EventTracker Manual Agent Deployment
Contents
1. Group Pokey objects EP ac View Default Domain Controllers Policy EP De New Window From Here Default Domain Policy Group PolicyE T ae De Group PokeyET and Chageaudl i Gr Delete ROP Sevices Rename W SO3R2 55LF Domain a or aa WSOSR2 S5LF blemiber S eave RE Refresh WIZIDER2SP1 Member Server Secunby Lomphance E W Properties be yt ha a at Help ere aan cesi H Group Policy Modeling UA Group Policy Results Figure 25 Link an existing GPO EventTracker 4 22 Logging in Depth EventTracker Manual Agent Deployment 14 In the Select GPO dialog box select the appropriate domain name and newly created Group Policy Object and then click the OK button 15 Close the Group Policy window The MSI package has now been defined and is ready for the deployment 16 Force replication to all other domain controllers NOTE EventTracker Change Audit agents will be installed once the target machines are restarted EventTracker 4 Logging in Depth 23 EventTracker Manual Agent Deployment Verifying Installation Events will be sent to the target systems i e Manager systems upon successful deployment of EventTracker Change Audit agents The name of the deployed agent along with their version number will appear in the System manager screen On Target systems following events will be generated in System Event Log On Pre Vista Operating System On successful Agent deployment Example2. NOTE Please rename the certificate file as EventTracker cer All the parameters will be read from the Agent ini configuration settings file when the installer is running silently EventTracker 4 13 Logging in Depth EventTracker Manual Agent Deployment e tis mandatory to specify either Enterprise Manager name or Change Audit Manager name e lf user wish to install EventTracker Agent then Enterprise Manager Name EM is mandatory e f user wish to install Change Audit Agent then Change Audit Manager Name CM is mandatory e lf you wish to place the certificate file in a different location then please provide the full path along with the certificate name in the configuration settings file i e DC full path along with the certificate name e Remedial Actions are scripts or EXEs that can be launched at either the Agent or Manager Side in response to events If this option is enabled predefined scripts will be placed in the EventTracker Agent Script folder e Microsoft XML Core Services MSXML is installed along with the MSI Agent Installer setup for 32 bit and 64 bit machines respectively e The Microsoft Visual C 2008 Redistributable Package x86 which installs runtime components of Visual C Libraries required to run applications developed with Visual C is also installed along with the MSI Agent Installer setup e Before deploying the Agent make sure that the Agent system s and domain controller are s
3. 1 Event Type Information Event Source Application Management Event Category None Event ID 301 User NT AUTHORITY SYSTEM Computer ESXWINXPVM8 Description The assignment of application EventTrackerAgent from policy EventTracker Agent Deployment succeeded Example 2 Event Type Information Event Source Application Management Event Category None Event ID 302 User NT AUTHORITY SYSTEM Computer ESXWINXPVM8 Description The install of application EventTrackerAgent from policy EventTracker Agent Deployment succeeded EventTracker 4 24 Logging in Depth EventTracker Manual Agent Deployment On Failed Agent deployment Event Type Event Source Event Category Event ID User Computer Description EventTracker Logging in Depth 2 Warning Application Management None 102 NT AUTHORITY SYSTEM ESXWINXPVM8 The install of application EventTrackerAgent from policy Software Deployment policy failed 25 EventTracker Manual Agent Deployment On Vista and Post Vista Operating System On Successful Agent Deployment Example 1 Log Name System Source Application Management Group Policy Event ID 301 Task Category None Level Information Keywords Classic User SYSTEM Computer Esxwin2k8r2vm3 Toons local Description The assignment of application EventTrackerAgent from policy Software Deployment policy succeeded Example 2 Log Name System Source Application Management Gro
4. I do not accept the terms in the license agreement Figure 4 License Agreement 4 Click the Next button 5 Browse the certificate file and then click the Next gt button i EventTracke rigent 7 3 E Select a Certificate File Eve n tTra cker 5 ENTERPRISE Please provide a certificate file C Documents and Settings deepalDesktop EventTracker 133998861 Figure 5 Select certificate file EventTracker 9 Logging in Depth EventTracker Manual Agent Deployment 6 In Custom Setup there are two options EventTracker Windows Agent Only and Change Audit Agent Only See Figure 6 Li amp Event racke r gent 7 3 A Custom Setup Eve n t Tra cke r Select the program Features you want installed ENTERPRISE Click on an icon in the list below to change how a feature is installed Feature Description Install only the Windows Agent component EventTracker Windows Agent Change Audit 4gent This Feature requires approximately 12MB on your hard drive Install to C Program Files Prism Microsystems Figure 6 Custom Setup Click En icon to select the installation options This Feature will be installed on local hard drive This feature and all subfeatures will be installed on local hard drive This Feature will nok be available Figure 7 e Select This feature will be installed on local hard drive option to install only agent and not sub features OR
5. of etaconfig ini 4 Run ProgramFiles Prism Microsystems on the manager system and then copy the latest CRL file PrismCA crl 5 Replace Agent Altemp PrismCA crl with this latest CRL copied from manager system 6 If program files shortcut menu is not required then open the file Agent etsetup ins in notepad and replace _PgmMenuShortCutReg 1 with PgmMenuShortCutReq 0 NOTE The default etaconfig ini available with this installer will not have a manager and license server configured In addition File transfer and Config assessment are disabled If the default copy is not replaced then please configure Manager and required settings by opening Programs gt EventTracker gt Agent Config Agent Configuration GUI or by running etaconfig exe from installation path B Perform the installation on XP 2K3 1 Execute install bat C Perform the installation on Vista 2k8 Win7 when UAC is enabled 1 Go to Start gt All Programs gt Accessories 2 Right click on Command Prompt and select Run as administrator to open the command prompt as administrator EventTracker 4 28 Logging in Depth EventTracker Manual Agent Deployment 2 3 Inthe command prompt change the directory to the path where install bat file is located 4 Type install bat and press enter Perform the installation on 64 bit OS Open the file Agent etsetup ins and update INSTALLPATH Program Files x86 Prism Microsystems EventT
6. the Add button to apply GPO settings to the domain computers group or ensure the authenticated users group is listed B In the Enter the object name to select field type the object name or a part of the object name and then click the Check Names button to select the object name Select User Computer or Group Ei E4 Select this object type User Computer Group or Built in security principal Object Types From this location Entire Directory Locations Enter the object name to select examples Check Mames PRISMTESTI Me2 Advanced Cancel 2 Figure 17 EventTracker 4 17 Logging in Depth EventTracker Manual Agent Deployment C Click the OK button 5 On the left hand side right click on the newly created GPO and then click Edit Group Policy Object Editor window will be opened A Expand the Computer Configuration and open Software Settings E gel pe Configuration E i Policies are ir TEE Settings Administrative Templat Preferences g User Configuration Policies C Preferences Figure 18 B Right click Software Installation select New and then click Package Software Settings Software installation Package Paste Refresh Properties Help Figure 19 Software Installation create new package 6 An Open dialog box should appear EventTracker 4 Logging in Depth EventTracker Manual Agent Deployment Look in E
7. this machine option and then click the Install button iis EventTrackerfgent 3 Ready to install the Program Eve n tTracker The wizard is ready to begin installation ENTERPRISE Click Install to begin the installation To review or change settings click Back Cancel exits the wizard Install default Remedial Action EXEs on this machine Remedial Actions are scripts or EXEs that can be launched at either the Agent or Manager side in response to events IF this option is enabled predefined scripts will be placed in the EventTracker4gent Script Folder at the Manager These may be installed at the Agent side also during deployment via the System Manager Figure 9 EventTracker 9 Logging in Depth x Pi EventTracker Manual Agent Deployment NOTE To select Install default Remedial action EXEs on this machine option is not mandatory If you do not wish to enable remedial action then do not select the option Directly click the Install button 10 In Basic Configuration dialog box check the configuration options to apply to the manager system and then click the OK button Basic configuration Enable Event Log Backup System Monitor Overall CPU performance Overall Memory performance Disk Utilization Service Monitor Monitor Device Changes C Logfile Monitor Application Monitor App Install Uninstall App Usage Per Process CPU performance Per Process Memory performance Agent File Transfer Wind
8. AgentMSI_73 Oe ti F fe EventTracker gent msi My Recent Documents Desktop hy Documents My Computer My Network File name EventTrackerAgent msi Places Files of type windows Installer packages mi Cancel Figure 20 A Locate the UNC path of the server share where the MSI installer file is located Server Share AgentMSI_73 B Select the MSI installer file EventTrackerAgent msi and then click Open EventTracker displays Deploy Software dialog box Deploy Software Ei Select deployment method Published Select this option to Assign the application without modifications Cancel Figure 21 Deploy Software 7 Select Assigned and then click OK You have now created and assigned the Package Object Right click on the Package Object and select Properties Click on the Security tab and add Domain Computers to the security permissions EventTracker 4 19 Logging in Depth EventTracker Manual Agent Deployment EventTracker4gent Properties ki General Deployment Upgrades Categories Modifications Group or User names 7 CREATOR OWNER 8 Domain Admins PELOUD 200340 oman Admins H gi Doman Computers PELOUCD 200340 oman Computers 8 Enterprise Admins PLLOUDZOOSE nterprise Admins ti ENTERPRISE DOMAIN CONTROLLERS f ar LJ I I Lt E I I ra Mo A A Add Remove Permissions for Domain Computers Allow Deny Full Control C na
9. EEEREEEER EEEE EE 12 PEGE NO DEE ari e E E eee eee ee ee er 12 Launch Group Policy Management Console ee EEn E EEEE EEE EEEE EEEE Ennen 15 Create the Group Policy Object in Active Directory for Software Deployment csscsecerrn 15 NIT VANS TRV O aeS E EE A EE E S 24 On Prevista Operating Syste ME arnosini isian E RE EaR 24 On Vista and Post Vista Operating SySteMierekeiiennsa aaa EE a A AAE 26 Limitation for Group Policy Installation s ssssssssssssrssssrrsssrrrssnrrsssrrrssnnrrssnrrrsnnnrrnnntrrnntrrnntnrntterrnnnrenes 28 Manual Agent Installation Batch File Install eeesessessssssersrsrsrssrssrnsrrsrrnrrntrnrsrrserntrnsrinrinrrnrrne ens 28 EventIracker Agent Installation gacpicnacssncusiearencsdnsaes sxinesreancnanssnnchieatencednsanysdiestiancnaesdansieatencidesanrsuiesiancniess 28 Change Audit Agent Installation a asarucecaetacyasanstesosnetecesanaetedesestarsanacatsanstotecnesngetacanretavesn at atassetaayecagee ces 29 EventTracker 4 Logging in Depth EventTracker Manual Agent Deployment Before You Begin Before you begin with EventTracker agent deployment there are few things you need to have and do Please keep in mind the points described below e Network Share where the EventTracker agent MSI files are stored should be accessible from all the target systems e Domain systems should have at least read access on Network Share where the EventTracker MSI files are stored e Target systems should be member of the same dom
10. EventTracker 9 Logging in Depth Eventlracker Manual Agent Deployment User Manual EventTracker Manual Agent Deployment Abstract EventTracker agent deployment processes are described in detail in this manual EventTracker Agent can be deployed using methods like Active Directory Group Policy Command Line User Interface and using any other Software deployment software This document has covered all the methods to deploy an agent Purpose The purpose of this document is to provide the step by step instructions to deploy EventTracker Agent using various methods and to enable the user to understand the deployment procedure Target audience EventTracker users or system administrators who wish to deploy the EventTracker agent The information contained in this document represents the current view of Prism Microsystems Inc on the issues discussed as of the date of publication Because Prism Microsystems Inc must respond to arene market conditions it should not be interpreted to be a commitment on the part of Prism Microsystems Inc and Prism Microsystems Inc cannot guarantee the accuracy of any information presented after the date of publication This document is for informational purposes only Prism Microsystems Inc MAKES NO WARRANTIES EXPRESS OR IMPLIED AS TO THE INFORMATION IN THIS DOCUMENT Complying with all applicable copyright laws is the responsibility of the user Without limiting the rights under co
11. Figure 12 EventTracker 4 Logging in Depth 12 EventTracker Manual Agent Deployment Address G Woopeye Shared 4qentMsl_ 73 Mame Size Agent ini 2 KE change 1 cab 3 755 KE ET etwAgent 3 exe 4 585 KB EventT 1 cab 10 939 KB 3 KB jer EventTracker Agent msi 19 612 KB ReadMe txt 2 KB setup bmp 559 KB Figure 12 Acronyms Used INSTALLDIR If this parameter is left blank the files will be installed in the default location i e WAProgramFiles Prism Microsystems Else you can specify the path where you wish to install the files EM If this parameter is left blank Enterprise manager won t be installed EP If this parameter is left blank the installer will assume the default port CM If this parameter is left blank Change Audit manager won t be installed IR If 1 then remedial actions are installed if O then remedial actions are not installed If this parameter is left blank the installer takes a default value as 1 DC The location where the certificate file is present If left blank the installer will assume the file to be present in the same location where the AgentMSI files are extracted LS The system name IP Address where the digital certificate is installed If this parameter is left blank the value will be read from EM i e License server name will be the same as Enterprise manager LP If this parameter is left blank the default port i e 14503 will be assumed by the installer
12. O z D write permission O E Special Permissions O For special permissions or for advanced settings click Advanced aea am _ Figure 22 Ensure Domain Computers has the Read and Write rights 10 Click the Advanced button select Domain Computers and then click Edit EventTracker Logging in Depth 20 EventTracker Manual Agent Deployment Advanced Security Settings for d3efe649 00a6 49b0 afc4 abeefidTb3ic Auditing Owner Effective Permissions To view more information about special permissions select a permission entry and then click Edit Permission entries Type Hame Permission Inherited From A Allow Authenticated Users ee eee Allow Domain Admins edia Permission Entry for d3efe649 00a6 49b0 afc4 abeef E E Allow SYSTEM Object Properties Allows Authenticated Users fri ano a Upoans Hame ters PCLOUDZO03 Domain Computers Change Allow Enterprise Admins PLLOUDZU A Fiten Ge MOL ikl moe Apply onto This object only Add sg Permissions Allow Dery lw Allow inhertable permissions from the pre Full Control O these with entries explicit defined here mirer Read All Properties Write All Properties To replace all permission entries with the de Delete Read Permissions Leam more about access control ae Modify Permissions OOO Modify Owner All Validated writes v OOOOOOOOO La Apply these permissions to objects and or Clear A
13. ain e Once EventTracker agents are installed via group policy you will not be able to uninstall the agents from the EventTracker system manager D CAUTION e To complete the installation target systems need to be restarted after configuring software deployment policy e In Windows XP sometimes it will take two reboots to get application installed This is because Windows XP operates by default in a mode called Fast Logon Optimization This means that the computer boots and logs in quicker but it does mean that events that should occur during the computers boot or login will be delayed until the second boot or login EventTracker 4 3 Logging in Depth EventTracker Manual Agent Deployment Download and Prepare EventTracker Agent MSI Installer Package for Deployment Before you start with deployment you need to extract MSI files to a suitable folder Follow the instructions given below 1 Download MSI package e g AgentMSI_73 zip from the location provided by Prism Microsystems Support team 2 Extract AgentMSI_73 zip to AgentMSI_73 3 Copy License certificate file to Extracted folder AgentMSI_73 and rename it to EventTracker cer Deployment through Command Line 1 Fill the necessary details in Agent ini configuration file refer Table 1 on how to specify the parameters 2 The installer will look for the certificate file to be present in the same folder See the highlighted file in the figure 1 where t
14. e Select This feature and all subfeatures will be installed on local hard drive option to install agent as well as its sub features OR e Select the This feature will not be available option if you do not wish to install the agent 7 Click the Change button to change the installation path of the agent and then click the Next gt button See Figure 6 8 Inthe Event destination pane enter the EventTracker manager name Ex Win2k3x64 Port number Ex 14580 and Change Audit manager name Ex Win2k3x64 and then click the Next gt button See Figure 8 EventTracker 9 3 Logging in Depth EventTracker Manual Agent Deployment i EventTracke r gent 7 3 Event Destination Fyve n t Tracker Configure Win XP 2003 Vista 2008 Events Destination ENTERPRISE Enter the system name where the Enterprise Event Manager is installed Up to 5 managers can be configured separated by a comma f EventTracker Manager wingkax64 Port number 14580 Deploy SCAP Deploy WINSCP Enter the system server name or IP address where the license certificate is installed License Server win2k3x4 Port number 14503 Enter the name of the system where Change Audit Manager is installed IF you want bo install the standalone version enter the local system name Change Audit Manager winzkaxgal Figure 8 Event Destination x r 9 In this last step of the installation process check the Install default Remedial action EXEs on
15. he files are extracted So please copy the certificate file to AgentMSI_73 folder Address p Woopeye Shared 4qentMsl_ 73 Mame Size i Agent ini 2 KE 3 change 1 cab 3 755 KB PY etwAgent 3 exe 4 585 KB EventT 1 cab 10 939 KB 3 KB er EventTracker agent msi 19 612 KB ReadMe txt 2 KB setup bmp 559 KB Figure 1 To launch command line click the Start button and then click Run In Run dialog box type CMD and then click the Ok button Change directory to AgentMSI_73 Nu F w Type EventTrackerAgent msi qn command and then click the Enter button EventTracker 4 4 Logging in Depth EventTracker Manual Agent Deployment NOTE e On Post Vista machines the MSI Installer executable should be run with Administrative privileges e All the parameters will be read from the Agent ini configuration settings file when the installer is running silently e lf you wish to place the certificate file in a different location then please provide the full path along with the certificate name in the configuration settings file i e DC full path along with the certificate name EventTracker 4 Logging in Depth EventTracker Manual Agent Deployment Deployment through User Interface 1 Click on etwAgent73 exe InstallShield Wizard pop up window appears on the screen InstallShield Wizard Event rackenagent Setup is preparing the InstallShield Wizard i Which will guide you through
16. licy Results Contents New Window From Here Refresh Help Figure 14 Create Group Policy Object 3 Entera name for this new GPO E g AgentMSI GPO and then click the OK button New GPO Name AgentMSI GPO Source Starter GPU none Cancel Figure 15 New GPO 4 Click the name of newly created GPO In this case AgentMSI GPO EventTracker 4 Logging in Depth 16 EventTracker Manual Agent Deployment i File Action View Window Help ee Almlaolx alam Group Policy Management AgentMSI_GPO E Forest prismtest1 local A ain Scope Details Settings Delegation 3 E g4 prismtest1 local Links c PASE pae Policy Display links in this location rimena O test1 local E Domain Controllers prismtest loca E EventTracker Server The following sites domains and Os are linked to this GPO B I contohi ee e Enabled Path Hg AgentMSI_GPO Default Domain Controllers Pol Default Domain Policy W SO8R2 SSLF Domain f WSO8R2 SSLF Member Servet WSO8R2 Web Server WMI Filters z Starter GPOs Sites st Group Policy Modeling Gz Group Policy Results The settings in this GPO can only apply to the following groups users and computers Security Filtering S Authenticated Users Add Remove Properties WHI Filtering This GPO is linked to the following WMI filter lt none gt 7 Open Figure 16 A In the Security Filtering pane click
17. ll containers within thie container only Cancel Figure 23 Assign permissions Check the List Contents Read All Properties and Read Permissions options if not selected 11 In Group Policy Management right click the domain system name and then select New Organizational Unit OU EventTracker 9 Logging in Depth EventTracker Manual Agent Deployment Active Directory Users and Computers 1 File Action view Window Help e Am 3 xF AB QPu VHT Se lt 3 Active pee oly Users and Computer Sertai uart tm n n Ea TE Boon computer Builtin H Computers H Domain Controllers if Event Tracker Server e ee PMI ele PNPL H Test OU H Testuser Figure 24 Create new OU 12 In the New Organizational Unit has to be created For example Group policy 13 Right click newly created OU and then click Link an Existing GPO S Group Policy Management File Action View Window Help Group Policy Management GROUP policy El Forest PCLOUD2003 com SET Domains Linked Group Policy Objects Group Policy Inheritance Delegation B E PCLOUD2003 com Link der Link Enabled GPO Status WMI Fit ao Default Domain Policy S Group PolicyET and Chageaudit No No Enabled None F a Domain Controllers at Event Tracker Server et Create and Link a GPO Here ae Et x sar pmr Block Inherit a a Test Group Policy Modeling Wizard H a Testu New Organizational Unit Elia Group
18. ll bat and press enter EventTracker Logging in Depth EventTracker Manual Agent Deployment D Perform the installation on 64 bit OS 1 Open the file Agent wcsetup ins and update LocalRootDir Program Files x86 Prism Microsystems WCWindows 2 Execute installx64 bat follow steps C if UAC is enabled NOTE If you are installing EventTracker agent or change audit agent in custom path using batch file installer then you need to change the custom installation path in ins and bat file as well EventTracker 4 30 Logging in Depth
19. nfiguration Settings INSTALL_PATH INSTALLDIR lt Installation directory if agent need to be installed in other than default path gt END LENTERPRISE_MANAGER EM lt EventTracker Manager Hostname or IP Address gt END ENTERPRISE_PORT EP lt EventTracker Enterprise Port number gt END CHANGEAUDIT_MANAGER CM lt Change Audit Manager Hostname or IP Address gt END REMEDIAL_ACTIONS IR 1 END DIGITAL_CERTIFICATE DC Certificate path and certificate name END LICENSE_SERVER LS lt The server name IP Address where the digital certificate is installed gt END LICENSE_SERVER_PORT LP lt License server port number gt END Deploy SCAP components DEPLOY_SCAP DS END Deploy WINSCP components DEPLOY_WINSCP Sample Configuration INSTALL_PATH INSTALLDIR END ENTERPRISE_MANAGER EM Win2k3x64 END ENTERPRISE_PORT EP 14580 END CHANGEAUDIT_MANAGER CM Win2k3x64 END REMEDIAL_ACTIONS IR 1 END DIGITAL_CERTIFICATE DC END LICENSE_SERVER LS Win2k3x64 END LICENSE_SERVER_PORT LP 14503 END Deploy SCAP components DEPLOY_SCAP DS END Deploy WINSCP components DEPLOY_WINSCP 2 Create a network share on server and allow Domain Computers to have at least READ access permission 3 Copy the AgentMSI_73 folder to the network share which is created in previous step Network share folder should have the below files See
20. ows Events via File Transher L Other Log Files Contig Assessment W Network Connection Monitoring Connection Type W TOP Open Close M UDP Open Close Monitor f All Network Trafic C Only Suspicious Traffic Event racker includes several important features You can customize EventT racker by enablingdisabling the above list of available features OF Figure 10 Basic Configuration EventTracker 9 10 Logging in Depth EventTracker Manual Agent Deployment 11 Click the Finish button to complete the installation process ie Event I racker gent 7 3 EventTracker 4 ENTERPRISE InstallShield Wizard Completed The wizard was interrupted before EventTracker4gent could be completely installed Your system has not been modified To complete installation at another time please run setup again Click Finish bo exit the wizard Copyright 1999 2012 Prism Microsystems Inc PRISM y Back Finish Cancel Figure 11 EventTracker 9 Logging in Depth 11 EventTracker Manual Agent Deployment Deployment through Group Policy Before you Begin 1 Modify Agent ini and change EM ENTERPRISE_MANAGER CM Change Audit manager InstalIDIR EventTracker Agent installation directory EP ENTERPRISE_PORT LS License server name IP Address where the digital certificate is installed and LP License server port number value appropriately Co
21. pyright this Guide may be freely distributed without permission from Prism a we as its content is unaltered nothing is added to the content and credit to Prism is provided Prism Microsystems Inc may have patents patent applications trademarks copyrights or other intellectual ee rights covering subject matter in this document Except as expressly provided in any written license agreement from Prism Microsystems Inc the furnishing of this document does not give you any license to these patents trademarks copyrights or other intellectual property The example companies organizations products people and events depicted herein are fictitious No association with any real company organization product person or event is intended or should be interred 2012 Prism Microsystems Inc All rights reserved The names of actual companies and products mentioned herein may be the trademarks of their respective owners EventTracker 4 j Logging in Depth EventTracker Manual Agent Deployment Table of Contents Poore OU o 2 4 err eee E eee 3 Download and Prepare EventTracker Agent MSI Installer Package for Deployment cece 4 Deployment through Command LINC 2 0 eee et eee e tenet tees tease eae etna ee nee et aeeeeeeetaeeteaeee snes enneeenaaes 4 Deployment through User INterfaCe attt t ntt knnt tE EEEEEAEEEENEEEESEEEEREEEEREEEEEEEEEEEEEE REEERE 6 Deployment through Group POLICY tattu nnt tAANEEAAEEEAEEEENEEEEEEEEEEEEERE
22. racker Agent Execute installx64 bat follow steps C if UAC is enabled Change Audit Agent Installation A 1 2 3 4 5 6 1 1 2 3 4 Prepare the files for manual agent install EventTracker Change Audit Agent Extract the zip file in the root directory of install drive Replace Agent AlTemp EvtLicenseCert cer with your certificate file used for ET installs Keep the certificate name always as EvtLicenseCert cer Replace Agent AlTemp wew ini with your copy of wcw ini Get latest CRL file PrismCA crl by running ProgramFiles Prism Microsystems on the manager system Replace Agent AlTemp PrismCA crl with this latest CRL copied from manager system Open the file Agent wcsetup ins in notepad and replace Server 0 with Server lt ManagerName gt Substitute the text lt ManagerName gt with the name of manager system If program files shortcut menu is not required then open the file Agent wcsetup ins in notepad and replace PgmMenuShortCutReg 1 with PgmMenuShortCutReq 0 Perform the installation on XP 2K3 Execute install bat Perform the installation on Vista 2k8 Win7 when UAC is enabled Go to Start gt All Programs gt Accessories Right click on Command Prompt and select Run as administrator to open the command prompt as administrator In the command prompt change the directory to the path where install bat file is located Type insta
23. the program setup process Please all Configuring Windows Installer Figure 2 2 Click the Next gt button to start with installation ii EventTrackerAgent 7 3 EventTracker 4 ENTERPRISE Welcome to the InstallShield Wizard for EventTrackerAgent The InstallShield PR Wizard will install EventTracker4gent on your computer To continue click Next WARNING This program is protected by copyright law and international treaties Copyright 1999 2012 Prism Microsystems Inc PRISM Figure 3 EventTracker 9 Logging in Depth EventTracker Manual Agent Deployment 3 Read the License Agreement and then select the option accept the terms in the license agreement ig EventTracke r gent 7 3 License Agreement Eve n t Tra cker 5 Please read the Following license agreement carefully ENTERPRISE PRISM MICROSYSTEMS INC SOFTWARE LICENSE AGREEMENT PLEASE READ THIS SOFTWARE LICENSE AGREEMENT CAREFULLY BEFORE DOWNLOADING COPYING OR USING THE SOFTWARE BY CLICKING ON THE ACCEPT OR EQUIVALENT BUTTON OR SIGNING BELOW OPENING THE PACKAGE DOWNLOADING INSTALLING OR USING THE SOFTWARE YOU ARE CONSENTING TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT IF YOU DO NOT AGREE TO ALL OF THE TERMS OF THIS AGREEMENT CLICK THE DECLINE OR Calis Al CRIT DI ITT Abi hI THIC IRI TA ATR aes ce ane A aT I accept the terms in the license agreement
24. up Policy Event ID 302 Task Category None Level Information Keywords Classic User SYSTEM Computer Esxwin2k8r2vm3 Toons local Description The install of application EventTrackerAgent from policy Software Deployment policy succeeded EventTracker 4 26 Logging in Depth EventTracker Manual Agent Deployment On Failed Agent Deployment Log Name Source Event ID Task Category Level Keywords User Computer Description EventTracker Logging in Depth 2 System Application Management Group Policy 102 None Error Classic SYSTEM Esxwin2k8r2vm3 Toons local The install of application EventTrackerAgent from policy Software Deployment policy failed 27 EventTracker Manual Agent Deployment Limitation for Group Policy Installation e Retain configuration does not work via Group policy e Upgrade agents is not supported via Group policy e Modification features are not supported via Group policy e Command line or silent installation doesn t support retain upgrade and modify functions Manual Agent Installation Batch File Install EventTracker Agent Installation A Prepare the files for manual agent install EventTracker Agent 1 Extract the zip file in the root directory of install drive 2 Replace Agent AlTemp EvtLicenseCert cer with your certificate file used for ET installs Keep the certificate name always as EvtLicenseCert cer 3 Replace Agent AlTemp etaconfig ini with your copy
25. ynchronized EventTracker 4 14 Logging in Depth EventTracker Manual Agent Deployment Launch Group Policy Management Console 1 Click Start gt gt Settings gt gt Control Panel gt gt and then select Administrative Tools 2 In Administrative Tools click Group Policy Management E croup Policy Management Oy x File Action View Window Help Amla H _ amp Group Policy Management Forest prismtest1 local A Forest prismbest1 local Contents E Domains CH Sites T Group Policy Modeling iz Group Policy Results Figure 13 Group Policy Management Create the Group Policy Object in Active Directory for Software Deployment Follow the steps given below to create the new Group Policy Object using the Group Policy Management Snap in 1 In the Group Policy Management pane expand Domains node and then expand domain system node 2 Right click Group Policy Objects and then click New EventTracker 9 15 Logging in Depth EventTracker Manual Agent Deployment E Group Policy Management Fie Action view Window Help s Alm alH Group Policy Management Domains E A Forest prismbest 1 local El Domains g4 prismtest1 local a Default Domain Policy 3 prismtest local E Domain Controllers EventTracker Server st Group Policy Objects Lp WMI Filters Starter GPO Back Up All r Sites Manage Backups are Group Policy Modelin Open Migration Table Editor Ca Group Po
Download Pdf Manuals
Related Search