Netwrix User Activity Video Reporter Installation and Configuration Guide

NETWRIX USER ACTIVITY VIDEO REPORTER INSTALLATION AND CONFIGURATION GUIDE

Product Version: 1.0 January 2013

Legal Notice The information in this publication is furnished for information use only, and does not constitute a commitment from NetWrix Corporation of any features or functions discussed. NetWrix Corporation assumes no responsibility or liability for the accuracy of the information presented, which is subject to change without notice. NetWrix is a registered trademark of NetWrix Corporation. The NetWrix logo and all other NetWrix product or service names and slogans are registered trademarks or trademarks of NetWrix Corporation. Active Directory is a trademark of Microsoft Corporation. All other trademarks and registered trademarks are property of their respective owners. Disclaimers This document may contain information regarding the use and installation of non-NetWrix products. Please note that this information is provided as a courtesy to assist you. While NetWrix tries to ensure that this information accurately reflects the information provided by the supplier, please refer to the materials provided with any non-NetWrix product and contact the supplier for confirmation. NetWrix Corporation assumes no responsibility or liability for incorrect or incomplete information provided about non-NetWrix products. © 2013 NetWrix Corporation. All rights reserved. www.netwrix.com

NetWrix User Activity Video Reporter Installation and Configuration Guide

Table of Contents

1. INTRODUCTION ...... 4 1.1. Overview ...... 4 1.2. How This Guide is Organized ...... 4 1.3. Free Pre-Sales Support ...... 4

2. INSTALLATION PREREQUISITES ...... 5 2.1. Deployment Options ...... 5 2.2. Hardware Requirements ...... 5 2.3. Software Requirements ...... 5 2.3.1. NetWrix Server Requirements ...... 5 2.3.2. Target Computers Requirements ...... 6 2.4. Supported Microsoft SQL Server Versions ...... 6

3. INSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER ...... 8

4. INSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER AGENT ...... 9

5. CONFIGURING RIGHTS AND PERMISSIONS ...... 10

6. CONFIGURING TARGET COMPUTERS ...... 14

7. CONFIGURING PERMISSIONS TO WATCH VIDEO RECORDINGS ...... 15

8. UNINSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER ...... 19

A APPENDIX: RELATED DOCUMENTATION ...... 20

NetWrix User Activity Video Reporter Installation and Configuration Guide

1. INTRODUCTION

1.1. Overview This guide lists all product requirements and provides detailed instructions on how to install and set up NetWrix User Activity Video Reporter. For information on how to configure and use the product, refer to NetWrix User Activity Video Reporter Administrator’s Guide.

1.2. How This Guide is Organized This section explains how this guide is organized and provides a brief overview of each chapter.  Chapter 1 Introduction: the current chapter. It explains the purpose of this document and explains its structure.  Chapter 2 Installation Prerequisites lists all product hardware and software requirements, requirements to the target computers and supported Microsoft SQL Server versions.  Chapter 3 Installing NetWrix User Activity Video Reporter contains instructions on how to install NetWrix User Activity Video Reporter.  Chapter 4 Installing NetWrix User Activity Video Reporter Agent provides instructions on the manual installation of the NetWrix User Activity Video Reporter Agent if automatic installation fails.  Chapter 5 Configuring Rights and Permissions explains how to configure the Data Processing Account under which the product service runs.  Chapter 6 Configuring Target Computers provides instructions on how to configure the target computers for monitoring by NetWrix User Activity Video Reporter.  Chapter 7 Configuring Permissions to Watch Video Recordings explains how to configure remote computers to watch video recordings captured by the product from reports and Activity Summary emails.  Chapter 8 Uninstalling NetWrix User Activity Video Reporter provides instructions on how to uninstall the product and remove its agents.  Appendix: contains a list of all documentation published to support NetWrix User Activity Video Reporter.

1.3. Free Pre-Sales Support You are eligible for free technical support during the evaluation period of all NetWrix products. If you encounter any problems or would like assistance with the installation, configuration or implementation of NetWrix User Activity Video Reporter, contact NetWrix Technical Support.

NetWrix User Activity Video Reporter Installation and Configuration Guide

2. INSTALLATION PREREQUISITES

2.1. Deployment Options NetWrix User Activity Video Reporter can be installed on any workstation or server in the domain that you want to monitor, or in a trusted domain. If you wish to monitor several domains, you must establish a trust relationship between these domains and the domain where the product is installed. The account under which data is collected from trusted domains must have the same rights and permissions as in the root domain. For a list of required rights and permissions, refer to Chapter 5 Configuring Rights and Permissions.

2.2. Hardware Requirements Before installing NetWrix User Activity Video Reporter, make sure that your hardware meets the following requirements:

Table 1: Hardware Requirements Component Minimum Recommended CPU Intel or AMD 32/64 bit, 500MHz or Intel or AMD 64 bit, 3GHz faster. Note: The Itanium (IA64) processor is not supported. Memory 1GB RAM 2GB RAM Note: More memory is required if the SQL database containing audit data runs on the same computer. Disk Space 50MB physical disk space for Two physical drives with a total of product installation. 50GB free space. Note: Additional space is It is recommended to allocate a required for the Audit Archive separate drive to store video files. and depends on video recording Note: Additional space is required for quality settings. You can the Audit Archive and depends on calculate the approximate video recording quality settings. You required disk space based on the can calculate the approximate following one-hour session required disk space based on the estimations: following one-hour session estimations:  resolution 1280х1024 (1 fps,  resolution 1280х1024 (15 fps, grayscale): 1 MB color): 60 MB  resolution 1920х1080 (1 fps,  resolution 1920х1080 (15 fps, grayscale): 6-40 MB color): 30-160 MB

2.3. Software Requirements

2.3.1. NetWrix Server Requirements Before installing the product, make sure that the computer where NetWrix User Activity Video Reporter is going to be installed meets the following software requirements:

Table 2: Software Requirements Component Requirement Operating System  Windows Server 2003 or above Note: Server Core installations are not supported.

NetWrix User Activity Video Reporter Installation and Configuration Guide

Framework  .NET Framework 3.5 (SP1 is recommended) Additional software  Microsoft Internet Explorer 6.0 or above.  Microsoft Management Console 3.0 or above Note: Microsoft Management Console is included in the Windows XP or above operating systems.  Windows Media Player (the Desktop Experience Windows feature in Windows Server OS)  Windows Installer 3.1 or above

Other  Local and Remote TCP Port 9002 must be opened for inbound/outbound connections

2.3.2. Target Computers Requirements Before installing the product, make sure that the computers you are going to monitor by NetWrix User Activity Video Reporter meet the following software requirements:

Table 3: NetWrix User Activity Video Reporter Agent Requirements Component Requirement Operating System  Windows XP SP3 or above Note: Server Core installations are not supported. Framework  .NET Framework 2.0 SP2 Additional software  Windows Installer 3.1 or above Other  Local and Remote TCP Ports 9002-9003 must be opened for inbound/outbound connections

2.4. Supported Microsoft SQL Server Versions Microsoft SQL Server provides the Reporting Services that enable creating, viewing and managing reports based on data stored in a local SQL Server database. NetWrix User Activity Video Reporter uses these Reporting Services to generate reports on the recorded users’ activity. To use the reports functionality, Microsoft SQL Server must be installed on a computer that can be accessed by NetWrix User Activity Video Reporter. The following Microsoft SQL Server versions are supported:

Table 4: Supported Microsoft SQL Server Versions Version Edition SQL Server 2005  Express Edition with Advanced Services (SP3 or above)  Standard or Enterprise Edition SQL Server 2008  Express Edition with Advanced Services  Standard or Enterprise Edition SQL Server 2008 R2 (recommended)  Express Edition with Advanced Services  Standard or Enterprise Edition SQL Server 2012  Express Edition with Advanced Services  Standard or Enterprise Edition

NetWrix User Activity Video Reporter Installation and Configuration Guide

Microsoft SQL Server is not included in the product installation package and must be installed manually or automatically through the Reports Configuration wizard. This wizard automatically installs SQL Server Express with Advanced Services and configures the Reporting Services. SQL server version installed through the wizard depends on the operating system your computer is running (for details, refer to the following NetWrix Knowledge Base article: Which SQL Server versions can be installed automatically via NetWrix Management Console). For your convenience, we have provided instructions on the manual installation of Microsoft SQL Server with configuration specific for the Reporting Services to function properly. Refer to the following NetWrix Technical Article for detailed instructions: Installing Microsoft SQL Server and Configuring the Reporting Services. For full installation and configuration details, refer to the documentation provided by Microsoft.

Note: If you install NetWrix User Activity Video Reporter on a read-only domain controller, SQL Server installation will fail (both manual or automatic through the Reports Configuration wizard). This is a known issue, for details refer to the following Microsoft Knowledge Base Article: You may encounter problems when installing SQL Server on a domain controller. To fix the issue, install the product on a different computer, or install SQL Server manually on a different computer that can be accessed by NetWrix User Activity Video Reporter.

NetWrix User Activity Video Reporter Installation and Configuration Guide

3. INSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER

Procedure 1. To install NetWrix User Activity Video Reporter 1. Download NetWrix All-in-One Suite. 2. On the welcome page, select Change Auditing. The following page will be displayed:

Figure 1: NetWrix All-in-One Suite Main Page

3. Click the Install link under User Activity. 4. Follow the instructions of the setup wizard. When prompted, accept the license agreement and specify the installation folder. 5. On the last step of the wizard, click Finish. Product shortcuts will be added to the Start menu.

Note: NetWrix User Activity Video Reporter runs as a service, therefore it is not necessary to keep the program open once it has been configured.

NetWrix User Activity Video Reporter Installation and Configuration Guide

4. INSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER AGENT The NetWrix User Activity Video Reporter agent is installed automatically on the monitored computers when they are added to the target Computer Collection (for details, refer to Section 4.1. Creating Managed Object of NetWrix User Activity Video Reporter Administrator’s Guide). However, automatic agent installation may fail due to several reasons, for example:  The WMI or the Remote Registry service is not started on the target computer  Firewall is enabled  The Data Processing Account does not have access to the administrative shares  Etc. If this happens, the agent status on the Monitored Computers page will be returned as “Installation failed” (for details, refer to Chapter 6 Monitored Computers of NetWrix User Activity Video Reporter Administrator’s Guide). In this case, you will have to manually install the NetWrix User Activity Video Reporter agent on the target computers. To do this, perform the following procedure:

Procedure 2. To install the NetWrix User Activity Video Reporter agent 1. Copy the uavrfull_agent.msi file located in the product installation folder to the target computer and execute it. 2. Follow the instructions of the setup wizard. When prompted, accept the license agreement, specify the installation folder. 3. On the Agent Settings page, specify the host server (i.e. the name of the computer where NetWrix User Activity Video Reporter is installed) and the server TCP port:

Figure 2: Agent Setup Wizard

Note: NetWrix host server uses port 9002 by default, so if you modify this value, the agent will fail to connect to the host server. 4. On the last step of the wizard, click Finish.

NetWrix User Activity Video Reporter Installation and Configuration Guide

5. CONFIGURING RIGHTS AND PERMISSIONS The Data Processing Account, under which the NetWrix User Activity Video Reporter service runs, must have the following rights and permissions:  Local administrator rights on all monitored computers and on the computer where NetWrix User Activity Video Reporter is installed.  “Write” permissions for the product logs and the Audit Archive folders: o Windows XP/2003: C:\Documents and Settings\All Users\Application Data\NetWrix

o Windows 7/8/2008/2012: C:\ProgramData\NetWrix  The “Log on as a batch job” policy defined for the account (for instructions, refer to Procedure 3 To define the Log on as a batch job policy for an account)  Administrator rights on the target computers.  The account that will be used to access the SQL database with audit data must belong to the target Database owner (dbo) role. You can assign this role to the Default Data Processing Account or any other account of your choice (for instructions, refer to Procedure 4 To assign the Database owner (dbo) role)

Procedure 3. To define the Log on as a batch job policy for an account 1. On a domain controller, navigate to Start  Administrative Tools  Group Policy Management. 2. Expand the Forest  Domains  node, right-click Default Domain Policy and select Edit from the popup menu. 3. In the Group Policy Management Editor, in the left pane, navigate to Computer Configuration  Policies  Windows Settings  Security Settings  Local Policies  User Rights Assignment and locate the “Log on as a batch job policy” on the right:

NetWrix User Activity Video Reporter Installation and Configuration Guide

Figure 3: Group Policy Management Editor

4. Double-click this policy. In the dialog that opens, select the Define these policy settings: option and click the Add User or Group button:

Figure 4: Logon as a batch job Properties

5. Specify the account that you want to define this policy for, and click OK to save the changes.

NetWrix User Activity Video Reporter Installation and Configuration Guide

Procedure 4. To assign the Database owner (dbo) role 1. On the computer where SQL Server is installed, navigate to Start  All Programs  Microsoft SQL Server  SQL Server Management Studio. 2. Select the server and click Connect. 3. In the left pane, expand the Security node. Right-click the Logins node and select New Login from the popup menu. The Login – New dialog will be displayed:

Figure 5: Login – New: General

4. Click the Search button next to the Login Name field and specify the user that you want to assign the dbo role to. 5. If you are assigning the Database owner role to the Data Processing Account, make sure the Windows authentication option is selected. If this is a different account, select the SQL Server authentication option. 6. In the left pane, select Server Roles:

NetWrix User Activity Video Reporter Installation and Configuration Guide

Figure 6: Login – New: Server Roles

7. You can assign the sysadmin role to the new login: all members of this role have the dbo role by default. If you do not want to assign the sysadmin role to this user, select public as server role. Then select User Mapping in the left pane. 8. Select the database used by NetWrix Active Directory Change Reporter to store audit data in the upper pane and check db_owner in the lower pane:

Figure 7: Login – New: User Mapping

9. Click OK to save the changes.

Note: If the account that you want to assign the Database owner role to has already been added to SQL Server Logins, expand the Security  Logins node, right-click this account, select Properties from the popup menu, and edit its roles.

NetWrix User Activity Video Reporter Installation and Configuration Guide

6. CONFIGURING TARGET COMPUTERS For NetWrix User Activity Video Reporter to collect audit data and capture video successfully, make sure that the following settings are configured on the target computers:  The Windows Management Instrumentation and the Remote Registry services are running and their Startup Type is set to “Automatic” (for instructions, refer to Procedure 5 To check the status and startup type of Windows services below).  The File and Printer Sharing and the Windows Management Instrumentation features are allowed to communicate through Windows Firewall (for instructions, refer to Procedure 6 To allow Windows features to communicate through Firewall below).  Local and Remote TCP Ports 9002-9003 must be opened for inbound/outbound connections.

Procedure 5. To check the status and startup type of Windows services 6. Navigate to Start  Run, type “services.msc” and press Enter. 7. In the Services snap-in, locate the Remote Registry service and make sure that its status is “Started”. If is it not, right-click the service and select Start from the popup menu. 8. Check that the Startup Type is set to “Automatic”. If it is not, double-click the service. In the Remote Registry Properties dialog, in the General tab, select “Automatic” from the Startup Type drop-down list, and click OK to save the changes. 9. Perform steps 2-3 for the Windows Management Instrumentation service.

Procedure 6. To allow Windows features to communicate through Firewall 1. Navigate to Start  Control Panel and select Windows Firewall. 2. In the Help Protect your computer with Windows Firewall page, click Allow a program or feature through Windows Firewall on the left. 3. In the Allow programs to communicate through Windows Firewall page that opens, locate the File and Printer Sharing feature and make sure that the corresponding checkbox is selected under Domain. 4. Repeat step 3 for the Windows Management Instrumentation (WMI) feature.

NetWrix User Activity Video Reporter Installation and Configuration Guide

7. CONFIGURING PERMISSIONS TO WATCH VIDEO RECORDINGS Video recordings captured by NetWrix User Activity Video Reporter can be viewed from NetWrix Management Console, or by following the links from web-based reports, reports delivered as email attachments by subscription or from email Activity Summaries. The following settings must be configured on the computer(s) that video recordings are going to be viewed from:  Microsoft Internet Explorer 6.0 or above must be installed.  Internet Explorer security settings must be configured as described in Procedure 7 To configure Internet Explorer security settings.  JavaScript must be enabled (for instructions refer to Procedure 8 To enable JavaScript).  Internet Explorer Enhanced Security Configuration (IE ESC) must be disabled (for instructions refer to Procedure 9 To disable Internet Explorer Enhanced Security Configuration (IE ESC)).  The user must belong to the “NetWrix User Activity Video Reporter Auditors” group that has access to the NetWrix_UAVR$ shared folder where video files are stored (for instructions refer to Procedure 10 To add users to the NetWrix User Activity Video Reporter Auditors group)  A dedicated codec must be installed. This codec is installed automatically on the computer where NetWrix User Activity Video Reporter is deployed, and on the monitored computers. To install it on a different computer, download it from http:/www.netwrix.com/download/ScreenPressorNetWrix.zip.

Procedure 7. To configure Internet Explorer security settings 1. In Internet Explorer, navigate to Tools  Internet Options. 2. Switch to the Security tab and select Local Intranet. Click the Custom Level button. 3. In the Security Settings – Local Intranet Zone dialog, scroll down to Downloads, and make sure File download is set to “Enable”:

NetWrix User Activity Video Reporter Installation and Configuration Guide

Figure 8: Security Settings – Local Intranet Zone

4. Click OK to save the changes and close the dialog. 5. In the Internet Options dialog switch to the Advanced tab. 6. Scroll down to Security and make sure the Allow active content to run in files on My Computer option is selected:

Figure 9: Internet Options: Advanced

NetWrix User Activity Video Reporter Installation and Configuration Guide

Procedure 8. To enable JavaScript 1. In Internet Explorer, navigate to Tools  Internet Options. 2. Switch to the Security tab and Select Internet. Click the Custom Level button. 3. In the Security Settings – Internet Zone dialog, scroll down to Scripting and make sure Active scripting is set to “Enable”:

Figure 10: Security Settings – Internet Zone

Procedure 9. To disable Internet Explorer Enhanced Security Configuration (IE ESC) 1. Navigate to Start  Administrative Tools  Server Manager. 2. In the Security Information section, lick the Configure IE ESC link on the right and turn it off:

NetWrix User Activity Video Reporter Installation and Configuration Guide

Figure 11: Internet Explorer Enhanced Security Configuration

Procedure 10. To add users to the NetWrix User Activity Video Reporter Auditors group 1. On the computer where NetWrix User Activity Video Reporter is installed, navigate to Start  Control Panel  Administrative Tools  Computer Management (if it is installed on a domain controller, navigate to Start  Administrative Tools  Active Directory Users and Computers). 2. In the Computer Management dialog, in the left pane, navigate to System Tools  Local Users and Groups  Groups (on a domain controller, navigate to  Users). 3. In the right pane, right-click NetWrix User Activity Video Reporter Auditors, and select Add to Group from the pop-up menu. 4. In the dialog that opens, click the Add button, select the user(s) you want to add and click OK.

NetWrix User Activity Video Reporter Installation and Configuration Guide

8. UNINSTALLING NETWRIX USER ACTIVITY VIDEO REPORTER

To uninstall NetWrix User Activity Video Reporter, perform the following procedures in the order they are provided:  Remove the product agents from the target computers  Uninstall the product

Procedure 11. To remove the NetWrix User Activity Video Reporter agents 1. On the computer where the product is installed, In NetWrix Management Console, navigate to Managed Objects  . 2. Click the Managed Items button, or switch to the Items tab. 3. On the Items Collection page, select the target computer, and click Remove. This computer will be removed from the monitored Computer Collection. 4. In the left pane, navigate to Managed Object   User Activity Video Reporter  Monitored Computers. Make sure the target computer is removed from the list. 5. If it is still in the Monitored Computers list, select the computer and click the Retry Uninstallation button. If this does not help, remove the agent manually from the target computer through Add/Remove Programs and Features.

Procedure 12. To uninstall NetWrix User Activity Video Reporter 1. Navigate to Start  Control Panel  Programs and Features. 2. Select NetWrix User Activity Video Reporter in the dialog that opens and double- click it. 3. Click Yes in the confirmation dialog to start the. NetWrix User Activity Video Reporter uninstallation wizard.

NetWrix User Activity Video Reporter Installation and Configuration Guide

A APPENDIX: RELATED DOCUMENTATION The table below lists all documents available to support NetWrix User Activity Video Reporter:

Table 5: Product Documentation Document Name Overview NetWrix User Activity Video Reporter The current document. Installation and Configuration Guide NetWrix User Activity Video Reporter Provides a detailed explanation of the Administrator’s Guide NetWrix User Activity Video Reporter features and step-by-step instructions on how to configure and use the product. NetWrix User Activity Video Reporter Contains a list of the known issues that Release Notes customers may experience with NetWrix User Activity Video Reporter 1.0, and suggests workarounds for these issues. Installing Microsoft SQL Server and This technical article provides instructions on Configuring the Reporting Services how to install Microsoft SQL Server 2005/2008 R2/2012 Express and configure the Reporting Services. How to Subscribe to SSRS Reports This technical article explains how to configure a subscription to SSRS reports using the Report Manager.