What is the process to perform a manual installation of the Hybrid Audit Agent (Change Auditor agent for Identity Defense Hybrid Audit) instead of doing the Agent Deployment from the Security Management Platform (SMP) Portal?
To deploy them manually, you will need to:
1. Log in to the SMP portal and download the MSI package of the Hybrid Agent from the Defense > Hybrid Audit > Agent Deployment page in the SMP portal. You will notice this is actually a copy of the Change Auditor agent installer (Quest Change Auditor Agent (x64).msi).
2. Get your SMP Org ID (While logged into your profile in the Portal, in the top right-hand corner, click the drop-down arrow next to the user's email address and click the organization name. This will open the "Edit Organization" page, which contains your Organization details.)
3. Ensure the Hybrid Audit Broker (which is the SMP Hybrid Agent) is already installed in the forest where you want to install the Hybrid Audit agent, and it is configured to manage the domain where you are installing the Hybrid Audit agent. For more information, refer to the following technical documentation topic (Working with Hybrid Audit Brokers):
https://support.quest.com/technical-documents/identity-defense/current/user-guide/36#TOPIC-2330101
4. On the target machine you want to install the agent on, modify the following command to use the SMP Org ID you got from step 2 and then run it from an elevated CMD prompt, which sets the agent to use Hybrid Audit mode (SG=1) and connects to the SCP for the target SMP Organization:
msiexec /i "Quest Change Auditor Agent (x64).msi" SG=1 INSTALLATION_NAME="<org_id>" INSTALLATION_NAME_VALID="1"
5. After the installation finishes, the agent should now show up as installed and connected in the Defense > Hybrid Audit > Agent Deployment page list from the SMP Portal.
