This service runs in the adcscm.nt_intel.exe executable (for Windows platform; executable name varies depending on the platform). Actually, the same service runs on the InTrust Servers and the clients (that is, they share the code base).
The agent that runs on the clients is known as the remote agent; it performs the following operations:
The agent that runs on the InTrust Servers is known as the local agent. This agent performs the same operations as remote agent; besides, it provides communication between remote agents and all other InTrust services/components
Note: Remote agents only communicate with the local agent, they do not communicate directly with other InTrust services/components.
This service only runs on the Windows platform in the adcscm.nt_intel.exe executable. It provides for agent installation, checking and removal.
The InTrust Server Service communicates with the Agent Installer service using remote Service Control Manager (SCM) commands (with special parameters to control Agent Installer behavior). It installs agents by:
Remote agents can be installed on the client computers (those from which event data should be gathered); installation procedure can be performed manually, semi-automatically or automatically.
When performing automatic or semi-automatic installation, Agent_InstallFolderInShare configuration parameter is used together with the Agent_InstallShare parameter to set the agent installation folder. Agent_InstallFolderInShare specifies the local folder where the agent is installed, relative to the shared folder set by Agent_InstallShare parameter. Changes to this parameter affect subsequently installed agents. The default location is the ADCAgent folder in the ADMIN$ share. To change the values: