AuditWizard - Analysis Tools - Run a Trace

Back to Contents

This procedure will run the Scanner in logging mode, producing a log file useful for debugging why individual computers do not produce a usable .ADF audit file.

1. In Administration > Auditing > Upload Options, check Globally turn off auto-upload.
2. In Administration > Auditing > Scanner Configuration, change Re-audit Interval to 0 days.
3. Click the Save Configuration button and the Deploy to Network button.
4. Log into the test computer as a domain admin.
5. The log file is written to a hidden folder, so visibility needs to be enabled. Go to Start > Settings > Control Panel > Folder Options. Click the View tab. Change the following settings:
   1. Files and Folders > Hidden files and folders: Show hidden files and folders
   2. Files and Folders > Hide extensions for known file types: uncheck
   3. Click the Apply button, then OK.
6. Navigate to C:\Users\DOMAINADMINUSERNAME\AppData\Local\Temp\. This is where the log file will be saved.
7. Open Task Manager so that you can monitor when the Scanner stops running.
8. Go to Start > Run. Enter

   \\SERVERNAME\AUDITWIZARDNETSHARE\scanner\AuditScanner.exe T

   and press the Enter key. A dialog will appear, telling you where the log file will be written (step 6). Click the OK button to continue.

9. When AuditScanner.exe disappears from Task Manager, it has completed and quit.
10. Navigate to C:\Users\YOURUSERNAME\AppData\Local\Temp\. Look for AuditScanner.LOG. Move this to \\SERVERNAME\AUDITWIZARDNETSHARE\data\ for easy collection.
11. Navigate to \\SERVERNAME\AUDITWIZARDNETSHARE\data\.
12. Collect the following set of files:
    1. NAME.adf
    2. Log from step 7.
13. In Administration > Auditing > Upload Options, uncheck Globally turn off auto-upload.

Zip the files and send to Support for analysis.

Back to Contents