater maintenant avec le support

Obtenir une aide instantanée
Terminer l’enregistrement

Se connecter

Demander les tarifs

Contacter le service des ventes

Active Administrator 8.7 - Installation Guide

Parcourir le contenu

Installation Considerations for Active Administrator

System requirements Server hardware requirements Server software requirements SQL Server requirements Console requirements

Console hardware requirements Console software requirements

Audit agents requirements Workstation logon audit agents requirements Web Console requirements System Center requirements Port requirements

Additional requirements

User privilege requirements Active Administrator module requirements

Home Search Certificates Security and Delegation Active Directory Health

Required permissions for Active Directory Health Active Administrator Data Services (ADS) requirements Data collectors requirements

Auditing & Alerts Group Policy Active Directory Recovery DC Management DNS Management Active Administrator Module Configuration

Active Directory Health minimum permissions

Active Directory Health module Active Directory Health Module Configuration Agents Notifications Troubleshooter

AFS service account minimum permissions Diagnostic Console minimum permissions

Installing and configuring Active Administrator

Backing up your data Installing Active Administrator server Configuring the server

Applying a license file Using a passphrase Setting the Active Administrator database Setting the Active Administrator archive database Configuring purge and archive settings Storing Active Administrator data Setting up features and the owner Configuring active template delegation enforcement Configuring group policy history Configuring Active Directory backups Configuring Active Administrator users Configuring service accounts Connecting to System Center Operations Manager and Enabling SNMP Notifications Reviewing selections

Installing Active Administrator console Setting up the console

Setting up auditing on domain controllers Installing audit agents Creating alerts

Setting up workstation logon auditing

Deploying the workstation logon audit agent Enabling the default port

Using Active Administrator

Appendix: Active Administrator Server Manager

Starting the Active Administrator Server Manager Managing the Active Administrator Foundation and Data Services

Updating Active Administrator licenses

Managing Security

Managing the passphrase Managing Active Administrator file security Managing Active Administrator database security Recovering from a lost passphrase

Managing Notification Services Web Server Configuration

DNS Management

For all Active Administrator modules to operate properly, the Active Administrator Foundation service (AFS) requires an account that is a member of the Domain Admins group. However, you may want to customize access to each module for console users or the AFS account. The following table lists the specific permission requirements for the DNS Management module.


	NOTE: To assign roles in Active Administrator, select Configuration \| Role Based Access \| New.

Table 18. Required permissions for the DNS Management module
Submodule	Console user account	AFS account
DNS Landing Page	Must have the Active Administrator DNS Management role. Must have full control on the selected DNS server	Must be a member of the AA_Users group.
DNS Management	Must have the Active Administrator DNS Management role. To view, create, edit, or delete DNS records, must have full control on the selected DNS server.	N/A
DNS Monitoring	Must have the Active Administrator DNS Management role.	Must be a member of the AA_Users group.
DNS Analyzer	Must have the Active Administrator DNS Management role.	N/A
DNS Event Log	Must have the Active Administrator DNS Management role. Must have read access to the DNS event log on the selected DNS server.	N/A
DNS Search	Must have the Active Administrator DNS Management role. Must have full control access on the selected DNS servers.	N/A

Active Administrator Module Configuration

For all Active Administrator modules to operate properly, the Active Administrator Foundation service (AFS) requires an account that is a member of the Domain Admins group. However, you may want to customize access to each module for console users or the AFS account. The following table lists the specific permission requirements for the Configuration module


	NOTE: To assign roles in Active Administrator, select Configuration \| Role Based Access \| New.

Table 19. Required permissions for the Configuration module
Subsystem	Console user	AFS account
Configuration Landing Page Tasks Role Based Access Email Settings Notification Settings Active Template Settings Agent Installation Settings Recovery Settings GPO History Settings GPO History Settings Certification Configuration Service Monitoring Policy	Must have the Active Administrator Full Control role.	Must be a member of the AA_Users group.
Archive Databases	Must have the Active Administrator Full Control role.	Must have permission on the target database server to create databases.
User Logon Agent Settings	Must have the Active Administrator Full Control role.	Must be a member of the AA_Admins group.

Active Directory Health minimum permissions

For the Active Directory Health module to operate properly, the Active Administrator Foundation service (AFS) requires an account that is a member of the Domain Admins group. See Active Directory Health. You may want to customize access to each Active Directory Health subsystem for console users or the AFS account. This section details the minimum permission requirements for the Active Directory Health module and its subsystems.

•

Active Directory Health module

•

Active Directory Health Module Configuration

•

•

•

Active Directory Health module

•

The AFS account requires local administrator rights on the Active Administrator server.

•

The AFS account requires read, write, and modify access to the Logging directory in the Active Administrator server installation folder.

•

The Active Directory Health Analyzer agent account needs to be a member of the Performance Monitor Users group in Active Directory.

Documents connexes

The document was helpful.

Sélectionner une évaluation

I easily found the information I needed.

Sélectionner une évaluation

© ALL RIGHTS RESERVED. Conditions d’utilisation Confidentialité Cookie Preference Center