Documentation\Configuration\Audit Server\Installation
|
Please read the Installing Domain Time II overview pages before installing.
Although Domain Time II Audit Server is included in the Domain Time II evaluation distribution, Domain Time II Audit Server is purchased separately from the other
Domain Time II Components. These instructions are for installing from the evaluation distribution.
If you are installing the registered version, you will need to use the Audit Server disk you received when you purchased
(the installation instructions are otherwise the same as described here).
Requirements
- Must be installed on a Windows system. Use the version that corresponds to the hardware platform of the machine
(i.e. 32-bit on 32-bit systems, 64-bit on 64-bit capable machines).
- Domain Time II Server must be installed on the same system where Audit Server is installed.
- Domain time II Audit Server is not supported on virtual machines.
- The Audit Server machine must have sufficient disk space to hold all audit records and sync logs collected until archived.
The space required depends on how many machines are audited, how actively they are synchronizing (if sync logs are being collected), as well as how often
the data is archived and cleaned off the server.
- Certain features of Audit Server require the Audit Server service to be running using a domain user account with administrative privileges to the machines
being audited. This account must have sufficient rights to attach to administrative shares to read/copy files using standard Microsoft (Windows) Networking protocols.
Be sure that the selected service account has sufficient rights across any trusted domains.
- The DTDRIFT.EXE and DTREADER.EXE viewer utilities used to display the Sync Logs and Audit Records collected by Audit Server do not operate on Windows Server Core systems, however these collected data files may be displayed by running the viewer utilities on non-Core systems.
IMPORTANT NOTE: If you will be installing Domain Time II onto machines with AMD processors, we highly recommend you update your
processor drivers (a.k.a. PowerNow!) to the current version for your operating system available from AMD's website to avoid known hardware timing issues.
Please see this article from our knowledgebase for more info: KB2007.817.
Installation/Upgrade
- To install or upgrade Domain Time II Audit Server directly to a single machine from the evaluation distribution setup files:
- Run the Setup program from the CD to install the program. (If you have an older version of Audit Server installed, Setup will give you an upgrade option.
Your original configuration settings will be preserved during the upgrade). See this page
for details on using the Setup utlity.
- Use the Expert Mode of the Setup program. First, click to install Domain Time II Server, then click to install Audit Server.
- Configure the Domain Time II Server you just installed by using its Control Panel applet.
Note: On Vista with UAC enabled, you must Shift+Right Click and choose Run As... from the context menu to launch the Control Panel applet.
On Windows Server Core, type in domtimes.cpl on the command line.
- Use the Server tab page to choose which protocols Server should provide to clients. If this machine is only going
to be used as an Audit machine, you may want to disable all protocols so that no clients will synchronize with it.
- Set Domain Time II Server to get its time from a known good time source that you want to use as a reference source, such as a GPS clock or
a stratum 1 public server. (check your regulatory requirements to see if your time must reference NIST and/or the US Naval Observatory). Do
not choose a time source for your reference clock that also acts as the proximate source of time for the rest of your network unless you have
no other choice. If you choose a machine that is synched from the same source as the rest of your network for your reference clock, you will not
have independent verification of the accuracy of the time by the Audit Server.
Pull up the Control Panel --> Administrative Tools -->Services applet. Click the Logon tab to set the Domain Time II Audit Server service
to run using an account with necessary administrative rights (see the requirements above). You may also need to manually grant the account the
Log on as a System Service right. Start the Domain Time II Audit Server service.
Configure the Domain Time II Audit Server using its Control Panel Applet (click on its icon in Control Panel).
Note: On Vista with UAC enabled, you must Shift+Right Click and choose Run As... from the context menu to launch the Control Panel applet.
On Windows Server Core, type in dtaudit.cpl on the command line.
- Use the Schedule tab page to select the schedule you want Audit Server to use to audit your machines.
Note: If you need more scheduling flexibility, you can use multiple Audit Servers, either for redundancy, or to split the auditing tasks. For
instance, you may want your servers audited hourly, but your workstations only audited twice a day on weekdays.
- Click Audit List to select machines to be audited. Audit Server can discover machines automatically (see the
Discovery page), or you can specify machines by IP address, NetBIOS name, or DNS name.
- Use the Alerts & Logs tab to select the alert mechanisms you want to employ, and define what constitutes an alert.
- If you want to collect individual drift logs or generate summary reports, you configure these functions on the Alerts & Logs tab.
- Click the Email Setup button to configure the email settings for sending alerts.
- Click the Cache tab to verify your local cache location, and to select how long you want Audit Server to retain records.
Test your installation
- Click the Audit Now button on the Schedule tab.
- Click View Log button on the Alerts & Logs page to see the audit activity log to be sure the audit is running with no errors.
- If you're collecting individual drift logs or Audit Summary logs, click the corresponding View Logs button on the Alerts & Logs page to see the activity.
- Click the View Audits button on the Cache page to examine the audit results from the Local Cache.
Removal
- Use Add/Remove Programs utility from the Control Panel to remove the program.
- You may also use the original Setup program to remove the program. Run Setup as described above and choose the Remove option.
 Proceed to the Schedule page
 Back to the Overview page
|
