Change Auditor 7.5 - Installation Guide


	NOTE: Previous versions of Change Auditor agents (6.x, and 7.x) can connect and work with a Change Auditor 7.4 coordinator and client. Direct upgrades to the latest version are supported from versions 6.x and 7.x.

The Change Auditor agent requires .NET 4.8. See the System statistics and facilities system requirements for the list of supported platforms.

To upgrade Change Auditor agents:

Open the client and select View | Deployment.

Select the agents to upgrade and click Install or Upgrade.


	NOTE: If you get an Access Denied status in the Deployment Results column, use the Credentials \| Set command to enter the proper credentials for installing agents.

Select one of the following options to schedule the deployment task:

•

Now (default)

•

When

If you select the When option, enter the date and time when you want the deployment task to initiate. Click OK to initiate or schedule the deployment task.

Post upgrade considerations

Querying the Change Auditor database directly is not supported

Querying the database directly is not supported. Any 5.x scripts previously created to manipulate the 5.x (or earlier) events do not work with Change Auditor 7.0 and later.

Data gateway service

The Data Gateway Service is no longer used in Change Auditor for capturing user logon activity events. If you had an earlier version of this service running, you can remove it.

Active Roles integration

If the Active Roles scripting module has been deployed in a previous Change Auditor version, refer to the following knowledge base article which details the process to move to the updated version of these scripting modules that are available in Change Auditor 6.x: https://support.quest.com/change-auditor/kb?k=119136

Exchange Online auditing templates

When you upgrade the client and coordinator from Change Auditor version 6.8 or earlier:

•

Previously created Exchange Online auditing templates are deleted from the database and no longer display in the client.

•

Agents previously assigned to audit Exchange Online stop auditing the tenant.


	NOTE: You can still search and report on previously captured events. All legacy events are shown in the Microsoft 365 subsystem, or Microsoft 365 Exchange Online Mailbox and Microsoft 365 Exchange Online Administration facilities.

To capture new events and avoid losing any audited activities after an upgrade:

Upgrade an existing agent to the latest version.

Create an Microsoft 365 auditing template.

Microsoft Entra ID and Microsoft 365 auditing templates

As of Change Auditor version 7.0.4, additional Microsoft Graph API permissions are required to audit Microsoft Entra ID and Microsoft 365. If you are updating from version 7.0.3 or older see Updating Microsoft Entra ID templates in the Microsoft 365 and Microsoft Entra ID User Guide.