In this article:
Objective
Prerequisites
Steps to follow
Validation and confirmation
Tips
Related topics and articles
Objective
ADAudit Plus requires an agent installed on target machines to collect logs and monitor activity efficiently. This guide can be useful if the manual installation is not an option or if you would like to install agents in bulk across your environment.
Prerequisites
Before proceeding with the agent installation, ensure the following:
The target machine should be reachable from the ADAudit Plus server.
Required network ports are open:
Port 135 (RPC)
Dynamic RPC port range (49152-65535)
The Windows Firewall allows remote administration and agent communication.
The service account used has administrative privileges on the target machine.
The installer file is available and accessible from the ADAudit Plus server.
Steps to follow
Step 1: Install the Agent for Windows File Servers
Go to the File Audit tab in the ADAudit Plus Web Console
Click on Configured Server(s)
Choose Windows File Server
Check the box next to the file server(s) where you want to install the agent.
Click on the three-dot menu (⋮) and select Install Agent.
Step 2: Install the Agent for Windows Member Servers
Go to the Server Audit Tab in the ADAudit Plus Web Console
Click on Configured Server(s)
Choose Member Servers
Check the box next to the Member server(s) where you want to install the agent.
Click on the three-dot menu (⋮) and select Install Agent.
Step 3: Install the Agent for Windows Workstations
Go to the Server Audit Tab in the ADAudit Plus Web Console
Click on Configured Server(s)
Choose Workstations
Check the box next to the Workstations(s) where you want to install the agent.
Click on the three-dot menu (⋮) and select Install Agent.
Step 4: Install the Agent for Domain Controllers
Navigate to Domain Settings located at the top right of the ADAudit Plus console.
Select the checkbox next to the Domain Controller(s) where you want to install the agent.
Click the three-dot menu (⋮) and choose Install Agent from the options.
Step 5: Validate Agent Connection
Login to ADAudit Plus Web Console.
Navigate to Configuration > Configured Server(s) > Agent Management > Manage.
Check if the newly installed agent appears in the list and its status is Active.
Uninstall Agents
You can uninstall agents in ADAudit Plus using either of two methods: through the Agent Management section or directly from the corresponding Server tab.
Method 1: Using Agent Management
Go to Configuration > Configured Server(s) > Agent Management > Manage
Select the checkbox next to the server(s) from which you want to uninstall the agent
Click on Uninstall Agent
Method 2: Uninstall agent for a Windows File Server
Navigate to the File Audit tab
Click on Configured Server(s)
Select the Windows File Server tab
Check the box next to the target file server(s)
Click the three-dot menu (⋮) and select Uninstall Agent
Validation and Conformation
Navigate to Configuration > Configured server(s) > Agent Management to verify that the newly added agent is listed and displays a status as successfully installed.
Ensure that audit data from the agent machine is being received. You can check this by running reports for that specific system.
Make sure the required communication ports (typically 8081 or configured custom port) between the agent and ADAudit Plus server are open.
Tips
If installation fails or the agent doesn't connect, try removing and reinstalling it from the UI. Sometimes, cleaning up old agent files on the client machine before reinstall helps.
Ensure that you are logged into the target computer with administrator privileges during installation, especially if doing a remote push from the UI.
Set up alerts to notify you if any agent disconnects or stops reporting, ensuring prompt action. Go to Admin > configuration > Agent Settings > Communication Settings.
Related Topics
Troubleshooting ADAudit Plus Agent Installation Issues
Event Collection Troubleshooting - General Errors