InTrust Server

Quest InTrust Server

Services

• Quest InTrust Agent (service name: adcscm)
• Quest InTrust Agent Installer (service name: adcscm_install)
• Quest InTrust Real-Time Monitoring Server (service name: itrt_svc)
• Quest InTrust Server (service name: adcrpcs)

Local Groups

• AMS Organization Servers
  This group includes the accounts under which the organization's InTrust servers run. To allow your organization's InTrust servers to communicate with the server you are setting up, add the server accounts to this group.
• AMS Readers
  This group includes the accounts under which InTrust tasks and jobs run. This group is granted the "Log on as a batch job" right on the InTrust server where the task or job is executed.

Log

InTrust—Windows event log

User Rights

• Adjust memory quotas for a process for the InTrust service account
• Log on as a service for the InTrust service account
• Replace a process level token for the InTrust service account
• Log on as a batch job for each InTrust account that is supposed to run InTrust jobs

Files and Folders

• %ALLUSERSPROFILE%\Application Data\Quest
• %ALLUSERSPROFILE%\Documents\Quest
• %ProgramFiles(x86)%\Quest
• %windir%\system32\config\InTrust.Evt
• %windir%\System32\winevt\Logs\InTrust.evtx

Registry

• HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Aelita
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adcrpcs
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adcscm
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adcscm_install
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Quest InTrust Agent
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Quest InTrust Agent Installer
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\QuestLicense
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\QuestLicense112
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\InTrust
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\itrt_svc

Shares

InTrust_Reports default path:

• %ALLUSERSPROFILE%\Documents\Dell\Reports

Databases (Local or Remote SQL Server)

• InTrust_Alerts_DB

• InTrust_Audit_DB

• InTrust_Cfg_DB

The database names can be changed during setup.

Service Connection Point in Active Directory

<MyDomainName>/System/Quest InTrust/InTrustServer{<InTrustServerGUID>}

RPC Server Endpoint in Active Directory

<MyDomainName>/System/RpcServices/<MyInTrustOrganizationName>/<MyInTrustServerName>

Passwords

The InTrust Organization password is stored in LSA.

InTrust Agent

Quest InTrust Agent

Services

• Quest InTrust Agent (service name: adcscm)
• Quest InTrust Agent Installer (service name: adcscm_install)

Files and Folders

%windir%\ADCAgent
This is the default installation folder. You can change it during setup and/or by modifying the Agent_InstallShare and Agent_InstallFolderInShare organization parameters.

Registry

• HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Aelita
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adcscm
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\adcscm_install
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Quest InTrust Agent
• HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Eventlog\Application\Quest InTrust Agent Installer

InTrust Repository Viewer

Quest InTrust Repository Viewer

Start Menu Shortcuts to InTrust Repository Viewer for All Users

• %ALLUSERSPROFILE%\Start Menu\Programs\Quest

Files and Folders

• %ALLUSERSPROFILE%\Application Data\Quest
• %ProgramFiles(x86)%\Quest
• %CommonProgramFiles(x86)%\Quest

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Aelita

InTrust Monitoring Console

Quest InTrust Monitoring Console

Start Menu Shortcuts to Monitoring Console and Monitoring Console Administration for All Users

• %ALLUSERSPROFILE%\Start Menu\Programs\Quest

Files and Folders

• %ProgramFiles(x86)%\Quest

• %CommonProgramFiles(x86)%\Quest

Registry

HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432NODE\Aelita

IIS: Application Pools

• Quest InTrust Real-Time Monitoring Console

IIS: Virtual Directory

<Default Web Site>/ITMonitoring
The Web site and virtual directory name can be changed during setup.