Change Auditor 7.0.2 - Release Notes

Change Auditor client (Client-side component)

The client connects to a coordinator and queries the audited event database for the desired results.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 4 GB RAM or better

Recommended: 8 GB RAM or better

Installation platforms (x64) supported up to the following versions

Screen resolution

Client software and configuration

Ports

Client footprint

Client RAM usage depends on the number of tabs you have open.

Change Auditor agent (Server-side component)

A Change Auditor agent can be deployed to domain controllers (DCs) and member servers to monitor the configuration changes made on these servers. The agents report the audit events to the coordinator which inserts the event details into the Change Auditor database.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 4 GB RAM or better

Recommended: 8 GB RAM or better

Installation platforms (x64) supported up to the following versions

NOTE: Change Auditor agent requires File and Printer Sharing on Windows Server 2008 R2. By default, File and Printer sharing are not enabled on Windows Server 2008 R2installations. To remotely deploy agents to Windows Server 2008 R2, enable the File and Printer sharing (SMB-in) Inbound rule in the Windows firewall (Port 445) on the target host machine. The File and Printer Sharing for Microsoft Networks service on the network adapter must also be enabled for remote deployment.
NOTE: Auditing of some Exchange events requires the latest Exchange service pack. See the Change Auditor for Exchange Event Reference Guide for the minimum service packs required for Exchange events.

Agent software and configuration

Agent footprint

Agent installation is NOT compatible with the following applications

Chang Auditor agent cannot be installed on the same server as agents from Quest products that were precursors to Change Auditor including:

These products are no longer available, but if their agents are still installed they should be removed before installing Change Auditor.

Due to the way Change Auditor integrates with Active Directory to capture all change details, there may be incompatibilities with third party agents that integrate with Active Directory in a similar way such as Active Directory auditing tools from other vendors.

Change Auditor may be incompatible out-of-the-box with agents that are designed to detect suspicious software such as anti-virus tools. In these cases, it may be necessary to configure the third party product to exclude the Change Auditor process from its scope.

If Change Auditor is going to be installed alongside products that conform to either of these patterns, Quest recommends that the installation is tested in a non-production environment first to identify any incompatibilities and adjust the product configurations as necessary before deploying to production.

User account deploying agents

The Agent Deployment wizard runs under the security context of the currently logged on user account. Therefore, you must have administrative authority to install software on every target machine. This means you must be a Domain Admin in every domain that contains servers that you are targeting for installation.

If you are targeting domain controllers only, membership in the Enterprise Admins group grants you authority to all domain controllers in the forest.

In addition, all users responsible for deploying Change Auditor agents must also be a member of the ChangeAuditor Administrators group in the specified ChangeAuditor installation. If you are not a member of this security group for this installation, you get an access denied error.

System account running on agent

Change Auditor agents must run as Local System.

Change Auditor workstation agent (optional component)

You can deploy workstation agents to capture authentication activity and logon session events from monitored workstations when the Change Auditor for Logon Activity Workstation license is applied.

Processor

Dual core Intel Core i5 equivalent or better

Memory

Minimum: 2 GB RAM or better

Recommended: 4 GB RAM or better

Installation platforms supported up to the following versions

Agent software and configuration

Authentication Activity auditing

To capture Authentication Activity events, you must first enable (that is, set to Success, Failure) the ‘Audit Logon events’ audit policy for all servers or workstations:

For more information

See the Change Auditor for Logon Activity User Guide for more information about using Change Auditor for Logon Activity.

Change Auditor web client (optional component)

The Change Auditor web client is an optional component that is installed on the Internet Information Services (IIS) web server to provide users access to Change Auditor through a standard or mobile web browser.

Processor

Quad core Intel Core i7 equivalent or better

Change Auditor

Change Auditor (any license)

Installation platforms (x64) supported up to the following versions

Software and configuration

Browsers supported up to the following versions

 

Change Auditor role

To install the web client, you must have at minimum the operator role.

For more information

See the Change Auditor Web Client User Guide for more information about installing, configuring, and using the web client.

相关文档