How to deploy the new Quest ChangeAuditor Dynamic Directory Control (DDC) scripting module for use with Active Roles, when upgrading from a much earlier version.
The previous ChangeAuditor scripting module for Active Roles (version 5.x and 6.x) had several limitations related (but not limited) to Active Roles over-ride accounts, deprovisioning processes and event timing issues for ChangeAuditor alert-enabled searches.
These steps assume Active Roles and ChangeAuditor, along with the Active Roles integration scripts are currently deployed and you have upgraded from a 5.x or 6.x version:
Now three scripts that show "Change Auditor XXXX Script" will be observed. The one WITHOUT the installation name is the new DDC script. If you do not see the other scripts, and you only see the new one without the installation name, the remainder of the steps are not needed.
Note: This is not required but highly recommended, doing so will force the agent to pull the changes now vs the polling interval (every 15 minutes)
Deployment considerations:
Common Issues:
- The user account specified in the CA deployment settings is not an Active Roles administator
- The Active Roles service account is not a member of the ChangeAuditor administrator group
© ALL RIGHTS RESERVED. Feedback Terms of Use Privacy Cookie Preference Center