• Become a portal pro
• Download
• Print
• My Downloads ()

• Support
• Technical Documentation
• Active Administrator 8.7
• Active Administrator 8.7 - Installation Guide

Active Administrator 8.7 - Installation Guide

Table of Contents  

Installation Considerations for Active Administrator

System requirements Server hardware requirements Server software requirements SQL Server requirements Console requirements

Console hardware requirements Console software requirements

Audit agents requirements Workstation logon audit agents requirements Web Console requirements System Center requirements Port requirements

Additional requirements

User privilege requirements Active Administrator module requirements

Home Search Certificates Security and Delegation Active Directory Health

Required permissions for Active Directory Health Active Administrator Data Services (ADS) requirements Data collectors requirements

Auditing & Alerts Group Policy Active Directory Recovery DC Management DNS Management Active Administrator Module Configuration

Active Directory Health minimum permissions

Active Directory Health module Active Directory Health Module Configuration Agents Notifications Troubleshooter

AFS service account minimum permissions Diagnostic Console minimum permissions

Installing and configuring Active Administrator

Backing up your data Installing Active Administrator server Configuring the server

Applying a license file Using a passphrase Setting the Active Administrator database Setting the Active Administrator archive database Configuring purge and archive settings Storing Active Administrator data Setting up features and the owner Configuring active template delegation enforcement Configuring group policy history Configuring Active Directory backups Configuring Active Administrator users Configuring service accounts Connecting to System Center Operations Manager and Enabling SNMP Notifications Reviewing selections

Installing Active Administrator console Setting up the console

Setting up auditing on domain controllers Installing audit agents Creating alerts

Setting up workstation logon auditing

Deploying the workstation logon audit agent Enabling the default port

Using Active Administrator

Appendix: Active Administrator Server Manager

Starting the Active Administrator Server Manager Managing the Active Administrator Foundation and Data Services

Updating Active Administrator licenses

Managing Security

Managing the passphrase Managing Active Administrator file security Managing Active Administrator database security Recovering from a lost passphrase

Managing Notification Services Web Server Configuration

• Viewing Topics 21 - 24 of 76

×

Active Directory Health

For all Active Administrator modules to operate properly, the Active Administrator Foundation service (AFS) requires an account that is a member of the Domain Admins group. However, you may want to customize access to each module for console users or the AFS account.

NOTE:   • To assign roles in Active Administrator, select Configuration | Role Based Access | New. • For details on the minimum permissions required for the Active Directory Health module, see Active Directory Health minimum permissions. • The Active Directory Health Analyzer agent must be upgraded to the current version.

Topics:

•	Required permissions for Active Directory Health

•	Active Administrator Data Services (ADS) requirements

•	Data collectors requirements

Required permissions for Active Directory Health

Required permissions for Active Directory Health

The following table lists the specific permission requirements for the Active Directory Health module.

 

Table 12. Required permissions for the Active Directory Health module

Submodule	Console user account	AFS account
Active Directory Health Landing Page	Must have the Active Administrator Active Directory Health Analyzer role.	Must be a member of the AA_Users group.
Analyzer	Must have the Active Administrator Active Directory Health Analyzer role.	N/A
Alerts	Must have the Active Administrator Active Directory Health Analyzer role. To manage notifications, must have the Active Administrator Active Directory Health Notification Management role.	Must be a member of the AA_Users group. Must have read/write access to the DACache folder in the Active Administrator share.
Agents	To manage agents, must have the Active Administrator Active Directory Health Agent Management role. To manage notifications, must have the Active Administrator Active Directory Health Notification Management role. to manage data collectors, must have the Active Administrator Active Directory Health Data Collector Management role. To manage alerts, must have the Active Administrator Active Directory Health Alert Management role. To manage agents, must have the Active Administrator Active Directory Health Agent Management role.	To install, edit, and remove agents, must be a member of the AA_Admins group and have full control access to the target server. To update alerts and collectors, and to manage notifications, must have read/write access to the DACache folder in the Active Administrator share. NOTE: For the specific permissions required for each data collector, see Appendix A in the Quest® Active Administrator® User Guide or online help.
Troubleshooter	Must have the Active Administrator Active Directory Health Troubleshooter role. To view reports or perform troubleshooting operations, must have WMI remote access enabled and be a member of the Distributed COM users group. To run jobs, must have full control access to the target server.	N/A
Diagnostic Console	To collect performance counter values, must be a member of the local administrator group on the target domain controller.	N/A

Active Administrator Data Services (ADS) requirements

 

Table 13. Required permissions for Active Administrator Data Services (ADS)

Subsystem	ADS account
Loader	Must be a member of the AA_Users group and have read access to the enterprise.
Data Collectors	See the data collector permissions for forests, domains, and sites in Appendix A of the Quest® Active Administrator® User Guide or online help.
Agent Monitor and Recovery	Must have full access on the server where the Active Directory Health Analyzer agent is installed.

Data collectors requirements

The Active Directory Health module uses the Active Directory Health Analyzer agents to monitor domain controllers and presents data for you to troubleshoot issues. For the Active Directory Health Analyzer agents to acquire the necessary data, certain permissions and access are required for the Active Directory Health Analyzer agent startup account.

To capture all data collectors accessible by the Active Directory Health Analyzer, the startup account for the Active Directory Health Analyzer agent must:

•	have Domain User and domain administrative privileges;

•	be a member of the Distributed COM Users group; and

•	be a member of the Performance Logs Users group.

•	The target server must have WMI remote access enabled.

 

•  Previous
• Viewing Topics 21 - 24 of 76
• Next 

Search this document Search all documents for this product-version Search all documents for this product Search all documents

×

 Welcome to Quest Support

You can find online support help for Quest *product* on an affiliate support site. Click continue to be directed to the correct support content and assistance for *product*.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2024 Quest Software Inc. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center