configuration guide for sharepoint - lepide...sharepoint server can be added only when you have...

Configuration Guide for SharePoint This document explains the steps to configure

LepideAuditor Suite to audit ShareP0int Server.

LEPIDE SOFTWARE

LepideAuditor Suite

LepideAuditor Suite SharePoint Auditing Configuration Guide

© 2016 Lepide Software Pvt. Ltd. Page | 2

Copyright

LepideAuditor Suite, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite (Web

Console), LepideAuditor Logon/Logoff Audit Module, any and all components, any and all

accompanying software, files, data and materials, this Configuration Guide, and other

documentation are copyright of Lepide Software Private Limited, with all rights reserved under

the copyright laws. This user guide cannot be reproduced in any form without the prior written

permission of Lepide Software Private Limited. No Patent Liability is assumed, however, with

respect to the use of the information contained herein.

© Lepide Software Private Limited, All Rights Reserved.

Warranty Disclaimers and Liability Limitation

LepideAuditor Suite, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite (Web

Console), LepideAuditor Logon/Logoff Audit Module, any and all components, any and all

accompanying software, files, data and materials, are distributed and provided AS IS and with

no warranties of any kind, whether expressed or implied. In particular, there is no warranty for

any harm, destruction, impairment caused to the system where these are installed. You

acknowledge that good data processing procedure dictates that any program, listed above, must

be thoroughly tested with non-critical data before there is any reliance on it, and you hereby

assume the entire risk of all use of the copies of LepideAuditor Suite and the above listed

accompanying programs covered by this License. This disclaimer of warranty constitutes an

essential part of this License.

In addition, in no event does Lepide Software Private Limited authorize you or anyone else to

use LepideAuditor Suite and the above listed accompanying programs in applications or systems

where LepideAuditor Suite and the above listed accompanying programs’ failure to perform can

reasonably be expected to result in a significant physical injury, or in loss of life. Any such use is

entirely at your own risk, and you agree to hold Lepide Software Private Limited harmless from

any and all claims or losses relating to such unauthorized use.

Trademarks

LepideAuditor Suite, LAS, LepideAuditor App, LepideAuditor App Server, LepideAuditor Suite

(Web Console), LepideAuditor Logon/Logoff Audit Module, LepideAuditor for Active Directory,

LAAD, LepideAuditor for Group Policy Object, LAGPO, LepideAuditor for Exchange Server,

LAES, LepideAuditor for SQL Server, LASS, LepideAuditor SharePoint, LASP, Lepide Object



Restore Wizard, Lepide Active Directory Cleaner, LADC, Lepide User Password Expiration

Reminder, LUPER, and LiveFeed are registered trademarks of Lepide Software Pvt Ltd.

All other brand names, product names, logos, registered marks, service marks and trademarks

(except above of Lepide Software Pvt. Ltd.) appearing in this document are the sole property of

their respective owners. These are purely used for informational purposes only. We have

compiled a list of such trademarks but it may be possible that few of them are not listed here.

Windows XP®, Windows 7®, Windows 8®, Windows 8.1®, Windows 10®, Windows 2000

Server®, Windows 2000 Advanced Server®, Windows Server 2003®, Windows Server 2003 R2®,

Windows Server 2008®, Windows Server 2008 R2®, Windows Server 2012®, Exchange Server

2003®, Exchange Server 2007®, Exchange Server 2010®, Exchange Server 2013®, SharePoint

Server®, SharePoint Server 2010®, SharePoint Foundation 2010®, SharePoint Server 2013®

SharePoint Foundation 2013®, SQL Server 2005®, SQL Server 2008®, SQL Server 2008 R2®, SQL

Server 2012®, SQL Server 2014®, SQL Server 2016®, SQL Server 2005 Express Edition®, SQL

Server 2008 Express® SQL Server 2008 R2 Express®, SQL Server 2012 Express®, SQL Server 2014

Express® .NET Framework 4.0, .NET Framework 2.0, Windows PowerShell® are registered

trademarks of Microsoft Corporation.

Intel and Pentium are registered trademarks of Intel Corporation.

Contact Information

Email: [email protected]

Website: http://www.lepide.com

http://www.lepide.com/



Table of Contents

1. Introduction ............................................................................................................................................ 5

2. Prerequisites to add SharePoint Server ............................................................................................... 5

3. Adding SharePoint Server .................................................................................................................... 6

3.1 SharePoint Server Details ................................................................................................................ 7

3.2 Installing SharePoint Agent .......................................................................................................... 11

3.3 Site Collection Settings .................................................................................................................. 12

3.4 Database Settings ........................................................................................................................... 13

3.5 Archive Database Settings ............................................................................................................ 15

4. Remove SharePoint Server ................................................................................................................. 19

5. Modify SharePoint Properties ............................................................................................................ 21

6. Manage SharePoint Agent .................................................................................................................. 26

6.1 Uninstall SharePoint Agent .......................................................................................................... 26

6.2 Uninstall Agent from not added SharePoint .............................................................................. 27

6.3 Reinstalling the Agent ................................................................................................................... 29

7. Conclusion ............................................................................................................................................ 31



1. Introduction Welcome to the Configuration Guide of LepideAuditor Suite.

This software is a comprehensive solution providing all round audit information and control

regarding Active Directory, Group Policy Objects, Exchange Servers, SharePoint Servers, and

SQL Servers.

In this configuration guide, we have covered the steps to add and audit a SharePoint Server using

LepideAuditor Suite.

2. Prerequisites to add SharePoint Server SharePoint Server can be added only when you have installed Microsoft System CLR Types for

SQL Server 2012 and Microsoft SQL Server 2012 Management Objects Setup at the server where

SharePoint is installed. The setup files to install these two add-ons come pre-installed with the

software. Perform the following steps,

Go to the server and browse the folder where LepideAuditor Suite is installed.

Open the folder "Redist" which has different setup files.

"x64" folder has the setup files for 64-bit Windows Server, whereas "x86" contains the files

for 32-bit Windows Server OS.

Open the required folder.

Run the setup file "SQLSysClrTypes.msi" to install Microsoft System CLR Types for SQL

Server 2012. Follow the onscreen instructions.

Run the file "SharedManagementObjects.msi" to install Microsoft SQL Server 2012

Management Objects Setup. Follow the onscreen instructions.

Connectivity of LepideAuditor Suite is required to the SQL Server that is interlinked with

SharePoint Server.



3. Adding SharePoint Server Lepide Auditor Suite allows you to track and audit multiple SharePoint Servers from a single

platform. You need to add the SharePoint Servers to be audited. To add a SharePoint server, you

need to perform the following steps.

1. Go to "Settings" tab → "Component Management" for adding a SharePoint Server. You

can add a new SharePoint by clicking on the SharePoint button.

Figure 1: SharePoint Server button

You can also right-click on the Component Management link and select SharePoint Server from

“Add” option.

Figure 2: Right click on Component Management

2. Add SharePoint Server wizard starts as shown in the image below.



Figure 3: Add SharePoint Server

3.1 SharePoint Server Details 3. This step has two sections:

a) SharePoint Details: In the SharePoint Details section, provide Central Administration

URL, IP Address, User Name and Password. Please refer to the following note for

required rights.

b) SQL Server Details: In SQL Server Details section, you have to provide SQL Server

Name. You can also click on button to enumerate all local and remote SQL



Servers in the network and select it from the list. Select the authentication type and

provide the credentials for the user.

NOTE:

The selected user should be a member of “Administrators”, “Domain Administrators”, and

“Farm Administrator” groups in Active Directory.

If the user is not having these rights, follow the given steps to assign the rights:

i. Go to “Administrative Tools”.

ii. Open “Active Directory Users and Computers”.

iii. Select “User Properties”.

iv. Click “Member Of”.

v. Click “Add Group”.

vi. Select the following Groups:

Administrators

Domain Admins

Farm Administrator

vii. Click Apply and “OK”.

A login of the selected SharePoint User with Windows Authentication and sysadmin role

should exist in SQL Server for SharePoint Content Database. If the user login does not exist

already, then follow the steps below to create it.

a. Open “SQL Server Management Studio”.

b. Select SQL or Windows Authentication.

c. Enter the name and password of a SQL Server Administrator.

d. Click “Connect”.

e. In the left tree panel, go to “Security” “Logins”.

f. Right click on “Logins” and select “New Login”.

g. “Login – New” wizard appears onscreen.

h. Enter the same login name as that of SharePoint user with which you are adding

SharePoint Server for auditing.

i. Switch to “Server Roles” and select “sysAdmin”.

j. Click “OK”.



4. You can click on “Test Connection” to check if a successful connection with the SQL Server

can be established or not.

If the user exists but no such rights are assigned, then follow these steps to assign the required

rights:

a. Open “SQL Server Management Studio”.

b. Select SQL or Windows Authentication.

c. Enter the name and password of a SQL Server Administrator.

d. Click “Connect”.

e. In the left tree panel, go to “Security” “Logins”.

f. Expand “Logins” and select the required user.

g. Right click on the user and select “Properties”.

h. Switch to “Server Roles” and select “sysAdmin”.

i. Click “OK”.



Figure 4: Sample Details

4. Click “Next” once you are done.



3.2 Installing SharePoint Agent 5. Software will start installing agent on SharePoint Server for auditing.

Figure 5: Installing Agent on SharePoint Server

6. Once installed, the Site Collection page appears.



3.3 Site Collection Settings 7. On this page, you will find list of all available Sites on the SharePoint Server and you need

to select Sites that you want to audit.

Figure 6: Site Collection Settings

Site Selection: This dropdown has three options:

All: Select this option if you want audit all Site Collection(s).

Exclude: Select this option if you want to audit all but few Site Collection(s).

Include: Select this option if you want to audit a few Site Collections.



Click icon to select all sites, whereas click icon to deselect all sites. You can also click to

select the listing of available sites. Click on to proceed.

8. Configure Database page appears.

3.4 Database Settings Enter name of SQL Server in which you want to configure your database. You can also click on

button to enumerate all local and remote SQL Servers in the network.

Authenticate the SQL Server configuration by either way:

1. Windows authentication: Choose this option to allow the software to access SQL Server

using the credentials with which the user is currently logged in.

2. SQL Server authentication: Provide SQL server username and password to allow the

software to access SQL using these credentials.



Figure 7: Database Settings

Click on button to check the connection status.

Database: Enter SharePoint database name to store the audit logs. In this example we have

provided “SharePoint_database” as name.

Click on to proceed.

In this page you need to provide archive data details.



3.5 Archive Database Settings This is an optional step and you can skip it if you don’t want to archive audit data.

Figure 8: Archive Database Settings

Archive Audit Data: Select this checkbox if you want to archive audit data.

In Configure Database section, there are two options:

1. SQL Server: Enter name of SQL Server in which you want to configure your database for

audit log archiving. You can also click on button to enumerate all local and remote SQL

Servers in the network.

Authenticate the SQL Server configuration by either way:



a. Windows authentication: Choose this option to allow the software to access SQL Server

using the credentials with which the user is currently logged in.

b. SQL Server authentication: Provide SQL server username and password to allow the

software to access SQL using these credentials.

Refer SQL Server Rights section to see what User rights are required.

2. Archive Database Name: Enter a name for the new archive database. In this example we have

provided Archive_SharePoint_database as name.

You can click on to check if a successful connection can be established or not.

In Schedule section there are following options:

i. Monthly: Select this option if you want to archive audit data on monthly basis.

ii. Weekly: Select this option if you want to archive audit data on weekly basis.

iii. In this example, we have selected Monthly option.

iv. Select Dates: Select the dates on which you want to run the archiving job.

v. Start Time: Specify the Start Time to run the archiving job.

vi. Archive Older than: Enter number of days whose data you want to exclude counting from

the scheduled date. For example, if you enter 30 days, software will exclude the last 30

days data and will archive all data from beginning of time to the date 30 days before

scheduled date.

vii. Delete records from production database after archiving: Select this checkbox to delete

all the archived data from the production database.

Click to close the wizard. The software asks for your permission to restart software.

Click to restart software.

Figure 9: Asking to restart the software



After restart, the newly added SharePoint Server will be displayed in a separate tab. The

following image shows the Radar tab for the newly added SharePoint server. As there is no audit

data, all reports are blank. As soon as you make any change in the SharePoint Server, the change

record will be displayed on the Radar tab.

Figure 10: SharePoint Server Tab in Radar

Once added, you can switch to “Settings” Tab “Component Management”, to manage the

added SharePoint Server.



Figure 11: SharePoint Server Management

SharePoint Server Management lets you manage and remove the listing of SharePoint Server.

Here, you can uninstall the auditing agent, configure the auditing, reinstall the auditing agent,

and manage health monitoring.



4. Remove SharePoint Server Follow the steps below to remove the listing of an already added SharePoint Server.

1. Use any of the following methods to start.

a. Go to "Settings" tab → "Component Management", select the added SharePoint

Server from the list. Click “Remove” option in “Actions” pane.

Figure 12: Selecting a SharePoint Server in the list

b. Right click on “SharePoint” node under “Component Management” and click

“Remove”.

Figure 13: Option to remove SharePoint

2. Following any of the above methods will display the warning message.



Figure 14: Warning before deleting the SharePoint's listing

3. Click "Yes". It displays the following message box asking you to restart the software.

Figure 15: Message to restart the software

4. Click "Yes" to restart the software.

After restarting the software, SharePoint will be removed from the auditing list.



5. Modify SharePoint Properties Follow the steps below to modify the listing of a SharePoint Server.

1. Select a SharePoint Server from the component list.

Figure 16: Selecting the SharePoint Server

2. Click “Properties” link in “Actions” pane. “Modify SharePoint Server” will appear.



Figure 17: Wizard to modify the server

3. The available settings to modify the listing of a SharePoint Server are listed in the left

panel. You can click any settings to modify the relevant details.

4. SharePoint Server Settings: Here, you can modify the settings related to SharePoint

Server and its linked SQL Server. You can change the following settings.

a. SharePoint Details: You can change the following details. However, you cannot

change the IP Address of the server where SharePoint Server is installed. You have

to add a new SharePoint Server if you want to use a different IP Address.

b. Central Administration URL: You can change the URL of Central Administration.

c. Username and Password: You can provide the login credentials of a different user

who have administrative right over the above Central Administration URL.

5. SQL Server Details: Here, you can modify the following details of the SQL Server, with

which the preferred SharePoint is internally linked.



a. SQL Server Name: You can select or provide the name of a different SQL Server.

b. Authentication Type: You can change the type of authentication to login at above

SQL Server. Please try to select "SQL Server Authentication" in case of a remote

SQL Server.

c. Username and Password: For SQL Server Authentication, you have to provide the

login credentials of an administrative SQL user.

6. Site Collection Settings: It lets you modify the auditing settings of Site Collections.

Clicking it will let you modify the Site Collection Settings.

Figure 18: Site Collections Settings

7. In the drop-down menu of "Site Collection", you can select any of the following options.

You can click icon to select all sites, whereas click icon to deselect all sites.

a. All: Select it to audit all sites at the provided URL.



b. Include: Select it to choose what all sites has not to be audited. This will enable the

area to select the sites.


Select the sites to be included in the auditing. Click "OK". Only selected sites will

be audited.

c. Exclude: Select it to choose what all sites cannot be audited. This will enable the

area to select the sites.




Select the sites, which you want to exclude from the auditing. Click "OK". The

selected sites will be excluded from auditing.

You can use "Exclude" option here to specify the sites not to be audited. The

excluded sites will not be monitored and audited by LepideAuditor Suite. You

have to remove the excluded sites from "Exclude" list to start their monitoring.

d. You can also click to select the listing of available sites.

8. Database Settings: Here, you can modify the SQL Server database settings. You can select

a different SQL Server, authentication mode, and database.

9. Archive Database Settings: Here, you can modify the archive database settings for the

domain.



6. Manage SharePoint Agent You can uninstall and reinstall the SharePoint Auditing Agent.

6.1 Uninstall SharePoint Agent Follow the steps below to uninstall auditing agent from an already added SharePoint Server.

1. Select a SharePoint Server in the list.

Figure 21: Selecting a SharePoint Server

2. Click “Uninstall Agent” link to uninstall the agent from that SharePoint Server. It

displays the following warning message.

Figure 22: Warning to uninstall the agent



3. Click "Yes" to start the process of uninstalling the agent.

Figure 23: Uninstalling the SharePoint Agent

4. With the completion of process, the agent will be uninstalled from SharePoint Server.

6.2 Uninstall Agent from not added SharePoint LepideAuditor Suite lets you uninstall agent from not added SharePoint Server. This will help

you to remove the agent installed by an outdated version of LepideAuditor Suite or

LepideAuditor for SharePoint. Follow the steps below,

1. Go to "Settings" tab, right click on "Component Management".

Figure 24: Option to uninstall SQL Agent

2. Go to "Uninstall Agent" sub-menu and click "SharePoint". It shows the following wizard.

Figure 25: Wizard to uninstall SharePoint Agent



3. Enter the following details.

A. Name or IP Address of Domain Controller

B. Username and Password of an administrative user

Figure 26: Entered Sample Details

4. Click "OK". It shows the following warning message.

Figure 27: Warning to uninstall agent

5. Click "Yes" to start the process to uninstall the agent.

Figure 28: Uninstalling the SharePoint Agent



6.3 Reinstalling the Agent Follow the steps below to reinstall the agent for a SharePoint Server.

1. Select the domain from the list and click “Properties” in Actions pane. It displays the

"Modify SharePoint" wizard.

Figure 29: Wizard to modify the server

2. Click "OK". It starts installing the agent.



Figure 30: Reinstalling the agent at the SharePoint Server



7. Conclusion After following the above-mentioned steps, you will start receiving audit reports and see

dashboard details. In order to create alerts and schedule reports for accessing complete software

features, check the software help manual: http://www.lepide.com/lepideauditor/

Thus, LepideAuditor Suite can be easily configured and used to audit Active Directory, Group

Policy Objects, Exchange Servers, SharePoint and SQL Servers. Real-time auditing, Dashboard

reports in graphical format and LiveFeed add a definite edge to this application. Moreover, email

alerts, scheduled reports and options to restore AD state make it a one-stop solution for all

Auditing purposes.

To read more about the software visit: http://www.lepide.com/lepideauditor/

For software related queries, you can contact us at:

Helpline: +1-800-814-0578

For support or any other queries, drop a mail at:

For General Queries: [email protected]

For Sales: [email protected]

For Technical Support: [email protected]

http://www.lepide.com/lepideauditor/

http://www.lepide.com/lepideauditor/

mailto:[email protected]



configuration guide for sharepoint - lepide...sharepoint server can be added only when you have...

Documents