AuditWizard - Analysis Tools - Run a Trace

Revision as of 22:17, 12 December 2016

Back to Contents

This procedure will run the Scanner in logging mode, producing a log file useful for debugging why individual computers do not produce a usable .ADF audit file.

1. In Administration > Auditing > Upload Options, check Globally turn off auto-upload.
2. In Administration > Auditing > Scanner Configuration, change Re-audit Interval to 0 days.
3. Check that all the desired Audited Items options are enabled.
4. Click the Save Configuration button and the Deploy to Network button.
5. Log into the test computer as a domain admin.
6. Go to Start > Control Panel > Folder Options. Click the View tab. Change the following settings:
   1. Files and Folders > Hidden files and folders: Show hidden files and folders
   2. Files and Folders > Hide extensions for known file types: uncheck
   3. Click the OK button.
      

      
      

7. Open Task Manager so that you can monitor when the Scanner stops running.
8. Go to Start > Run. Enter

   \\SERVERNAME\AUDITWIZARDNETSHARE\scanner\AuditScanner.exe T

   and press the Enter key.

9. A dialog will appear:
   

   
   

   Click OK to start.
   

10. When AuditScanner.exe disappears from Task Manager, it has completed and quit.
11. Navigate to C:\Users\YOURUSERNAME\AppData\Local\Temp\. Move AuditScanner.LOG to \\SERVERNAME\AUDITWIZARDNETSHARE\data\ for easy collection.
12. Navigate to \\SERVERNAME\AUDITWIZARDNETSHARE\data\.
13. Collect the following set of files:
    1. NAME.adf (if created)
    2. Log from step 10.
14. In Administration > Auditing > Upload Options, uncheck Globally turn off auto-upload.

Zip the files and send to Support for analysis.

Back to Contents