Installation prerequisites

Please ensure that the following criteria are met to allow smooth installation of the agent on the target machine.

Supported operating systems

Windows Server operating systems

• Windows Server 2008 and above

Windows operating systems

• Windows 8 and above;
• Windows 7 and Windows Vista (EOLed by Microsoft)

Ports that need to be open

Agent to server communication
Purpose 1. Sending audit data from agent to server 2. Syncing agent running status with server 3. Pulling all configurations periodically (every 60 minutes) from the server
Port to be opened	Protocol	Destination	Direction
To find the port used by ADAudit Plus, log in to the ADAudit Plus console, navigate to the Admin tab > General Settings > Connection > NAT. In case, you have not configured a NAT device between the ADAudit Plus agent and server, the port number adjacent to the Central server field should be opened in the agent installed machine (by default, ADAudit Plus uses port number 8555 for agent to server communication). If you have configured a NAT device between the ADAudit Plus agent and server, find the port number adjacent to the NAT Device field.	HTTPS	Monitored computers	Outbound
Server to agent communication
Purpose 1. Automatically installing, uninstalling, and upgrading the agent via the product 2. Syncing server configuration with the agent when the agent has not communicated with the server for more than two hours: communication between the agent and server is checked once every 30 minutes 3. Immediately notifying the agent of the following actions: global exclude configuration changes, event collection schedule time and run-now changes, product port and protocol changes, enabling or disabling of servers, and more Note: The agent synchronizes server configurations by HTTPS communication. If HTTPS fails then the server attempts to sync all configurations with agent via RPC.
Port to be opened	Protocol	Destination	Direction
Dynamic ports (49152- 65535) 445, and 135	RPC	Monitored computers	Inbound

Ensure that the port used by ADAudit Plus are open on the client machine to establish successful communication from the Agent to ADAudit Plus server.

Privileges required

Make sure that the ADAudit Plus service account (the ADAudit Plus service account is the AD account used while configuring a domain in ADAudit Plus) is a member of the Domain Admins group so that ADAudit Plus can perform the following actions automatically:

1. Install, uninstall or update the agent
2. Start or stop the agent
3. Sync properties across the server and the agent

If you do not wish to use Domain Admin credentials, you can still perform the above tasks manually.

Disk space requirements

Ensure there is a minimum of 2GB of free disk space. This will allow the agent to save up to 2GB of event data when it is unable to forward data to server. Event collection will stop once the 2GB limit is reached. You can configure this setting in the product by navigating to Admin > Agent settings > Event Data Settings > Maximum size of EventData directory.

Windows .NET Framework

The installation requires Windows .NET Framework version 4.5 or higher on the client machine.

By default, .NET Framework version 4.5 or higher is included with Windows Server 2012 or higher, as well as workstations running Windows 8 or higher. If you're running one of these operating systems, you can proceed with step 3: installing the agent.

If you're running an older version of Windows, please ensure that .NET Framework version 4.5 or higher need to be installed on the following operating systems: Windows 7, Windows Server 2008 R2, and Windows Server 2008.

You can check the .NET Framework version installed on a computer by opening Command Prompt, navigating to \%windir%\Microsoft.NET\FrameWork, and then going to the directory with the latest version number. Once in the directory with the latest version number, run the command .\MSBuild.exe -version.

Microsoft (R) Build Engine version 4.7.3056.0
[Microsoft .NET Framework, version 4.0.30319.42000]
Copyright (C) Microsoft Corporation. All rights reserved.
4.7.3056.0

The last line after the copyright information is the Windows .NET Framework version installed on the computer.

Remcom.exe

ADAudit Plus uses remcom.exe and remcomsvc.exe for installing and uninstalling the agent. To ensure unhindered functioning of ADAudit Plus, you need to add the remcom.exe file to the exception list of your antivirus software in the ADAudit Plus server and remcom.svc.exe file to the exception list of your antivirus software in the target computers in which the agent is to be installed.