立即与支持人员聊天
与支持团队交流

Change Auditor 7.3 - User Guide

Change Auditor Overview Agent Deployment Change Auditor Client Overview Overview Page Searches Search Results and Event Details Custom Searches and Search Properties Enable Alert Notifications Administration Tasks Agent Configurations Coordinator Configuration Purging and Archiving your Change Auditor Database Disable Private Alerts and Reports Generate and Schedule Reports SQL Reporting Services Configuration Change Auditor User Interface Authorization Client Authentication Certificate authentication for client coordinator communication Integrating with On Demand Audit Enable/Disable Event Auditing Account Exclusion Registry Auditing Service Auditing Agent Statistics and Logs Coordinator Statistics and Logs Change Auditor Commands Change Auditor Email Tags

Add application group

Application groups allow you an alternate way of assigning users to roles. An application group is a feature of Windows Authorization Manager (AzMan) where you can define a group of users without having to go through your domain administrator to add a new group to Active Directory.

1
Open the Application User Interface Authorization page.
2
Expand Add and click Add Application Group.
3
On the Group tab of the Authorizations: Application Group dialog, enter the following information:
•
Name: Enter a name for the application group
•
Description: Enter a brief description for the application group
Select one of the following methods which is to be used to define a group of users:
•
Basic (default)
•
LDAP Query
* 
NOTE: Basic groups are a lot like Active Directory groups; however you can define both included and excluded members. LDAP query groups allow you to define an LDAP query to dynamically create a group of users who are similar. Refer to the Windows Authorization Manager documentation for more information on basic and LDAP query groups.
4
Open the Members tab and add the users and groups that are to be members of this application group.
•
To add an application group, click Add Application Group and select an application group from the Authorizations: Application Groups dialog.
•
To add a user or group, click Add User or Group, which will display the Select Active Directory Objects dialog. Use the Browse page or Search page to locate and select the user(s) and/or group(s) to be added.
5
Optionally, open the Non-Members tab and add the users and groups that are to be excluded from this application group.
•
To add an application group, click Add Application Group and select an application group from the Authorizations: Application Groups dialog.
•
To add a user or group, click Add User or Group, which will display the Select Active Directory Objects dialog. Use the Browse page or Search page to locate and select the user(s) and/or groups to add.
6
Click OK to save your new role definition and close the Authorizations: Role dialog.
7
When the selected members now try to define Active Directory protection they will be restricted to defining protection for the selected domain or organizational unit.

Remove a task definition

Authorization for operations can be removed when no longer required.

1
Open the Administration Tasks tab and click Configuration.
2
Select Application User Interface in the Configuration task list to open the Application User Interface Authorization page.
3
Right-click the required task in the list.
4
Select Edit.
5
Select the Definition tab.
6
Highlight the required operation and click Remove.

Client Authentication

•
Introduction
•
Client Authentication Page

Introduction

Change Auditor has the following authentication methods:

•
Windows Forms Authentication (enabled by default)
When users log in, the current Windows logon user security context is used to authenticate with the coordinator. Typically, user account and password are not required.
•
Active Directory Client Certificate Authentication
When users log in, they must specify a smart card or certificate. User account and password are not required.

Certificate authentication for client coordinator communication.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级