Chat now with support
Chat with Support

Change Auditor 7.3 - Release Notes

Change Auditor client (Client-side component)

The client connects to a coordinator and queries the audited event database for the desired results.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 4 GB RAM or better

Recommended: 8 GB RAM or better

Installation platforms (x64) supported up to the following versions

Screen resolution

Client software and configuration

Ports

Client footprint

Client RAM usage depends on the number of tabs you have open.

Change Auditor agent (Server-side component)

A Change Auditor agent can be deployed to domain controllers (DCs) and member servers to monitor the configuration changes made on these servers. The agents report the audit events to the coordinator which inserts the event details into the Change Auditor database.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 4 GB RAM or better

Recommended: 8 GB RAM or better

Installation platforms (x64) supported up to the following versions

NOTE: Auditing of some Exchange events requires the latest Exchange service pack. See the Change Auditor for Exchange Event Reference Guide for the minimum service packs required for Exchange events.

Agent software and configuration

Agent footprint

Agent installation is NOT compatible with the following applications

Chang Auditor agent cannot be installed on the same server as agents from Quest products that were precursors to Change Auditor including:

These products are no longer available, but if their agents are still installed they should be removed before installing Change Auditor.

Due to the way Change Auditor integrates with Active Directory to capture all change details, there may be incompatibilities with third party agents that integrate with Active Directory in a similar way such as Active Directory auditing tools from other vendors.

Change Auditor may be incompatible out-of-the-box with agents that are designed to detect suspicious software such as anti-virus tools. In these cases, it may be necessary to configure the third party product to exclude the Change Auditor process from its scope.

If Change Auditor is going to be installed alongside products that conform to either of these patterns, Quest recommends that the installation is tested in a non-production environment first to identify any incompatibilities and adjust the product configurations as necessary before deploying to production.

By default, Microsoft Defender has the “Block credential stealing from the Windows local security authority subsystem” rule enabled. This setting must be disabled on the agent computer for Change Auditor to audit events. This does not affect workstation agents.

User account deploying agents

The user account used to deploy agent must have:

System account running on agent

Change Auditor agents must run as Local System.

Change Auditor workstation agent (optional component)

You can deploy workstation agents to capture authentication activity and logon session events from monitored workstations when the Change Auditor for Logon Activity Workstation license is applied.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 2 GB RAM or better

Recommended: 4 GB RAM or better

Installation platforms supported up to the following versions

Agent software and configuration

Authentication Activity auditing

To capture Authentication Activity events, you must first enable (that is, set to Success, Failure) the ‘Audit Logon events’ audit policy for all servers or workstations:

For more information

See the Change Auditor for Logon Activity User Guide for more information about using Change Auditor for Logon Activity.

Change Auditor web client (optional component)

The Change Auditor web client is an optional component that is installed on the Internet Information Services (IIS) web server to provide users access to Change Auditor through a standard or mobile web browser.

Processor

Quad core Intel Core i7 equivalent or better

Change Auditor

Change Auditor (any license)

Installation platforms (x64) supported up to the following versions

Software and configuration

Browsers supported up to the following versions

 

Change Auditor role

To install the web client, you must have at minimum the operator role.

For more information

See the Change Auditor Web Client User Guide for more information about installing, configuring, and using the web client.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating