Windows Agent Settings

Use the group policies under Windows Settings to configure settings for agents on audited Windows computers.

Allow selected administrative users to stop the auditing service

Use this group policy to specify which users and groups can stop the auditing service on a local Windows computer using the DirectAudit Agent Control Panel.

If this policy is disabled or not configured, no users or groups can stop the auditing service through the control panel.

To use this group policy:

  1. Double click the group policy in the right pane of the Group Policy Management Editor.
  2. On the Policy tab, select Enabled.
  3. Click Add.
  4. In the Select Users or Groups dialog, specify the users or groups who will be able to stop the auditing service using the DirectAudit Agent Control Panel.
  5. Click OK in the Select Users or Groups dialog.
  6. Click OK in the group policy Policy tab to save your changes.

Audited user list

Use this group policy to specify which users and groups are audited. When you enable this group policy, only the users and groups you specify in the policy are audited. Be aware that this group policy takes precedence over the audit level set for a role.

If this policy is not configured, all users and groups are audited.

To use this group policy:

  1. Double click the policy in the right pane of the Group Policy Management Editor.
  2. On the Policy tab, select Enabled.
  3. Click Add and identify specific users and groups to audit.
  4. Click OK to save the list of users and groups.

See the Auditing Administrator’s Guide for more information about the effect of choosing to enable this policy, the Non‑audited user list policy, or a combination of both policies.

Non‑audited user list

Use this group policy to specify which users and groups are not audited. When you enable this group policy, only the users and groups you specify in the policy are not audited. If this policy is not configured, all users and groups are audited. If you enable both the Audited user list and the Non‑audited user list policies, the users you include in the Non-audited user list take precedence over the Audited user list. Be aware that this group policy takes precedence over the audit level set for a role.

To use this group policy:

  1. Double click the policy in the right pane of the Group Policy Management Editor.
  2. On the Policy tab, select Enabled.
  3. Click Add and identify specific users and groups to exclude from auditing.
  4. Click OK to save the list of users and groups.

See the Auditing Administrator’s Guide for more information about the effect of choosing to enable the Audited user list policy, the Non‑audited user list policy, or a combination of both policies.

Set maximum recorded color quality

You can use this group policy to set the maximum color quality of recorded sessions. If this group policy is disabled or not configured, a default value of Low (8bit) is used.

To use this group policy:

  1. Double click the group policy in the right pane of the Group Policy Management Editor.
  2. Select Enabled.
  3. Select one of the following options:
    • Native color

    • Low (8bit)

    • Medium (16bit)

    • Highest (32bit)

  4. Click OK to save settings in this policy.

Set maximum size of the offline data file

You can use this group policy to specify the maximum percentage of disk space that the offline data file uses. If this group policy is disabled or not configured, the default is 10%.

To use this group policy:

  1. Double click the group policy in the right pane of the Group Policy Management Editor.
  2. Select Enabled.
  3. Specify the maximum disk space percentage.
  4. Click OK to save settings in this policy.

Set update agent status timeout

Use this group policy to specify how often (in seconds) the agent status in the audit store database is updated. If this group policy is disabled or not configured, a default value of 300 seconds is used.

To use this group policy:

  1. Double click the group policy in the right pane of the Group Policy Management Editor.
  2. Select Enabled.
  3. Specify the number of seconds between agent status updates.
  4. Click OK to save settings in this policy.