AuditWizard - Analysis Tools - Run a Trace

Revision as of 01:18, 28 May 2014

Back to Contents

This procedure will run the Scanner in logging mode, producing a log file useful for debugging why individual computers do not produce a usable .ADF audit file.

1. In Administration > Auditing > Upload Options, check Globally turn off auto-upload.
2. In Administration > Auditing > Scanner Configuration, change Re-audit Interval to 0 days.
3. Click the Save Configuration button and the Deploy to Network button.
4. Log into the test computer as a domain admin.
5. Go to Start > Settings > Control Panel > Folder Options. Click the View tab. Change the following settings:
   1. Files and Folders > Hidden files and folders: Show hidden files and folders
   2. Files and Folders > Hide extensions for known file types: uncheck
   3. Click the Apply button, then OK.
6. Open Task Manager so that you can monitor when the Scanner stops running.
7. Go to Start > Run. Enter

   \\SERVERNAME\AUDITWIZARDNETSHARE\scanner\AuditScanner.exe T

   and press the Enter key. This will initiate a scan and will create a log file.

8. When AuditScanner.exe disappears from Task Manager, it has completed and quit.
9. Navigate to C:\Users\YOURUSERNAME\AppData\Local\Temp\. Look for AuditScanner.LOG. Move this to \\SERVERNAME\AUDITWIZARDNETSHARE\data\ for easy collection.
10. Navigate to \\SERVERNAME\AUDITWIZARDNETSHARE\data\.
11. Collect the following set of files:
    1. NAME.adf
    2. Log from step 7.
12. In Administration > Auditing > Upload Options, uncheck Globally turn off auto-upload.

Zip the files and send to Support for analysis.

Back to Contents