Chat now with support
Chat with Support

Change Auditor for Skype for Business 7.1.1 - User Guide

Upgrade considerations

In previous versions of Change Auditor, Lync administration events were generated under the Active Directory subsystem. Starting with Change Auditor 6.9, the Lync Administration facility has been renamed to Skype for Business Administration facility and the administration events are found under the Skype for Business subsystem. The Change Auditor for Lync license and built-in searches have been deprecated and replaced with the Change Auditor for Skype for Business license and Skype for Business built-in searches.

When you upgrade from Change Auditor version 6.8 or earlier:

•
Lync auditing stops.
* 
NOTE: You can still search and report on previously captured events. All legacy Lync Administration events are still shown in Active Directory subsystem.
•
The Shared\Built-In\Lync search folder is renamed to Shared\Built-In\Skype for Business and contains the newly defined searches and any previously defined custom searches.
To capture new events with Skype for Business and avoid losing any audited activities, after an upgrade:
1
Install the new Skype for Business license on all coordinators.
2
Upgrade existing domain controller agents to version 6.9 or later.
3
Deploy a 6.9 or later agent on Skype for Business Central Management Store (CMS) and create a Skype for Business template.

Create and edit templates

* 
NOTE:  
•
If the Central Management Store has been moved from one SQL Server instance to another, you must deploy the agent to the new SQL Server instance and create a Skype for Business auditing template.
•
If an agent associated with a Skype for Business template is uninstalled and then reinstalled, delete the template and recreate it.
To create a Skype for Business auditing template:
1
Open the Administration Tasks tab, click Auditing, and select Skype for Business.
2
Click Add to open the Skype for Business auditing wizard which steps you through the process of creating a template.
3
Enter a name for the template.
When you open the Skype for Business auditing wizard, the SQL Server and Instance hosting Central Management Store are retrieved from Active Directory and automatically populated on the page.
However, if the Microsoft Skype for Business Server / Microsoft Lync Server and the coordinator are deployed in different Active Directory forests, enter the CMS information to continue.
•
Enter the SQL Server fully qualified domain name, and select the Default or select the Named SQL Instance option and enter the named instance name.
4
Enter the credentials required to connect to the Central Management Store database.
5
(Optionally) Select Test Database Credentials to validate the credentials when the template is created to ensure that the database can be accessed.
* 
NOTE: If a trust does not exist between the CMS SQL Server's domain and the coordinator's domain where the client is connected, the test for Windows Authentication may fail even though the CMS credentials are valid.
The agent server is automatically populated with the SQL server name if the Change Auditor agent is deployed on it.
6
Click Finish to create the template and return to the Skype for Business auditing page.
To modify a template:
* 
NOTE: If the Central Management Store database server has changed, redeploy your agent to the new Central Management Store SQL Server, delete the existing template, then create a new template.
1
On the Skype for Business auditing page, select the template to modify and click Edit.
This displays the Skype for Business Auditing wizard, where you can modify the template name and Central Management Store SQL Server credentials.
2
Click Finish to save the changes.

Disable a template

To disable an auditing template:

Disabling a template allows you to temporarily stop auditing the Skype for Business CMS without having to remove the template.

* 
NOTE: Agents continue to generate events sourced in Active Directory even if the template has been disabled.
1
On the Skype for Business Auditing page, use one of the following methods to disable an auditing template:
•
Place your cursor in the Status cell for the template to disable, click the arrow control, and select Disabled.
•
Right-click the template to disable and select Disable.
The entry in the Status column for the template changes to ‘Disabled’.
2
To re-enable the auditing template, use the Enable option in either the Status cell or right-click menu.

Delete a template

* 
NOTE: Agents continue to generate events sourced in Active Directory even if the template has been deleted.
To delete an auditing template:
1
On the Skype for Business auditing page, select the template to delete and click Delete | Delete Template.
2
A dialog is displayed confirming that you want to delete the selected template. Click Yes.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating