Chat now with support
Chat with Support

Change Auditor 7.5 - User Guide

Welcome to Change Auditor Help Change Auditor Core Functionality
Change Auditor Core Functionality Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Working with Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags
Microsoft 365 and Microsoft Entra ID Auditing Change Auditor for Active Directory
Change Auditor for Active Directory Overview Custom Active Directory Searches and Reports Custom Active Directory Object Auditing Custom Active Directory Attribute Auditing Member of Group Auditing Active Directory Federation Services Auditing ADAM (AD LDS) Auditing Active Directory Database Auditing Active Roles Integration Quest GPOADmin Integration Active Directory Protection Event Details Pane About us
Change Auditor for Authentication Services Change Auditor for Defender Change Auditor for EMC Change Auditor for Exchange Change Auditor for Windows File Servers Change Auditor for Active Directory Queries Change Auditor for Logon Activity Change Auditor for NetApp Change Auditor for SharePoint Change Auditor for SQL Server Change Auditor SIEM Integration Guide
Webhooks in Change Auditor Integrating Change Auditor and SIEM Tools Subscription Management
Adding the PowerShell module Viewing available commands and help Connecting to Change Auditor Managing subscriptions Working with event subscriptions in the client Managing a Splunk integration Splunk event subscription wizard Managing an IBM QRadar integration QRadar event subscription wizard Managing a Micro Focus Security ArcSight Logger and Enterprise Security Manager (ESM) integration ArcSight event subscription wizard Managing a Quest IT Security Search integration (Preview) Managing a Syslog integration Syslog event subscription wizard Managing a Microsoft Sentinel integration Microsoft Sentinel event subscription wizard
Webhook technical insights
Change Auditor Threat Detection Deployment Change Auditor Threat Detection Dashboard Change Auditor PowerShell Command Guide Change Auditor Dialogs
Change Auditor dialogs
Quest Change Auditor dialog Add Administrator Add Agents, Domains, Sites dialog Add Container dialog Add Active Directory Container dialog (AD Query) Add Facilities or Event Classes dialog Add Facilities or Event Classes dialog (Add With Events) Add File System Path dialog Add Foreign Forest Credential Add Group Policy Container dialog Add Local Account dialog Add Logons dialog Add Logons dialog (Add With Events) Add Object Classes dialog Add Object Classes dialog (Add With Events) Add Origin dialog Add Origin dialog (Add With Events) Add Registry Key dialog Add Results dialog Add Service dialog Add Service dialog (Add With Events) Add Severities dialog Add Severities dialog (Add With Events) Add SharePoint Path dialog Add SQL Instance dialog Add SQL Data Level Object Add Users, Computers or Groups dialog Add Where dialog Add Who dialog Advanced Deployment Options dialog Agent Assignment dialog Alert Body Configuration dialog Alert Custom Email dialog Auditing and Protection Templates dialog Authorizations: Application Group dialog Authorizations: Operations | Role Definitions | Task Definitions | Application Group Authorizations: Role dialog Authorizations: Task dialog Auto Deploy to New Servers in Forest dialog Browse for Folder dialog Browse SharePoint dialog Comments dialog Configuration Setup dialog Configure cepp.conf Auditing dialog Connection screen Coordinator Configuration tool Coordinator Credentials Required dialog Credentials Required dialog Custom Filter dialog Database Credentials Required dialog Directory object picker Domain Credentials dialog Eligible Change Auditor Agents dialog Event Logging dialog Export/Import dialog Install or Upgrade/Uninstall/Update Foreign Agent Credentials IP Address dialog Log page Logon Credentials dialog (Deployment page) Logon Credentials dialog (EMC Auditing wizard) Manage Connection Profiles dialog New Report Layout dialog Microsoft 365 dialog Rename dialog Save As dialog Select a SQL Instance and Database dialog Select Destination Folder dialog Select Exchange Users dialog Select Registry Key dialog Select SQL Reporting Services Template dialog Shared Mailboxes dialog SharePoint Credentials Required dialog When dialog
About Us

Authorizations: Role dialog

Previous Next

Authorizations: Role dialog

The Authorizations: Role dialog opens when the Add | Add Role Definition tool bar option is selected on the Application User Interface Authorization page (from the Administration Tasks tab). Use this dialog to create a role definition that defines who is authorized to perform different Change Auditor operations.

To define a new role definition enter the requested information on the following tabbed pages:

Role tab

Use to assign a name to the new role.

Name

Enter a name for the new role.

Description

Optionally enter a description for the new role.

Definition tab

Use to define the operations, lower-level tasks and/or roles to be associated with the selected role.

Operations list

Contains the operations, lower-level tasks and roles you have added to define the role.

Add Role

Use to add a previously defined role to the role definition. Clicking this button will display the Authorizations: Role Definitions dialog allowing you to select one or more previously defined roles.

Add Task

Use to add a lower-level task to the role definition. Clicking this button will display the Authorizations: Task Definitions dialog allowing you to select one or more previously defined tasks.

Add Operation

Use to add one or more operations to the role definition. Clicking this button will display the Authorizations: Operations dialog allowing you to select one or more operations to be added to the role definition.

Remove

Use to remove an operation, task or role from the role definition.

Members tab

Use to select the users, groups and/or application groups who are to be members of the selected role definition.

Members list

Contains the users, groups or application groups who are authorized to perform the operations defined in the role definition.

Add Application Group

Use to add an Application Group to the members list. Clicking this button will display the Authorizations: Application Group dialog allowing you to select from a list of previously defined application groups.

Add User or Group

Use to add a user or group to the members list. Clicking this button will display the Directory object picker. Use the Browse or Search pages to locate and select the user and/or group account(s) to be added.

Remove

Use to remove an application group, user or group from the member list.

Authorizations: Task dialog

Previous Next

Authorizations: Task dialog

The Authorizations: Task dialog appears when the Add | Add Task Definition tool bar option is selected on the Application User Interface Authorization page (from the Administration Tasks tab).

Use the following tabbed pages to define a new task definition:

Task tab

Use to assign a name to the new task.

Name

Enter a name for the new task.

Description

Optionally enter a description of the new task.

Definition tab

Use to define the operations and/or lower-level tasks that are to be associated with the selected task.

Operations list box

Contains the operations and lower-level tasks you have selected to define the task.

Add Task

Use to add a lower-level task to the task definition. Clicking this button will display the Authorizations: Task Definitions dialog allowing you to select one or more previously defined tasks.

Add Operation

Use to add one or more operations to the task definition. Clicking this button will display the Authorizations: Operations dialog allowing you to select one or more operations to be added to the task definition.

Remove

Use to remove an operation or task from the task definition.

Auto Deploy to New Servers in Forest dialog

Previous Next

Auto Deploy to New Servers in Forest dialog

The Auto Deploy to New Servers in the Forest dialog appears when the New Servers tool bar button is clicked on the Deployment page. From this dialog, you can specify the following:

•
enable or disable auto deployment to new domain objects (that is, servers or workstations)
•
define a domain objects list to be used for automatically deploying agents
•
specify the interval to be used to check the forest for new domain objects

This dialog contains the following fields/controls to define the auto deployment options:

Enable Auto Deployment to New Servers

Select to automatically deploy agents to the new domain objects specified in the Deployment To setting below.

Deployment To

Use the following options to define a domain object list to which agents are to be automatically deployed:

▪
All New Servers - select to deploy to all new domain objects added to your forest (default)
▪
Include New Server(s) in Container(s) - select to deploy to domain objects in only selected containers
▪
Exclude New Server(s) in Container(s) - select to deploy to all domain objects except for selected containers

Containers list

When either the Include New Servers in Following Container(s) or Exclude New Servers in Following Container(s) option is selected, this list box and the Add/Remove buttons are activated.

Use the buttons located above this list box to add and remove objects:

▪
Add - clicking the Add button displays the Directory object picker allowing you to select the Active Directory containers to be included or excluded depending on the option selected. Use the Browse or Search page to locate and select a container, click the Add button to add it to the list. Once you have selected all the containers to be added to the Container list, click the Select button to save your selections and close the dialog.
▪
Remove - select an entry from the Containers list and then click the Remove button to remove it from the list.

Check for New Servers Added to Forest

Use this setting to define how often Change Auditor is to check the forest for new domain objects. Select one of the following options and specify the appropriate value:

▪
Every nn minutes (The default is every 60 minutes)
▪
Every Day At <time>

Set

Click to specify the credentials of a user with administrator rights on the selected domain(s). Clicking this button displays the Logon Credentials dialog allowing you to enter the credentials to be used to install agents.

Clear

Click to clear the credentials and enter different credentials.

Browse for Folder dialog

Previous Next

Browse for Folder dialog

Use to specify where you would like to save an exported folder structure or search. This dialog appears when you use the Export command to save the folder structure and XML files of all searches in these folders, or the XML representation of an individual search (right-click either a folder in the Explorer view or a search in the Searches list on the Searches page and select the Export command).

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating