• 成为门户专家
• 下载
• 打印
• 我的下载 ()

• 支持
• 技术说明文件
• Active Administrator 8.7
• Active Administrator 8.7 - Installation Guide

Active Administrator 8.7 - Installation Guide

内容导航  

Installation Considerations for Active Administrator

System requirements Server hardware requirements Server software requirements SQL Server requirements Console requirements

Console hardware requirements Console software requirements

Audit agents requirements Workstation logon audit agents requirements Web Console requirements System Center requirements Port requirements

Additional requirements

User privilege requirements Active Administrator module requirements

Home Search Certificates Security and Delegation Active Directory Health

Required permissions for Active Directory Health Active Administrator Data Services (ADS) requirements Data collectors requirements

Auditing & Alerts Group Policy Active Directory Recovery DC Management DNS Management Active Administrator Module Configuration

Active Directory Health minimum permissions

Active Directory Health module Active Directory Health Module Configuration Agents Notifications Troubleshooter

AFS service account minimum permissions Diagnostic Console minimum permissions

Installing and configuring Active Administrator

Backing up your data Installing Active Administrator server Configuring the server

Applying a license file Using a passphrase Setting the Active Administrator database Setting the Active Administrator archive database Configuring purge and archive settings Storing Active Administrator data Setting up features and the owner Configuring active template delegation enforcement Configuring group policy history Configuring Active Directory backups Configuring Active Administrator users Configuring service accounts Connecting to System Center Operations Manager and Enabling SNMP Notifications Reviewing selections

Installing Active Administrator console Setting up the console

Setting up auditing on domain controllers Installing audit agents Creating alerts

Setting up workstation logon auditing

Deploying the workstation logon audit agent Enabling the default port

Using Active Administrator

Appendix: Active Administrator Server Manager

Starting the Active Administrator Server Manager Managing the Active Administrator Foundation and Data Services

Updating Active Administrator licenses

Managing Security

Managing the passphrase Managing Active Administrator file security Managing Active Administrator database security Recovering from a lost passphrase

Managing Notification Services Web Server Configuration

• Viewing Topics 57 - 60 of 76

×

Installing Active Administrator console

Install the Active Administrator Console on any workstation that requires the use of Active Administrator.

To install Active Administrator console

1	Unzip the Active Administrator folder, browse to the Installation folder, and run the Active Administrator 8.7 Server.msi.

2	On the Welcome screen of the Setup Wizard, click Next.

3	Click View License Agreement.

4	Scroll to the end of the license agreement.

5	Click I accept these terms, and click OK.

6	Click Next.

7	To change the location of the program files, click Change, or click Next to accept the default installation directory

8	Click Install.

By default, the option to start the Active Administrator Console is selected. If you do not want to start the console, clear the check box.

9	Click Finish.

The first time the Active Administrator console opens, you are asked to set the Active Administrator Server.

10	Type the name of the server where Active Administrator Server is installed, or browse to locate a server.

11

Click OK.

NOTE: If you want to change the server, select Settings | Set Active Administrator Server.

Setting up the console

The Active Administrator Console has a vast number of tasks that you can perform to manage Active Directory and the servers in your system. To get started, there are a few necessary tasks to complete. Once you complete these setup tasks, you can start using the full capacity of Active Administrator.

Topics:

•	Setting up auditing on domain controllers

•	Installing audit agents

•	Creating alerts

Setting up auditing on domain controllers

To gather the proper information from the security event logs, the information must first be audited. You need to modify the Default Domain Controllers Policy to enable auditing.

NOTE: If you have not installed the Active Administrator console, you also can use the Active Directory® Users and Computers MMC snap-in.

To set up auditing on a domain controller

1	Start Active Administrator Console.

2	Select Group Policy | Group Policy Objects.

3	Select Default Domain Controllers Policy, and click Edit.

4	Expand Computer Configuration | Windows Settings | Security Settings | Local Policies, and select Audit Policy.

5	Verify that the following polices are defined. If not, double-click the following policies to edit their Success and Failure settings.

• Audit logon events	[Success, Failure]
• Audit account logon	[Success]
• Audit account management	[Success]
• Audit directory service access	[Success]
• Audit policy change	[Success]
• Audit system events	[Success]

6	Close the Group Policy window.

7	At the command prompt, type gpupdate /force.

NOTE: Auditing policy changes may take a long time to take effect.

Installing audit agents

To collect data on a computer, you must install and activate the audit agent. A wizard guides you through installing the audit agent.

IMPORTANT: Please review the minimum and port requirements for installing the audit agent before you begin the wizard. See Audit agents requirements and Port requirements.

To install an audit agent

1	Select Auditing & Alerting | Agents.

2	Click Install.

3	Click Next.

4	Type the domain name, or browse to locate a domain.

5	If necessary, click Find Domain Controllers.

•	To select all listed domain controllers, click Select all.

•	To clear all the check boxes, click Clear all.

6	Select the domain controllers from which you want to audit activity.

7	Click Next.

8	Select the options for the install process.

You can install the audit agent on the selected domain controllers themselves or on another computer in the current domain. A single audit agent should be able to monitor activity on up to five domain controllers, depending on the type and frequency of activities being audited.

IMPORTANT: When installing the audit agent on a member server instead of a domain controller, the following inbound firewall exceptions for Windows® Management Instrumentation must be enabled: • ASync-In • DCOM-In • WMI-In

 

Table 2. Install options for the audit agent

Option	Description
Install on target Domain Controller(s)	By default, the audit agent is installed on the domain controllers you selected on the previous page.
Audit from an agent on the following computer	Select to install the audit agent on a computer in the domain. Type a computer's fully qualified domain name in the box, or browse to locate a computer. NOTE: If you choose to do remote monitoring, the Advanced Agent is not installed on the selected domain controllers.
Start collecting events immediately after installation of the agent	By default, the audit agent is activated and collection begins immediately upon completion of the installation process. Clear the check box if you want to activate the audit agents manually.
Enable agent monitoring and recovery	By default, Active Administrator monitors the status of the audit agent.

9	Click Next.

10	In the Run as box, type an account with domain administrator rights, or browse to locate an account, and enter the password.

NOTE: The Active Administrator Agent service can also run under a domain user account provided it is either a local administrator account, which gives it the rights to log on as a service and log on locally, or these two privileges can be granted individually. This user or service account should also be a member of the AA_Admin group, which by default is located in the local groups of the server where the ActiveAdministrator database is located. If the group is not found in this location, the settings during the initially database creation were modified and it can be found under the Users container object of Active Directory®.

11	To verify the account, click Test Audit Agent Account.

12	Click Next.

13	Review the summary.

14	Click Next.

15	Click Finish.

The Audit Agent page lists the domain controllers you selected, the time and date of the last event collected, the status of the audit agent and the advanced audit agent, the name of the server on which Active Administrator is installed, and the version number of the audit agent installed on the domain controller.

NOTE: By default, the audit agent is activated upon installation. To change the default setting, select Configuration | Agent Installation Settings. You can view details about the install in the AuditAgentInstall*.log file, which is located here: C:\ProgramData\Quest\Active Administrator\Logs.

•  上一页
• Viewing Topics 57 - 60 of 76
• 下一页 

搜索该文档 在所有文档中搜索该产品版本 在所有文档中搜索该产品 搜索所有文档

×

 欢迎访问支持

您可以在附属支持站点上查找适用于戴尔*产品*的在线支持帮助。单击“继续”，转至适用于*产品*的正确支持内容和帮助。

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级

© ALL RIGHTS RESERVED. 使用条款 隐私 Cookie Preference Center