• 成为门户专家
• 下载
• 打印
• 我的下载 ()

• 支持
• 技术说明文件
• Change Auditor 7.4
• Change Auditor 7.4 - Installation Guide

Change Auditor 7.4 - Installation Guide

内容导航  

Installation Overview

Before you begin System requirements System statistics and facilities System overview Installation overview Using group Managed Service Accounts (gMSA)

Install Change Auditor

Installation workflow Install the first coordinator Install the client Install multiple coordinators

Add Users to Change Auditor Security Groups

Introducing Change Auditor security groups Add accounts to security groups Add accounts to ChangeAuditor database role

Connecting to the Clients

Connect to the client Open the web client Access product information

Deploy Change Auditor Agents

Change Auditor agents Deploy agents

Upgrade Change Auditor

Pre-upgrade considerations Upgrade Change Auditor

Step 1: Upgrade all coordinators (and database schema) Step 2: Upgrade all clients Step 3: Upgrade the agents

Post upgrade considerations

Installation Notes and Best Practices

Licensing Change Auditor products Permissions Other installation notes Change Auditor for Windows File Servers Change Auditor for Exchange Change Auditor for Authentication Services Change Auditor for SharePoint

Agent deployment

Backup notes Agent behavior notes Client notes ADAM (AD LDS) auditing Change Auditor for SQL Server — SQL auditing

Deployment Options

Multi-forest deployment

Requirements Example deployment scenario Configuration

Foreign forest agent deployment

Supported functionality Requirements Workflow Harvesting the foreign forest topology Deploying agents to a foreign forest Installing agents in a foreign forest Example deployment scenario

Workstation Agent Deployment

Recommendations and deployment requirements Manual workstation agent deployment Deploying workgroup agents (non-domain workstations)

Agent Comparison Install an agent to audit ADAM (AD LDS) on workgroup servers Windows Installer Command Line Options

Agent options Coordinator options Web Client options

• Viewing Topics 61 - 64 of 67

×

Deploying workgroup agents (non-domain workstations)

•	A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers:

•	UDP port 137 (name services)

•	UDP port 138 (datagram services)

•	TCP port 139 (session services)

•

A routable network path must exist between the workgroup computer, domain controllers, and the coordinator servers. Name resolution of domain controllers and the coordinator servers is also required from the non-domain computer, whether DNS server configuration, NetBIOS/WINS configuration or local hosts file entries are used.

•	Agents must be deployed manually. See Manual workstation agent deployment.

•	During installation, the agent installer prompts for Active Directory domain and credential information to locate a coordinator and installation name.

•	When the first agent is installed on workgroup computer, a ChangeAuditor Agents - <InstallationName> security group is created. User accounts must be added to this security group to properly authenticate.

•	The agent installer allows you to add the domain user account to the ChangeAuditor Agents – <InstallationName> security group, if appropriate LDAP and network protocol access is available.

NOTE: Sometimes, you might need to pre-stage\create the ChangeAuditor Agents – <InstallationName> security group and manually add the configured workstation agent user account to the security group.

•	You can also use the Coordinator Credential Configurator to change between coordinator domains at any time after the agent is installed.

NOTE: The Coordinator Credential Configurator application can be launched using the CoordinatorCredentialConfigurator.exe file in the agent installation folder on the workstation. The default agent installation location is: %ProgramFiles%\Quest\ChangeAuditor\Agent

NOTE: If User Account Control is enabled, you may need to authorize the Coordinator Credential Configurator tool to use the required elevated permissions by right-clicking on the tool and selecting 'Run as administrator' option

 

Agent Comparison

There are a few client features that are not available for workstation agents. The following table displays the agent-related features that are available for server and workstation agents.

 

