Chat now with support
Chat with Support

Change Auditor 7.4 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Disable Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Enable auto deployment

Auto deployment allows you to automatically deploy an agent to any new domain servers that are added to your forest.

* 
NOTE: Auto deployment does not apply to servers already in the topology that are promoted to domain controllers.
To enable auto deployment:
1
From the Deployment page, click Auto Deploy.
2
Select the Enable Auto Deployment to New Servers option.
If you enable Do Not Deploy on Read-Only DCs (Not Recommended), when a read-only domain controller is added to the domain, the agent is not installed on it.
If Do Not Deploy on Read-Only DCs (Not Recommended) is disabled (default state), when a read-only domain controller is added to the domain, the agent is installed on it.
3
If required, select Enable Auto Deployment to New Workstations check boxes.
4
Select one of the following options to specify the servers to which agents are to be deployed:
•
All New Servers/Workstations (default)
•
Include New Servers/Workstations in Container(s)
•
Exclude New Servers/Workstations in Container(s)
•
Include Read-Only DCs (default)
5
When the Include New Server/Workstations in Container(s) or Exclude New Server/Workstations in Container(s) option is selected, click Add to locate and select individual containers.
6
Clicking Add displays the Select Active Directory Objects dialog. Use the Browse or Search page to locate and select a container. Once a container is selected, click Add to add it to the Selection list. Once you have added all the containers, click Select to save your selection and close the dialog.
The containers specified are displayed in the Containers list on the Auto Deploy to New Computers dialog.
7
By default, Change Auditor checks if new servers are added to the forest every 60 minutes and if found will automatically deploy an agent. However, you can use one of the following Check for New Computers Added to Forest options to change this interval:
•
Every nn Minutes
•
Every Day At <time>
8
Click Set to specify the credentials of a user with administrator rights on the selected domains. Click OK to save these user credentials and close the Logon Credentials dialog.
* 
NOTE: If you are using a group Managed Service Account, see Using group Managed Service Accounts (gMSA) for additional requirements.
9
Click OK to save your selections and close the Auto Deploy to New Computers dialog.

Refresh or clear Deployment page information

To force a topology harvest refresh:
1
On the Deployment page, click Force Refresh.
2
Change Auditor forces a topology harvest and display any new servers/workstations added since the last topology harvest.
* 
NOTE: The default harvest interval is every 3 hours.
NOTE: Topology scan takes a long time when the environment contains a large number of workstations.
To refresh a coordinator’s status:
1
On the Deployment page, select one or more servers from the list.
2
Click Refresh Status.
3
Change Auditor retrieves and displays the latest status for the selected agents, including the agent version and deployment results.
To clear the deployment results:
1
On the Deployment page, right-click a server or workstation from the list and click Clear Result.
2
This clears the current and any future entries in the Deployment Result cell for the selected server and workstation.

Change Auditor Client Overview

•
Starting the Change Auditor client
•
Managing connection profiles
•
Client components
•
Customize table content
•
Filter data
•
Directory object picker

Starting the Change Auditor client

To connect to the client, the following conditions must be met:

•
The coordinator service is running and has a valid SCP listening port (no firewall implications).
•
The current authenticated user running the client has the proper credentials to access the Change Auditor coordinator service. If this condition fails, the client displays the Coordinator Credentials Required dialog where you can enter the proper logon credentials.
•
The current authenticated user is a member of either the ChangeAuditor Administrators or ChangeAuditor Operators AD group. If this condition fails, the Change Auditor logon screen displays an error and credential text boxes for entering the appropriate credentials.
•
When using a direct database connection, the current authenticated user running the client has the proper SQL credentials to access the SQL database. If this condition fails, the client displays the Database Credentials Required dialog where you can enter new logon credentials.
To start the client
1
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.
You can connect to the ‘default connection’ profile or specify a different connection profile. A connection profile defines the connection method to connect to a coordinator in trusted or untrusted forests, or to the database directly without connecting with the coordinator. See Managing connection profiles for more information.
2
Select Connect to use the default connection profile.
Alternatively, select a previously defined connection profile and click Connect.
If you do not have the proper credentials required for access, the credentials dialogs display allowing you to enter the required credentials.
Depending on how your system has been configured:
•
You may need to enter a user account and password or a smart card certificate and personal identification number.
•
Select the option to disconnect the client from the coordinator after 30 minutes of inactivity.
3
The first time the client opens, you are presented with the Start page which provides up-to-date product information.
4
Select the Deployment page to deploy agents. This page may initially be empty until the current forest’s server topology is harvested. This page automatically refreshes when the topology harvest completes.
* 
NOTE: Topology scan takes a long time when the environment contains many workstations.
5
To see a real-time stream of events based on a ‘favorite’ search definition as well as other valuable summary information about the application, select the Overview page.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating