Chat now with support
Chat with Support

Change Auditor 7.2 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Disable Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Change Auditor Client Overview

•
Starting the Change Auditor client
•
Managing connection profiles
•
Client components
•
Customize table content
•
Filter data
•
Directory object picker

Starting the Change Auditor client

To connect to the client, the following conditions must be met:

•
The coordinator service is running and has a valid SCP listening port (no firewall implications).
•
The current authenticated user running the client has the proper credentials to access the Change Auditor coordinator service. If this condition fails, the client displays the Coordinator Credentials Required dialog where you can enter the proper logon credentials.
•
The current authenticated user is a member of either the ChangeAuditor Administrators or ChangeAuditor Operators AD group. If this condition fails, the Change Auditor logon screen displays an error and credential text boxes for entering the appropriate credentials.
•
When using a direct database connection, the current authenticated user running the client has the proper SQL credentials to access the SQL database. If this condition fails, the client displays the Database Credentials Required dialog where you can enter new logon credentials.
To start the client
1
Select Start | All Programs | Quest | Change Auditor | Change Auditor Client.
You can connect to the ‘default connection’ profile or specify a different connection profile. A connection profile defines the connection method to connect to a coordinator in trusted or untrusted forests, or to the database directly without connecting with the coordinator. See Managing connection profiles for more information.
2
Select Connect to use the default connection profile.
Alternatively, select a previously defined connection profile and click Connect.
If you do not have the proper credentials required for access, the credentials dialogs display allowing you to enter the required credentials.
Depending on how your system has been configured:
•
You may need to enter a user account and password or a smart card certificate and personal identification number.
•
Select the option to disconnect the client from the coordinator after 30 minutes of inactivity.
3
The first time the client opens, you are presented with the Start page which provides up-to-date product information.
4
Select the Deployment page to deploy agents. This page may initially be empty until the current forest’s server topology is harvested. This page automatically refreshes when the topology harvest completes.
* 
NOTE: Topology scan takes a long time when the environment contains many workstations.
5
To see a real-time stream of events based on a ‘favorite’ search definition as well as other valuable summary information about the application, select the Overview page.

Accessing Change Auditor news and updates

The first time you open Change Auditor, you are presented with the Start page. Form here, you can view and access relevant information including news and updates, support and knowledge base content, online documentation (release notes and guide), links to the latest releases, and essential contact links.

If you do not want to see this page, clear the Display this page each time I log in option. The next time you log in to Change Auditor you will be directed automatically to the Overview page. However, we suggest you keep the Start page active as it contains the most up-to-date access to the supporting information you may require.

Managing connection profiles

You can manage Change Auditor in the same forest or in a different forest from a single client allowing you to connect to the coordinator service or the database in many ways.

You can define connection profiles to connect to a coordinator in trusted or untrusted forests, or to connect to the database directly without connecting with the coordinator.

To define a connection profile
1
On the Connection screen, click Manage.
2
On the Manage Connection Profiles dialog, click Add to open the Connection wizard, which steps you through the process of defining a new profile.
* 
NOTE: Previously defined connection profiles are listed allowing you to review the details of each connection profile and edit any user-defined profiles.
3
On the Change Auditor Environment page, select the connection method to use. The available methods include:
•
Forest — connect to a coordinator in a trusted forest. Enter the DNS name of the forest.
•
Global Catalog — connect to a coordinator in an untrusted forest. Enter the name or IP address of the global catalog.
•
Manual — connect to a coordinator located in a different Active Directory forest than the client.
* 
NOTE: When you select to add or edit a manual connection, you will have the option to Use WCF Certificate Authentication and Disable Certificate Revocation List Check. When specifying the coordinator service properties, these check boxes must reflect the options for which the coordinator is configured. For details see, Certificate authentication for client coordinator communication.
•
Database Direct — connect directly to the Change Auditor database, without going through the coordinator (use this method to connect to an archived 6.x database). With this option, you are connected as an operator with read-only privileges; therefore, the Administration Tasks tab is not available.
4
Depending on the connection method selected, enter the requested information on the Connect to Change Auditor Coordinator page:
•
Forest - select the Service Connection Point (SCP) to use to connect to the coordinator.
•
Global Catalog - select the SCP to use. To override the coordinator service DNS, you can enter the IP address and port number assigned to the coordinator.
•
Manual - enter the fully-qualified domain name or IP address (IPv4 or IPv6) of the server where the coordinator resides and specify the port number assigned to the coordinator.
* 
NOTE: If the coordinator host cannot be resolved by DNS (for example, if the coordinator service is running under a service account instead of Local System) you must enter the IP address of the server where the coordinator resides.
•
Database Direct - use the Browse button to select the SQL instance and Change Auditor database.
* 
NOTE: If the current authenticated user does not have the proper SQL credentials to access the database, the Database Credentials Required dialog appears allowing you to enter new credentials.
NOTE: If the database is in a SQL AlwaysOn Availability Group, specify the availability group listener for the sql server name.
5
On the Connection Profile Summary page, review the connection profile details, name the profile and click Test to test the new connection profile. Click Finish to save the connection profile and close the Connection wizard.
6
On the Manage Connection Profile dialog, the new connection profile is added to the list. Click Save to save the new profile and close the Manage Connection Profile dialog.
7
To use this new connection profile, select it from the drop-down list on the Connection screen and click Connect.
8
If you do not have the proper credentials required for access, a dialog opens allowing you to enter new credentials.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating