Category
产品版本
主题
副主题
How to backup AA Server to recover in case of disaster (4374134)
How to backup AA Server and how to recover in case of disaster. ... From the active administrator server you need to backup the shared folder, by default it is on the C drive.<br>Also is good practice to have regular database backups, and have a copy of the license key and database encryption passphrase on a secure location, also keep note of the service account used.<br>In order to speed up the process also a good idea to have a copy of the MSI for the current version of AA you running! in case you need to rebuild the server.
Does Active Administrator AFS service account require domain admin rights? (4371583)
Can we configure the AFS account to run without admin rights?
Jquery Critical Vulnerability (4373658)
Our cybersecurity team has flagged JQuery as being out of date and representing a security risk on our active admin server. ... Active Administrator 8.3 ... Jquery is a bundled third party component of AA
What ports need to be open between Audit Agent (Domain Controllers) and Active Administrator Server? (4220303)
What ports are required to install the Audit Agent and for it to communicate with the AA server? <div>To install the agent from the AA console, you need to have ports open for SMB, Service Management, WMI and AD.
Unable to get agents status (4378785)
Unable to get agents status getting an unknown status when loading. ... Ping is required to get the agent status, if ping does not work AA will not be able to get the status. ... Make sure ping is unblocked.
"Test failed for agent service account on domain controller. Failed to open the security log" (4235370)
Error occurs when attempting to install Active Administrator audit agent: "Test failed for agent service account on domain controller [servername] Failed to open the security log. ... The credential used to run the Active Administrator audit agent does not have permission to manage the Security.evt log on the domain controller.
Active Administrator 8.8 Critical Notification. (4378777)
The following product notification applies to version 8.8 of Active Administrator. ... Two critical issues have been identified in this version related to the Auditing component. ... All audit events will mistakenly be purged from the Active Administrator database when an “Archive Only” scheduled job is run that was created in previous versions of Active Administrator.
How to subscribe to RSS Feeds/Product Notifications (4316478)
How to subscribe to RSS Feeds/Product Notifications to opt into support notifications to receive emails about the latest software patches, version releases, and updates to our Knowledge Base. ... (Really Simple Syndication)
How to move AA to another server (4316689)
How to move Active Administrator to a new server. ... Download Active Administrator latest update by Clicking Here. ... This is in case you want to install the most recent version in the new server and upgrade your database to the most recent version.
How to reapply the license file (4361447)
How to reapply the license file for Active Administrator. ... and either delete the .dlv file or rename the file.<br><br><img alt="image.png" src="https://questsoftware.file.force.com/servlet/rtaImage?eid=ka0RP0000006a0n&feoid=00N6R00000J0qH8&refid=0EM6R000005Rjlb" style="width: 557.986px;height: 319.983px;"></img><br><br>2- Restart AA services in the following order:<br><br><strong>Active Administrator Foundation Service<br>Active Administrator Data Services<br>Active Administrator Notification Service<br>Active Administrator HTTP Services</strong><br><br>3-
How to remove decommissioned Domain Controller from Auditing & Alerting | Agents (4316937)
<p><strong> </strong></p> ... <p>In the example below, the highlighted domain controller was decommissioned without uninstalling the audit agent first. ... </p> ... <p><strong><img alt="" src="https://prod-support-images-cfm.s3.amazonaws.com/KB_1-T0CAX5_2017-02-23_18-15-34.png"></img></strong></p>
Multiple lockout event generated after upgrade to AA 8.8 (4378668)
After upgrade to AA 8.8 if you are receiving many lockout emails, and they are repeating events, event id 644. ... The new notifications show the event ID 644, even though the event logged in the DC shows either the event ID 4740 or 4625.
AD Restore: An error occurred while attempting to find the Active Directory objects in the archive. (4378640)
AD Restore: An error occurred while attempting to find the Active Directory objects in the archive. ... Expecting the start of a backup object. ... An attribute level restore is not possible, the list of attributes is empty.
Conflict encountered during replication (4378576)
If you are receiving the alert of Conflict encountered during replication. ... What does it mean? ... Why are you seeing this alerts? ... We have raised an alert that during an AD replication between the DCs a conflict happened, and a conflict item was created as a result.
Is OKTA SSO supported in the Active Administrator Web Console? (4378566)
Is OKTA SSO supported in the Active Administrator Web Console? ... The Active Administrator Web Console only supports Windows Authentication.
Unsigned LDAP requests do not appear in AA all events for last 24 hours (4378194)
Unsigned ldap requests are not appearing in the Active Directory Auditing (All events Last 24 hours). ... There are unsigned ldap requests being made to Domain Controllers because they are successfully monitoring Event ID's 2887, 2889 and others in Directory Services log of ActiveDirectory_DomainService.
How to create a custom Audit Report? (4236968)
How do you create a new custom Report? ... If there is an existing canned report you want to customize right click it, select More | Copy As and provide a name ... Locate the new report in the list, right click and select Edit
What permissions are required for the Active Administrator Audit Agent startup account? (4240318)
Using the table below you can determine what permissions are required for the Active Administrator service agent startup account.</span></p> ... <p> </p> ... <table border="1"><tbody><tr><td colspan="1" rowspan="1"><b><span style="color: black;font-size: 10pt;">Permissions</span></b>
GPO History module Last changed date does not match the GPO last modified date (4378274)
GPO History module Last changed date does not match the last modified date of the GPO in GPMC. ... When accessing the AA console and selecting a GPO from the GPO History module, a list of available backups is displayed by default.
Active Administrator console fails to connect with the error: "An error occurred while attempting to connect to AFS server. Could ot connect to net.tcp://ServerName:15600/Afs" (4236960)
When launching the AA console on either the AA server or a different machine the following error is shown: ... "An error occurred while attempting to connect to AFS server. ... Could ot connect to net.tcp://ServerName:15600/Afs"
How to verify the Workstation Logon Audit agent has been successfully deployed using a GPO? (4237047)
How can we confirm the Workstation Logon Audit agent has been deployed to the workstations? <div>To verify that the Workstation logon agent has been deployed to a machine, confirm that the GPO configured to install the agent has been applied to the machine.
DFSRS Virtual Memory (4378469)
For AA 8.7, even if DFSRS Virtual Memory alert is turn off even though still receiving the DFSRS Virtual Memory error alerts. ... We have identified this issue as a bug 509418. ... This issue is resolved in AA 8.8.
Events of Domain accounts created on Exchange servers are not displayed on the Audit Report (4378455)
This issue is caused by the filtering settings in the audit reports. ... When a domain account is created, the acting user recorded in the event is typically the user who created the AD account. ... However, when a domain account is created on an Exchange server, the acting user is recorded as the Exchange server itself, rather than the user who initiated the creation of the account.
Event ID 1004 - An Event Definition was not found for Event Definition code Event Definition Code (4252372)
Event ID 1004 - An Event Definition was not found for Event Definition code Event Definition Code <p><span style="color: black;font-size: 10pt;">Event 1004 appears in the Event Viewer for the Active Administrator Notification Service</span></p>
How to setup the Active Administrator Workstation Logon Feature (4371359)
This feature is an agent based solution which will install an agent on each workstation to be audited for user logon and logoff events including lock and unlock. ... In order for this feature to function, the agent must be instructed on where to send the data from the audit activity and the port on which to send the data to the Active Administrator server.
新产品关联性