Chat now with support
Chat with Support

Change Auditor 7.0.4 - Installation Guide

Installation Overview Install Change Auditor Add Users to Change Auditor Security Groups Connecting to the Clients Deploy Change Auditor Agents Upgrade Change Auditor Installation Notes and Best Practices Multi-Forest Deployments Foreign Forest Agent Deployment Workstation Agent Deployment Agent Comparison Install an agent to audit ADAM (AD LDS) on workgroup servers Active Roles Integration Quest GPOADmin Integration Windows Installer Command Line Options

Connecting to a different foreign forest/ updating credentials

Once the agent is installed, you can select to use a different coordinator is another domain or update the credentials

* 
IMPORTANT: The agent must be restarted once a change has been made.

You can update the domain and required credentials:

•
Right-clicking the agent SysTray and selecting Coordinator Credential Configurator.
•
Running the CoordinatorCredentialConfigurator.exe file in the agent installation folder on the agent server. By default, this is located under %ProgramFiles%\Quest\ChangeAuditor\Agent.

Example deployment scenario

The following diagram shows two separate forests where Change Auditor will be deployed. Forest A is deployed first and then Forest B is added.

Forest A installation

1
Install the coordinator on a member server in Forest A. In this example, Coordinator.ForestA.com is used as the coordinator server.
While installing the first coordinator, make note of the “Installation name”. The same installation name is required when deploying agents to Forest B.
2
Install the client on either a workstation or member server. In this example, CAClient1.ForestA.com is used as the client computer.
3
Using the client, connect to the coordinator in Forest A to deploy agents to the domain controllers and member servers in Forest A. See Deploy Change Auditor Agents for more details about deploying agents.
At this point, Change Auditor should be fully deployed to the first forest in the organization (ForestA.com in this example).

Forest B installation

1
Run the appropriate Agent MSI on the domain controllers and member servers in Forest B where the installation is required. The MSI should be launched from an elevated command prompt.
2
When prompted, select the This agent connects to a coordinator in a foreign forest option.
3
Enter the Active Directory root domain name of the remote forest where the agent will connect.
4
Enter a domain administrator user account from a domain where the coordinator is located and click Next.
5
Enter the Installation Name that the agent needs to join and click Next.
6
Click Install.
The agent will now connect to the coordinator in Forest A and the computer will be available in the Deployment tab of the Change Auditor client.

Workstation Agent Deployment

Workstation agents are required to capture login activity events when a Change Auditor for Logon Activity Workstation license is applied. This section provides recommendations for deploying agents necessary for auditing both domain workstations and non-domain workstations. It also includes instructions on manually deploying workstation agents.

•
Recommendations and deployment requirements
•
Manual workstation agent deployment

 

Recommendations and deployment requirements

All workstation agents
•
.NET framework 4.5.2 is the minimum requirement (available in Autorun.exe redistributables). See the Release Notes for a full list of the system requirements for workstation agents.
•
Quest recommends a phased approach to deploying workstation agents. Deploying a maximum of 100 workstation agents at a time allows you to monitor the coordinator performance before deploying another batch of agents.
Deploying workstation agents (domain workstations)
•
The recommended installation is from the Deployment tab of the client. See Change Auditor agents.
•
Alternately, you can manually deploy workstation agents. See Manual workstation agent deployment.
Deploying foreign workstation agents (non-domain workstations)
•
A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers:
•
UDP port 137 (name services)
•
UDP port 138 (datagram services)
•
TCP port 139 (session services)
•
A routable network path must exist between non-domain workstations, domain controllers, and the coordinator servers. Name resolution of domain controllers and the coordinator servers is also required from the non-domain workstations, whether DNS server configuration, NetBIOS/WINS configuration or local hosts file entries are used.
•
Agents must be deployed manually. See Manual workstation agent deployment.
•
During installation, the workstation agent prompts for Active Directory domain and credential information to locate a coordinator and installation name.
•
When the first foreign workstation agent is manually installed, a ChangeAuditor Agents - <InstallationName> security group is created. User accounts must be added to this security group to properly authenticate.
•
The workstation agent installer allows you to add the domain user account to the ChangeAuditor Agents – <InstallationName> security group, if appropriate LDAP and network protocol access is available.
* 
NOTE: Sometimes, you might need to prestage\create the ChangeAuditor Agents – <InstallationName> security group and manually add the configured workstation agent user account to the security group.
•
You can also use the Coordinator Credential Configurator to change between coordinator domains at any time after the agent is installed.
* 
NOTE: The Coordinator Credential Configurator application can be launched using the CoordinatorCredentialConfigurator.exe file in the agent installation folder on the workstation. The default agent installation location is: %ProgramFiles%\Quest\ChangeAuditor\Agent
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating