Network Auditing FAQs

Group Policy Auditing

Is it possible to configure NET Alerts on Windows 2008 and Vista?

Which databases are supported by LT Auditor+ ?

More information on SQL database creation

Unable to access reporting console - 'User does not have sufficient permissions on database objects' error appears

Data is not being rolled up to database from the manager - how can I Debug ?

How does LTA NetWare support clusters & what is the recommended way to set-up monitoring on them

When installing LTA Win vn.8, SP3, a re-boot is required

Where is the DSRAZOR Log File Location 

Taskmaster FAQs

Group policy auditing
The Microsoft Group Policy Management Console (GPMC) must be downloaded from Microsoft.com in order to take advantage of Group Policy Auditing.
If you are installing LT Auditor+ for the first time and will be auditing Group Policy, you will need to download the GPMC;
if you are updating an existing LTA installation prior to SP2, you will need to download the GPMC. The GPMC download may be found here.
NOTE: GPMC comes preinstalled with 2008 servers

Back to top

Is it possible to configure NET Alerts on Windows 2008 and Vista?
This is not poossible. Instead, use SMTP Alerts.

Back to top

Which databases are supported by LT Auditor+ ?
LT Auditor+ v9 for Windows supports the following databases:
• Microsoft SQL (2000/2005).
• Oracle (9i, 10g)
Creating and configuring an LT Auditor+ database is done in the following 4 stages:

1. Creating the database.
2. Creating database objects.
3. Setting access permissions.
4. Setting up database maintenance jobs

Two databases will have to be created for LT Auditor+. We call these the production database and the archive database. The production database hosts audit data for a period of time, usually 30 days, after which older data is moved to the archive database. The archive database hosts audit data for a longer period of time, usually 90 days. The number of days each database can hold data is configurable.

Back to top

More information on SQL database creation
Please access the following link:
For SQL Server -
http://support.microsoft.com
For more information on creating an Oracle database, access:
http://www.orafaq.com

Back to top

Unable to access reporting console - 'User does not have sufficient permissions on database objects' error appears
Edit the following file
C:\Program Files\Blue Lance, Inc\LT Auditor+\Reporting Console\BIN\BLPReportGenerator.exe.config
Change
(add key ="BindingKey" value="1"/)
to
(add key ="BindingKey" value="2"/)

Back to top

Data is not being rolled up to database from the manager - how can I Debug?
Edit the file on the Server that runs th Management console -
E:\Program Files\Blue Lance, Inc\LT Auditor+\Security Management Framework\Bin\BLPAuditingService.exe.config
Set the following
(!--(add name="SCHTraceSwitch" value="4" /) --)
to
"(add name="SCHTraceSwitch" value="4" /)"
and
"(!--(add name="SRVTraceSwitch" value="4" /) --)"
to
"(add name="SRVTraceSwitch" value="4" /)"
Finally, Set
"(!-- (add key="TraceLogLifeTime" value="20000" /) --)"
to
"(add key="TraceLogLifeTime" value="20000" /)"
This will create the following folder that will contain log files showing Manager>Database rollup activity.
E:\Program Files\Blue Lance, Inc\LT Auditor+\Security Management Framework\Tracelogs

Back to top

How does LTA NetWare support clusters & what is the recommended way to set-up monitoring on them?
1. LT Auditor+ has to be loaded on all servers (nodes) in the cluster.
2. Please ensure that LT Auditor+ is not installed on a clustered volume.
3. If the clustered volume is to be audited, please set filters for that volume(s) and ensure that all servers (nodes) have the same filter settings.

Back to top

When installing LTA Win vn.8, SP3, a re-boot is required:
After installing or upgrading to LTA Windows version 8, SP3, it is necessary to perform a re-boot on the server or workstation to which the install has been done, even if the install says that a re-boot is not necessary.

Back to top

DSRazor log file location

This is stored in the %system%\system32\ directory by default. Logging in enabled by default.

Back to top

Taskmaster FAQs

Please see here for the Taskmaster FAQs:
http://www.avanti-tech.com/taskmstr/tm_faq.htm

Back to top