Table 6. Agent comparison

Page and Feature	Available for server agents?	Available for workstation agents?
Deployment Page The Deployment page does not display non-member objects, such as ADAM workgroup servers or non-Active Directory workstations, because agents cannot be deployed to non-member objects using the Deployment tab.
Included in topology harvest	Yes	Yes
Install or Upgrade (deploy agent)	Yes	Yes
Advanced Options | Specify Agent Installation Location	Yes	Yes
Advanced Options | Specify a Custom Share on the Remote Server	Yes	Yes
Advanced Options | Launch ServiceStatusTray on startup	Yes	No
Advanced Options | Restart Agent on failure	Yes	Yes
New Servers | Enable Auto Deployment on New Servers	Yes	No
Overview Page
Agent Status Pane • Enterprise View (member objects) • Workstation View (member objects) • Other View (non-member objects) • <Domain> (member and non-member objects)	Yes No Yes Yes	No Yes Yes Yes
Count of Events Pane • Location (member and non-member objects)	Yes	Yes
Top Agent Activity Pane • All (member and non-member objects) • DCs (member objects) • Servers (member objects) • Workstations (member objects) • Others (non-member objects)	Yes Yes Yes No Yes	Yes No No Yes Yes
Search Properties Tabs
Where Tab	Yes	Yes
Origin Tab	Yes	Yes
Agent Statistics Page
Included in Agent Statistics page	Yes	Yes
Start | Stop | Restart agent (member objects)	Yes	Yes
Start | Stop | Restart agent (non-member objects)	No	No
Set Agent Uninstalled	Yes	Yes
Hide | Show Uninstalled agents	Yes	Yes
View agent logs	Yes	Yes (See Note below)
View resource properties	Yes	Yes
Administration Tasks Page — Agent Configuration
Included in Agent Configuration page	Yes	No
Assign agent configurations	Yes	No (Uses Default Configuration)
Configuration Setup dialog | System Settings	Yes	Yes (From Default Configuration)
Configuration Setup dialog | File System settings (Change Auditor for Windows File Servers, Change Auditor for EMC or Change Auditor for NetApp)	Yes	No
Configuration Setup dialog | AD Query settings (Change Auditor for Active Directory Queries)	Yes	No
Configuration Setup dialog | Exchange settings (Change Auditor for Exchange)	Yes	No
Agent system tray icon	Yes	No

 

 

NOTE: For workstation log management (such as Get Logs and View Agent Logs), the following must be enabled on the workstation: • Windows Management Instrumentation (WMI) in the firewall rule set (usually domain) on the workstation • Network Discovery and File Sharing • Remote Registry Service set to ‘Start Automatically’. By default, this service is stopped and set to ‘Manual’ for Windows 10.

Install an agent to audit ADAM (AD LDS) on workgroup servers

Change Auditor audits Active Directory Application Mode (ADAM) or Active Directory Lightweight Directory Services (AD LDS) events. This section provides information regarding the agent installation necessary for auditing ADAM (AD LDS) instances on workgroup servers.

Agent installation

NOTE: An agent must be installed on the server where the ADAM (AD LDS) instance to audit resides.

To install agents to audit ADAM (AD LDS) on workgroup servers:

NOTE: A workgroup agent requires NetBIOS over TCP enabled and access to the following ports inbound to the domain controllers: • UDP port 137 (name services) • UDP port 138 (datagram services) • TCP port 139 (session services)

1	Copy the appropriate agent installer package from the Change Auditor service installation directory to the workgroup server to monitor. The default directory is %ProgramFiles%\Quest\ChangeAuditor\Service\ Change Auditor Agent (x64).msi.

2	Run the installer file on the workgroup server to open the Change Auditor Agent wizard which steps you through the installation.

3	Review the following table for additional requested information in this wizard. This table only covers unfamiliar information. It does not include all the wizard screens or field descriptions.

Table 7. Change Auditor Agent wizard

Active Directory Information screen On the Active Directory Information screen, enter the Active Directory information required for the agent to establish a coordinator connection.
Name of Active Directory Root Domain (domain.com)	Enter the DNS name (domain.com) of the root domain of Active Directory.
Account Name (domain\user)	Enter the name of the user (domain\user) that can find and connect to a Change Auditor coordinator in the Active Directory forest.
Account Password	Enter the password associated with the previously entered user account.
Installation Name screen The Installation Name screen prompts you to enter the installation name to identify the database to which the coordinator is to be connected. A workgroup agent must join an existing Change Auditor installation.
ChangeAuditor Installation Name	Enter an existing Change Auditor installation or click Browse to select from a list of existing installations.

Windows Installer Command Line Options

This section lists the Windows Installer command line options (MSIEXEC.exe) that are available for deploying an agent or installing a coordinator.

•	Agent options

•	Coordinator options

•	Web Client options

For more information on using the Windows Installer (MSIEXEC.exe) see: http://msdn.microsoft.com/en-us/library/aa367988(VS.85).aspx

•  上一页
• Viewing Topics 61 - 64 of 67
• 下一页 

搜索该文档 在所有文档中搜索该产品版本 在所有文档中搜索该产品 搜索所有文档

×

 欢迎访问支持

您可以在附属支持站点上查找适用于戴尔*产品*的在线支持帮助。单击“继续”，转至适用于*产品*的正确支持内容和帮助。

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center