Installing the auditing components
In this section, you run the Centrify setup program to install the auditing and monitoring components, including the Audit Manager and Audit Analyzer consoles, on the Windows client computer.
To install the Centrify Audit & Monitoring Service from the installer:
- Log on to the Windows client computer using a domain account with administrative privileges, such as
DEMO\administrator. Do not log on as a local user.
- From the Centrify CD or directory that has Centrify software, open autorun.
- On the Getting Started page, click Audit & Monitor to start the setup program for the audit and monitoring service.
At the Welcome page, click Next.
Review the terms of the license agreement, click I accept the terms in the license agreement, then click Next.
Select Centrify Administration and Centrify Services to install both Audit Manager and Audit Analyzer, then click Next.
Accept the defaults for the remaining selections and confirm that the Launch Configuration Wizard option is selected, then click Finish to close the setup program.
Note: If the Launch Centrify Audit Configuration Wizard option is not selectable, a possible cause is that you are logged on to the Windows client computer as a local user (for example, local administrator) rather than as a user with domain administrative privileges. In this scenario, select Start > Switch user and log on as a Windows domain user with administrative privileges (for example,
DEMO\administrator). Then launch Audit Manager from the desktop icon, and select Action > New Installation to start the audit configuration wizard.
- In the Welcome page for the audit configuration wizard, click Next.
Select Create a new installation and type a name for your installation, then click Next to capture audit trail events without recording video of an audited user’s desktop activity.
Audit trail events provide a summary of user activity, for example, when users log on and off, open and close applications, and use role assignments with elevated rights. If you want to be able to review what was displayed on the screen during an audited user’s session, you can select Enable video capture auditing of user activity. This option increases the database storage required for auditing.
- Select Install a new SQL Server Express instance on this computer and specify the instance name, then click Next.
Verify the default path to the Microsoft SQL Server Express setup program, the disk space requirements, and the location for the files, then click Next.
Note: If an incompatible instance of SQL Server Express is already installed, the wizard displays an error message instructing you to uninstall that instance. Use the Windows control panel to uninstall the incompatible instance of SQL Server Express, and then try the SQL Server Express installation from the wizard again.
- Review the summary, then click Finish.
The audit configuration wizard automatically configures the audit store scope, audit store database, and a collector on the local computer. After the auditing infrastructure is in place, you can install the Centrify Agent for Windows and join the computer to the zone you created.