Before requesting support please ensure you have read the necessary documentation. If you are evaluating, the downloaded zip files all include a "Start_up" document in PDF format (see also below). Please consult this document to double check that installation has been performed correctly.
Please note: If you are not running the latest release of the software, you may be asked to update to the latest release before further investigation can take place.
Support request
If you cannot find your answer in the documentation / FAQs below, and wish to ask a question or report a problem Contact support
|
The Microsoft Group Policy Management Console (GPMC) must be downloaded from Microsoft.com in order to take advantage of Group Policy Auditing.
If you are installing LT Auditor+ for the first time and will be auditing Group Policy, you will need to download the GPMC;
if you are updating an existing LTA installation prior to SP2, you will need to download the GPMC. The GPMC download may be found at:
http://www.microsoft.com/downloads/details.aspx?FamilyId=0A6D4C24-8CBD-4B35-9272-DD3CBFC81887&displaylang=en
NOTE: GPMC comes preinstalled with 2008 servers Back to top |
This is not poossible. Instead, use SMTP Alerts. Back to top |
LT Auditor+ v9 for Windows supports the following databases:
• Microsoft SQL (2000/2005).
• Oracle (9i, 10g)
Creating and configuring an LT Auditor+ database is done in the following 4 stages:
1. Creating the database.
2. Creating database objects.
3. Setting access permissions.
4. Setting up database maintenance jobs
Two databases will have to be created for LT Auditor+. We call these the production database and the archive database. The production database hosts audit data for a period of time, usually 30 days, after which older data is moved to the archive database. The archive database hosts audit data for a longer period of time, usually 90 days. The number of days each database can hold data is configurable. Back to top |
Please access the following link:
For SQL Server -
http://support.microsoft.com.
For more information on creating an Oracle database, access:
http://www.orafaq.com. Back to top |
Edit the following file
C:\Program Files\Blue Lance, Inc\LT Auditor+\Reporting Console\BIN\BLPReportGenerator.exe.config
Change
(add key ="BindingKey" value="1"/)
to
(add key ="BindingKey" value="2"/)
Back to top |
Edit the file on the Server that runs th Management console -
E:\Program Files\Blue Lance, Inc\LT Auditor+\Security Management Framework\Bin\BLPAuditingService.exe.config
Set the following
(!--(add name="SCHTraceSwitch" value="4" /) --)
to
"(add name="SCHTraceSwitch" value="4" /)"
and
"(!--(add name="SRVTraceSwitch" value="4" /) --)"
to
"(add name="SRVTraceSwitch" value="4" /)"
Finally, Set
"(!-- (add key="TraceLogLifeTime" value="20000" /) --)"
to
"(add key="TraceLogLifeTime" value="20000" /)"
This will create the following folder that will contain log files showing Manager>Database rollup activity.
E:\Program Files\Blue Lance, Inc\LT Auditor+\Security Management Framework\Tracelogs Back to top |
1. LT Auditor+ has to be loaded on all servers (nodes) in the cluster.
2. Please ensure that LT Auditor+ is not installed on a clustered volume.
3. If the clustered volume is to be audited, please set filters for that volume(s) and ensure that all servers (nodes) have the same filter settings. Back to top |
After installing or upgrading to LTA Windows version 8, SP3, it is necessary to perform a re-boot on the server or workstation to which the install has been done, even if the install says that a re-boot is not necessary. Back to top |
Back to top |