Chatta subito con l'assistenza

Ottieni assistenza in tempo reale
Completa la registrazione

Accedi

Richiedi prezzo

Contatta il supporto vendite

VERSIONI DI PROVA GRATUITA

Change Auditor 7.6 - Installation Guide

Table of Contents

Installation Overview

Before you begin System requirements System statistics and facilities System overview Installation overview Using group Managed Service Accounts (gMSA)

Install Change Auditor

Installation workflow Install the first coordinator Install the client Install multiple coordinators SSL certificate configuration and deployment

Add Users to Change Auditor Security Groups

Introducing Change Auditor security groups Add accounts to security groups Add accounts to ChangeAuditor database role

Connecting to the Clients

Connect to the client Open the web client Access product information

Deploy Change Auditor Agents

Change Auditor agents Deploy agents

Upgrade Change Auditor

Pre-upgrade considerations Upgrade Change Auditor

Step 1: Upgrade all coordinators (and database schema) Step 2: Upgrade all clients Step 3: Upgrade the agents

Post upgrade considerations

Installation Notes and Best Practices

Licensing Change Auditor products Permissions Other installation notes Change Auditor for Windows File Servers Change Auditor for Exchange Change Auditor for Authentication Services Change Auditor for SharePoint

Agent deployment

Backup notes Agent behavior notes Client notes ADAM (AD LDS) auditing Change Auditor for SQL Server — SQL auditing

Deployment Options

Multi-forest deployment

Requirements Example deployment scenario Configuration

Foreign forest agent deployment

Supported functionality Requirements Workflow Harvesting the foreign forest topology Deploying agents to a foreign forest Installing agents in a foreign forest Example deployment scenario

Workstation Agent Deployment

Recommendations and deployment requirements Manual workstation agent deployment Deploying workgroup agents (non-domain workstations)

Agent Comparison Install an agent to audit ADAM (AD LDS) on workgroup servers Windows Installer Command Line Options

Agent options Coordinator options Web Client options

Windows Installer Command Line Options

This section lists the Windows Installer command line options (MSIEXEC.exe) that are available for deploying an agent or installing a coordinator.

•

•

Coordinator options

•

Web Client options

For more information on using the Windows Installer (MSIEXEC.exe) see: http://msdn.microsoft.com/en-us/library/aa367988(VS.85).aspx

Agent options

Table 8. Change Auditor agent command line options

AD_LDAP_USE_SSL

Specify whether to use SASL or SSL for LDAP binding.

•

Set to "0" to use SASL

•

Set to "1" to use SSL

If not specified it will set the option to SASL for new installations.

If not specified in the case of an upgrade, it will use the current setting of the installed component.

INSTALLATION_NAME="<name>", INSTALLATION_NAME_VALID="1"

Specify the Change Auditor installation name.

APPDIR="<install directory>"

Specify the installation path.

INSTALLER_ITAD_GPTBACKUP="<path>"

Specify a GPO backup path.

SYSTRAY_AUTOSTART="1"

SYSTRAY_AUTOSTART="0"

Specify whether to open the agent system tray icon on startup.

•

Set to "1" to launch agent system tray icon

•

Set to "0" to not launch the agent system tray icon

RESTARTONFAILURE="3"

RESTARTONFAILURE="0"

Specify whether to automatically restart the agent on failure.

•

Set to "3" to automatically restart the agent

•

Set to "0" to not automatically restart the agent

EVENTLOG_BLOCK_OVERRIDE="1"

Specify whether to override event log block detection.

•

Set to "1" to enable this override

When this setting is set to "0" (default), the event log detection is active which detects whether or not the system EventLog service is holding one of Change Auditor’s event log message DLLs open. If one of these DLLs are open, the Windows Installer Restart Manager can cause unpredictable restarts of dependent services.

FOREIGN_LOGON_ACCOUNT="<example.com\user>"

FOREIGN_PASSWORD="<password>"

For foreign agents (non-domain members), specify the foreign credentials to be used to find and connect to a coordinator in the Active Directory forest.

FOREIGN_FOREST_ROOT_DOMAIN="<FQDN>"

For foreign agents (non-domain members), use this option to specify the fully-qualified domain name (domain.com) of the root domain of Active Directory.

FOREIGN_CREATE_AGENT_GROUP="1"

For foreign agents (non-domain members), specify whether the logged in user is to be added to the ChangeAuditor Agents security group.

•

Set to "1" to add the user to this security group.

Coordinator options

Table 9. Change Auditor coordinator command line options

AD_LDAP_USE_SSL

Specify whether to use SASL or SSL for LDAP binding.

•

Set to "0" to use SASL

•

Set to "1" to use SSL

If not specified it will set the option to SASL for new installations.

If not specified in the case of an upgrade, it will use the current setting of the installed component.

AGENT_PORT="<static port number>"

Assign the static port number to be used by the agents to communicate with the coordinator.

AGREETOLICENSE="YES"

Agree to the Software License Agreement.

CLIENT_PORT="<static port number>"

Assign the static port number to be used by the client when communicating with the coordinator.

INSTALLATION_NAME="<installation name>"

Set the Change Auditor installation name.

SDK_PORT="<static port number>"

Assign the static port number to be used by external applications to access the coordinator.

SQLSERVER_DATABASE="<database name>"

Provide the name of the Change Auditor database.

SQLSERVER_AUTH="1"

SQLSERVER_AUTH="1" SQLSERVER_AUTH="2" Specify whether to use SQL, Windows or Microsoft Entra authentication.

•

Set to "1" to use SQL authentication.

•

Set to "2" to use Microsoft Entra authentication.

NOTE: For Azure SQL Managed Instance (PaaS), Microsoft Entra or SQL authentication with an encrypted connection must be used.

SQLSERVER_SQLSERVER="<IP address\server name>"

Specify the SQL instance used to store the Change Auditor database.

SQLSERVER_LOGINID="<user name>"

Specify the user name used to connect to the SQL instance.

SQLSERVER_PASSWORD="<password>"

Specify the password used to connect to the SQL instance.

SQLSERVER_DOMAIN="<domain name>"

If Windows authentication is being used, specify the domain of the user credentials used to connect to the SQL instance.

ADD_USER_CAADMINS="1"

Specify whether the logged in user is to be added to the ChangeAuditor Administrators security group.

•

Set to "1" to add the user to this security group.

EVENTLOG_BLOCK_OVERRIDE="1"

Specify whether to override event log block detection.

•

Set to "1" to enable this override

When this setting is set to "0" (default), the event log detection is active which detects whether or not the system EventLog service is holding one of Change Auditor’s event log message DLLs open. If one of these DLLs are open, the Windows Installer Restart Manager can cause unpredictable restarts of dependent services.

Web Client options

Table 10. Change Auditor web client command line options

AD_LDAP_USE_SSL

Specify whether to use SASL or SSL for LDAP binding.

•

Set to "0" to use SASL

•

Set to "1" to use SSL

If not specified it will set the option to SASL for new installations.

If not specified in the case of an upgrade, it will use the current setting of the installed component.

AGREETOLICENSE="YES"

Agree to the Software License Agreement.

MY_WEBSITE="<Name of website>"

Specify the web site in IIS where the web client should be installed. For example, Default Web Site.

COORDINATOR_IP_PORT=<fqdn of Coordinator>:<Client SCP Port of the coordinator>

Specify the connection to the coordinator that will be used by the web client by entering the FQDN of the coordinator and the coordinator client SCP port.

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione