Configuration Guide for SharePoint

Transcription

1 LEPIDE SOFTWARE Configuration Guide for SharePoint This document explains the steps to configure LepideAuditor Suite to audit ShareP0int Server. LepideAuditor Suite

2 Copyright LepideAuditor Suite, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite (Web Console), LepideAuditor Logon/Logoff Audit Module, any and all components, any and all accompanying software, files, data and materials, this Configuration Guide, and other documentation are copyright of Lepide Software Private Limited, with all rights reserved under the copyright laws. This user guide cannot be reproduced in any form without the prior written permission of Lepide Software Private Limited. No Patent Liability is assumed, however, with respect to the use of the information contained herein. Lepide Software Private Limited, All Rights Reserved. Warranty Disclaimers and Liability Limitation LepideAuditor Suite, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite (Web Console), LepideAuditor Logon/Logoff Audit Module, any and all components, any and all accompanying software, files, data and materials, are distributed and provided AS IS and with no warranties of any kind, whether expressed or implied. In particular, there is no warranty for any harm, destruction, impairment caused to the system where these are installed. You acknowledge that good data processing procedure dictates that any program, listed above, must be thoroughly tested with non-critical data before there is any reliance on it, and you hereby assume the entire risk of all use of the copies of LepideAuditor Suite and the above listed accompanying programs covered by this License. This disclaimer of warranty constitutes an essential part of this License. In addition, in no event does Lepide Software Private Limited authorize you or anyone else to use LepideAuditor Suite and the above listed accompanying programs in applications or systems where LepideAuditor Suite and the above listed accompanying programs failure to perform can reasonably be expected to result in a significant physical injury, or in loss of life. Any such use is entirely at your own risk, and you agree to hold Lepide Software Private Limited harmless from any and all claims or losses relating to such unauthorized use. Trademarks LepideAuditor Suite, LAS, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite (Web Console), LepideAuditor Logon/Logoff Audit Module, LepideAuditor for Active Directory, LAAD, LepideAuditor for Group Policy Object, LAGPO, LepideAuditor for Exchange Server, LAES, LepideAuditor for SQL Server, LASS, LepideAuditor SharePoint, LASP, Lepide Object 2016 Lepide Software Pvt. Ltd. Page 2

3 Restore Wizard, Lepide Active Directory Cleaner, LADC, Lepide User Password Expiration Reminder, LUPER, and LiveFeed are registered trademarks of Lepide Software Pvt Ltd. All other brand names, product names, logos, registered marks, service marks and trademarks (except above of Lepide Software Pvt. Ltd.) appearing in this document are the sole property of their respective owners. These are purely used for informational purposes only. We have compiled a list of such trademarks but it may be possible that few of them are not listed here. Windows XP, Windows 7, Windows 8, Windows 8.1, Windows 10, Windows 2000 Server, Windows 2000 Advanced Server, Windows Server 2003, Windows Server 2003 R2, Windows Server 2008, Windows Server 2008 R2, Windows Server 2012, Exchange Server 2003, Exchange Server 2007, Exchange Server 2010, Exchange Server 2013, SharePoint Server, SharePoint Server 2010, SharePoint Foundation 2010, SharePoint Server 2013 SharePoint Foundation 2013, SQL Server 2005, SQL Server 2008, SQL Server 2008 R2, SQL Server 2012, SQL Server 2014, SQL Server 2016, SQL Server 2005 Express Edition, SQL Server 2008 Express SQL Server 2008 R2 Express, SQL Server 2012 Express, SQL Server 2014 Express.NET Framework 4.0,.NET Framework 2.0, Windows PowerShell are registered trademarks of Microsoft Corporation. Intel and Pentium are registered trademarks of Intel Corporation. Contact Information sales@lepide.com Website: Lepide Software Pvt. Ltd. Page 3

4 Table of Contents 1. Introduction Prerequisites to add SharePoint Server Adding SharePoint Server SharePoint Server Details Installing SharePoint Agent Site Collection Settings Database Settings Archive Database Settings Remove SharePoint Server Modify SharePoint Properties Manage SharePoint Agent Uninstall SharePoint Agent Uninstall Agent from not added SharePoint Reinstalling the Agent Conclusion Lepide Software Pvt. Ltd. Page 4

5 1. Introduction Welcome to the Configuration Guide of LepideAuditor Suite. This software is a comprehensive solution providing all round audit information and control regarding Active Directory, Group Policy Objects, Exchange Servers, SharePoint Servers, and SQL Servers. In this configuration guide, we have covered the steps to add and audit a SharePoint Server using LepideAuditor Suite. 2. Prerequisites to add SharePoint Server SharePoint Server can be added only when you have installed Microsoft System CLR Types for SQL Server 2012 and Microsoft SQL Server 2012 Management Objects Setup at the server where SharePoint is installed. The setup files to install these two add-ons come pre-installed with the software. Perform the following steps, Go to the server and browse the folder where LepideAuditor Suite is installed. Open the folder "Redist" which has different setup files. "x64" folder has the setup files for 64-bit Windows Server, whereas "x86" contains the files for 32-bit Windows Server OS. Open the required folder. Run the setup file "SQLSysClrTypes.msi" to install Microsoft System CLR Types for SQL Server Follow the onscreen instructions. Run the file "SharedManagementObjects.msi" to install Microsoft SQL Server 2012 Management Objects Setup. Follow the onscreen instructions. Connectivity of LepideAuditor Suite is required to the SQL Server that is interlinked with SharePoint Server Lepide Software Pvt. Ltd. Page 5

6 3. Adding SharePoint Server Lepide Auditor Suite allows you to track and audit multiple SharePoint Servers from a single platform. You need to add the SharePoint Servers to be audited. To add a SharePoint server, you need to perform the following steps. 1. Go to "Settings" tab "Component Management" for adding a SharePoint Server. You can add a new SharePoint by clicking on the SharePoint button. Figure 1: SharePoint Server button You can also right-click on the Component Management link and select SharePoint Server from Add option. Figure 2: Right click on Component Management 2. Add SharePoint Server wizard starts as shown in the image below Lepide Software Pvt. Ltd. Page 6

7 Figure 3: Add SharePoint Server 3.1 SharePoint Server Details 3. This step has two sections: a) SharePoint Details: In the SharePoint Details section, provide Central Administration URL, IP Address, User Name and Password. Please refer to the following note for required rights. b) SQL Server Details: In SQL Server Details section, you have to provide SQL Server Name. You can also click on button to enumerate all local and remote SQL 2016 Lepide Software Pvt. Ltd. Page 7

8 Servers in the network and select it from the list. Select the authentication type and provide the credentials for the user. NOTE: The selected user should be a member of Administrators, Domain Administrators, and Farm Administrator groups in Active Directory. If the user is not having these rights, follow the given steps to assign the rights: i. Go to Administrative Tools. ii. Open Active Directory Users and Computers. iii. Select User Properties. iv. Click Member Of. v. Click Add Group. vi. Select the following Groups: Administrators Domain Admins Farm Administrator vii. Click Apply and OK. A login of the selected SharePoint User with Windows Authentication and sysadmin role should exist in SQL Server for SharePoint Content Database. If the user login does not exist already, then follow the steps below to create it. a. Open SQL Server Management Studio. b. Select SQL or Windows Authentication. c. Enter the name and password of a SQL Server Administrator. d. Click Connect. e. In the left tree panel, go to Security Logins. f. Right click on Logins and select New Login. g. Login New wizard appears onscreen. h. Enter the same login name as that of SharePoint user with which you are adding SharePoint Server for auditing. i. Switch to Server Roles and select sysadmin. j. Click OK Lepide Software Pvt. Ltd. Page 8

9 If the user exists but no such rights are assigned, then follow these steps to assign the required rights: a. Open SQL Server Management Studio. b. Select SQL or Windows Authentication. c. Enter the name and password of a SQL Server Administrator. d. Click Connect. e. In the left tree panel, go to Security Logins. f. Expand Logins and select the required user. g. Right click on the user and select Properties. h. Switch to Server Roles and select sysadmin. i. Click OK. 4. You can click on Test Connection to check if a successful connection with the SQL Server can be established or not Lepide Software Pvt. Ltd. Page 9

10 4. Click Next once you are done. Figure 4: Sample Details 2016 Lepide Software Pvt. Ltd. Page 10

11 3.2 Installing SharePoint Agent 5. Software will start installing agent on SharePoint Server for auditing. Figure 5: Installing Agent on SharePoint Server 6. Once installed, the Site Collection page appears Lepide Software Pvt. Ltd. Page 11

12 3.3 Site Collection Settings 7. On this page, you will find list of all available Sites on the SharePoint Server and you need to select Sites that you want to audit. Figure 6: Site Collection Settings Site Selection: This dropdown has three options: All: Select this option if you want audit all Site Collection(s). Exclude: Select this option if you want to audit all but few Site Collection(s). Include: Select this option if you want to audit a few Site Collections Lepide Software Pvt. Ltd. Page 12

13 Click icon to select all sites, whereas click icon to deselect all sites. You can also click to select the listing of available sites. Click on to proceed. 8. Configure Database page appears. 3.4 Database Settings Enter name of SQL Server in which you want to configure your database. You can also click on button to enumerate all local and remote SQL Servers in the network. Authenticate the SQL Server configuration by either way: 1. Windows authentication: Choose this option to allow the software to access SQL Server using the credentials with which the user is currently logged in. 2. SQL Server authentication: Provide SQL server username and password to allow the software to access SQL using these credentials Lepide Software Pvt. Ltd. Page 13

14 Figure 7: Database Settings Click on button to check the connection status. Database: Enter SharePoint database name to store the audit logs. In this example we have provided SharePoint_database as name. Click on to proceed. In this page you need to provide archive data details Lepide Software Pvt. Ltd. Page 14

15 3.5 Archive Database Settings This is an optional step and you can skip it if you don t want to archive audit data. Figure 8: Archive Database Settings Archive Audit Data: Select this checkbox if you want to archive audit data. In Configure Database section, there are two options: 1. SQL Server: Enter name of SQL Server in which you want to configure your database for audit log archiving. You can also click on Servers in the network. button to enumerate all local and remote SQL Authenticate the SQL Server configuration by either way: 2016 Lepide Software Pvt. Ltd. Page 15

16 a. Windows authentication: Choose this option to allow the software to access SQL Server using the credentials with which the user is currently logged in. b. SQL Server authentication: Provide SQL server username and password to allow the software to access SQL using these credentials. Refer SQL Server Rights section to see what User rights are required. 2. Archive Database Name: Enter a name for the new archive database. In this example we have provided Archive_SharePoint_database as name. You can click on to check if a successful connection can be established or not. In Schedule section there are following options: i. Monthly: Select this option if you want to archive audit data on monthly basis. ii. iii. iv. Weekly: Select this option if you want to archive audit data on weekly basis. In this example, we have selected Monthly option. Select Dates: Select the dates on which you want to run the archiving job. v. Start Time: Specify the Start Time to run the archiving job. vi. vii. Click Click Archive Older than: Enter number of days whose data you want to exclude counting from the scheduled date. For example, if you enter 30 days, software will exclude the last 30 days data and will archive all data from beginning of time to the date 30 days before scheduled date. Delete records from production database after archiving: Select this checkbox to delete all the archived data from the production database. to close the wizard. The software asks for your permission to restart software. to restart software. Figure 9: Asking to restart the software 2016 Lepide Software Pvt. Ltd. Page 16

17 After restart, the newly added SharePoint Server will be displayed in a separate tab. The following image shows the Radar tab for the newly added SharePoint server. As there is no audit data, all reports are blank. As soon as you make any change in the SharePoint Server, the change record will be displayed on the Radar tab. Figure 10: SharePoint Server Tab in Radar Once added, you can switch to Settings Tab Component Management, to manage the added SharePoint Server Lepide Software Pvt. Ltd. Page 17

18 Figure 11: SharePoint Server Management SharePoint Server Management lets you manage and remove the listing of SharePoint Server. Here, you can uninstall the auditing agent, configure the auditing, reinstall the auditing agent, and manage health monitoring Lepide Software Pvt. Ltd. Page 18

19 4. Remove SharePoint Server Follow the steps below to remove the listing of an already added SharePoint Server. 1. Use any of the following methods to start. a. Go to "Settings" tab "Component Management", select the added SharePoint Server from the list. Click Remove option in Actions pane. Figure 12: Selecting a SharePoint Server in the list b. Right click on SharePoint node under Component Management and click Remove. Figure 13: Option to remove SharePoint 2. Following any of the above methods will display the warning message Lepide Software Pvt. Ltd. Page 19

20 Figure 14: Warning before deleting the SharePoint's listing 3. Click "Yes". It displays the following message box asking you to restart the software. 4. Click "Yes" to restart the software. Figure 15: Message to restart the software After restarting the software, SharePoint will be removed from the auditing list Lepide Software Pvt. Ltd. Page 20

21 5. Modify SharePoint Properties Follow the steps below to modify the listing of a SharePoint Server. 1. Select a SharePoint Server from the component list. Figure 16: Selecting the SharePoint Server 2. Click Properties link in Actions pane. Modify SharePoint Server will appear Lepide Software Pvt. Ltd. Page 21

22 Figure 17: Wizard to modify the server 3. The available settings to modify the listing of a SharePoint Server are listed in the left panel. You can click any settings to modify the relevant details. 4. SharePoint Server Settings: Here, you can modify the settings related to SharePoint Server and its linked SQL Server. You can change the following settings. a. SharePoint Details: You can change the following details. However, you cannot change the IP Address of the server where SharePoint Server is installed. You have to add a new SharePoint Server if you want to use a different IP Address. b. Central Administration URL: You can change the URL of Central Administration. c. Username and Password: You can provide the login credentials of a different user who have administrative right over the above Central Administration URL. 5. SQL Server Details: Here, you can modify the following details of the SQL Server, with which the preferred SharePoint is internally linked Lepide Software Pvt. Ltd. Page 22

23 a. SQL Server Name: You can select or provide the name of a different SQL Server. b. Authentication Type: You can change the type of authentication to login at above SQL Server. Please try to select "SQL Server Authentication" in case of a remote SQL Server. c. Username and Password: For SQL Server Authentication, you have to provide the login credentials of an administrative SQL user. 6. Site Collection Settings: It lets you modify the auditing settings of Site Collections. Clicking it will let you modify the Site Collection Settings. Figure 18: Site Collections Settings 7. In the drop-down menu of "Site Collection", you can select any of the following options. You can click icon to select all sites, whereas click icon to deselect all sites. a. All: Select it to audit all sites at the provided URL Lepide Software Pvt. Ltd. Page 23

24 b. Include: Select it to choose what all sites has not to be audited. This will enable the area to select the sites. Figure 19: Site Collections Settings Select the sites to be included in the auditing. Click "OK". Only selected sites will be audited. c. Exclude: Select it to choose what all sites cannot be audited. This will enable the area to select the sites Lepide Software Pvt. Ltd. Page 24

25 Figure 20: Site Collections Settings Select the sites, which you want to exclude from the auditing. Click "OK". The selected sites will be excluded from auditing. You can use "Exclude" option here to specify the sites not to be audited. The excluded sites will not be monitored and audited by LepideAuditor Suite. You have to remove the excluded sites from "Exclude" list to start their monitoring. d. You can also click to select the listing of available sites. 8. Database Settings: Here, you can modify the SQL Server database settings. You can select a different SQL Server, authentication mode, and database. 9. Archive Database Settings: Here, you can modify the archive database settings for the domain Lepide Software Pvt. Ltd. Page 25

26 6. Manage SharePoint Agent You can uninstall and reinstall the SharePoint Auditing Agent. 6.1 Uninstall SharePoint Agent Follow the steps below to uninstall auditing agent from an already added SharePoint Server. 1. Select a SharePoint Server in the list. Figure 21: Selecting a SharePoint Server 2. Click Uninstall Agent link to uninstall the agent from that SharePoint Server. It displays the following warning message. Figure 22: Warning to uninstall the agent 2016 Lepide Software Pvt. Ltd. Page 26

27 3. Click "Yes" to start the process of uninstalling the agent. Figure 23: Uninstalling the SharePoint Agent 4. With the completion of process, the agent will be uninstalled from SharePoint Server. 6.2 Uninstall Agent from not added SharePoint LepideAuditor Suite lets you uninstall agent from not added SharePoint Server. This will help you to remove the agent installed by an outdated version of LepideAuditor Suite or LepideAuditor for SharePoint. Follow the steps below, 1. Go to "Settings" tab, right click on "Component Management". Figure 24: Option to uninstall SQL Agent 2. Go to "Uninstall Agent" sub-menu and click "SharePoint". It shows the following wizard. Figure 25: Wizard to uninstall SharePoint Agent 2016 Lepide Software Pvt. Ltd. Page 27

28 3. Enter the following details. A. Name or IP Address of Domain Controller B. Username and Password of an administrative user Figure 26: Entered Sample Details 4. Click "OK". It shows the following warning message. Figure 27: Warning to uninstall agent 5. Click "Yes" to start the process to uninstall the agent. Figure 28: Uninstalling the SharePoint Agent 2016 Lepide Software Pvt. Ltd. Page 28

29 6.3 Reinstalling the Agent Follow the steps below to reinstall the agent for a SharePoint Server. 1. Select the domain from the list and click Properties in Actions pane. It displays the "Modify SharePoint" wizard. Figure 29: Wizard to modify the server 2. Click "OK". It starts installing the agent Lepide Software Pvt. Ltd. Page 29

30 Figure 30: Reinstalling the agent at the SharePoint Server 2016 Lepide Software Pvt. Ltd. Page 30

31 7. Conclusion After following the above-mentioned steps, you will start receiving audit reports and see dashboard details. In order to create alerts and schedule reports for accessing complete software features, check the software help manual: Thus, LepideAuditor Suite can be easily configured and used to audit Active Directory, Group Policy Objects, Exchange Servers, SharePoint and SQL Servers. Real-time auditing, Dashboard reports in graphical format and LiveFeed add a definite edge to this application. Moreover, alerts, scheduled reports and options to restore AD state make it a one-stop solution for all Auditing purposes. To read more about the software visit: For software related queries, you can contact us at: Helpline: For support or any other queries, drop a mail at: For General Queries: For Sales: For Technical Support: contact@lepide.com sales@lepide.com support@lepide.com 2016 Lepide Software Pvt. Ltd. Page 31