Change Auditor 7.1.1 - Installation Guide


	NOTE: The Deployment page may initially be empty until the current forest’s server topology has completed. The topology scan takes a long time when the environment contains many workstations. This page is automatically refreshed after this task has completed.

From this list, select an entry and select Credentials | Set to enter the proper user credentials for installing agents on the selected domain.

Select one or more servers or workstations on the Deployment page and click Install or Upgrade.

On the Install or Upgrade dialog select one of the following options to schedule the deployment task:

•

Now (default)

•

When

If you select the When option, enter the date and time when you want the deployment task to initiate. Click OK to initiate or schedule the deployment task.

Enter the Active Directory credential information to allow the agent to connect to the coordinator in the remote forest, and click OK.

•

Name of Active Directory Root Domain (domain.com): Enter the DNS name (domain.com) of the root domain of Active Directory.

•

Account Name (domain\user) : Enter the name of the user (domain\user) that can find and connect to a coordinator in the Active Directory forest.

•

Account Password : Enter the password associated with the previously entered user account.

•

Account Type: Select the account type of the previously supplied user account.


	NOTE: If you select Group Managed Service Account, the account must be a valid group Managed Service Account from the Agent forest and correctly installed on the Agent server. Ensure that the password is left blank.

•

Add this user to the “ChangeAuditor Agents - <InstallationName>” domain local security group: This is selected by default indicating that the specified user account will be added to the ChangeAuditor Agents security group in the supplied Active Directory domain. User accounts must be added to this security group to properly authenticate.


	NOTE: You may need to pre-stage\create the "ChangeAuditor Agents – <InstallationName>" domain local security group and manually add the configured user account to the security group in additional domains within the forest where coordinators reside. If using a group Managed Service Account this step is required and must be performed manually.

You can add the domain user account to the ChangeAuditor Agents – <InstallationName> security group, if appropriate LDAP and network protocol access is available.

Back on the Deployment page, the Agent Status column displays ‘Pending’ and the When column displays the date and time specified.


	NOTE: To cancel a pending deployment task, select the server or workstation and then click Install or Upgrade. On the Install or Upgrade dialog, click Clear Pending.

As agents are successfully connected to the coordinator, the corresponding Deployment Result cell displays ‘Success’, the Agent Status cell displays ‘Active’ and a desktop notification displays in the lower right-hand corner of your screen.


	NOTE: To deactivate these desktop notifications, select Action \| Agent Notifications.

Once agents are deployed and you open the client, the Overview page opens and provides a real-time stream of events based on a ‘favorite’ search definition and other summary information.

Installing agents in a foreign forest

To manually install an agent in a foreign forest:

Copy the appropriate agent installer package from the Change Auditor service installation directory to the required computers.

Run the installer file to open the Change Auditor Agent Setup wizard which steps you through the installation.

Accept the license agreement and click Next.

Select This agent connects to a coordinator in a foreign forest.

Enter the Active Directory credential information to locate the Change Auditor Installation and allow the agent to connect to the coordinator in the remote forest.

•

Name of Active Directory Root Domain (domain.com): Enter the DNS name (domain.com) of the root domain of Active Directory.

•

Account Name (domain\user) : Enter the name of the user (domain\user) that can find and connect to a coordinator in the Active Directory forest.

•

Account Password : Enter the password associated with the previously entered user account.

•

Account Type: Select the account type of the previously supplied user account.


	NOTE: If you select Group Managed Service Account, the account must be a valid group Managed Service Account from the Agent forest and correctly installed on the Agent server. Ensure that the password is left blank.

•

Add this user to the “ChangeAuditor Agents - <InstallationName>” security group : This is selected by default indicating that the specified user account will be added to the ChangeAuditor Agents security group in the forest where the coordinator is located. User accounts must be added to this security group to properly authenticate.


	NOTE: You may need to pre-stage\create the "ChangeAuditor Agents – <InstallationName>" domain local security group and manually add the configured user account to the security group in additional domains within the forest where coordinators reside. If using a group Managed Service Account this step is required and must be performed manually.

You can add the domain user account to the ChangeAuditor Agents – <InstallationName> security group, if appropriate LDAP and network protocol access is available.

The Installation Name screen prompts you to enter the installation name to identify the database where the coordinator is located. Click Browse to select the required installation

Choose the destination folder and click Next.

Click Next to begin the installation.

Once the agent starts and connects to coordinator, the foreign forest computers will be available in the Deployment tab.