Agent components on audited Windows computers

To enable auditing for Windows computers, you must install the Centrify Agent for Windows on the computers you want to audit and make sure the computers are joined to an Active Directory domain. Joining a domain is required to ensure that authentication and authorization services are provided by Active Directory. If you enable auditing for the Centrify Agent for Windows, the agent includes the following components:

  • wdad—the Windows audit data collection service.
  • wash—the Windows service that intercepts all user traffic and sends it to the Windows audit data collection service.
  • The Agent Control Panel—an applet that enables you to configure and manage the agent.

    For example, you can use the Agent Control Panel to configure the color depth of audit data to achieve the desired balance between playback screen resolution and audit store database size.