Active Directory Agent

The Active Directory agent collects the data of the Active Directory assessment. It runs on a machine of your domain and sends the results to the portal.

#Requirements

• A Windows machine joined to the domain to assess, with network access to all domain controllers. A dedicated management server is ideal; a domain controller works too.
• An account member of Domain Admins (or Enterprise Admins): the agent needs it to read the configuration of the domain controllers, the permissions and the policies.
• Internet access to send the results to the portal.

#Running the Agent On Demand

1. In Assessment → Active Directory, click Download ZIP and extract CyberGuard-ADAssessment.exe.
2. Click Download config, confirm, copy the installation code and download config.dat (see Agents & Probes).
3. Copy the EXE and config.dat into the same folder on the machine.
4. From a prompt opened with an account of Domain Admins, run the command shown by the portal:

.\CyberGuard-ADAssessment.exe "<installation code>"

If you start the agent without arguments, it asks for the installation code on screen.

The agent shows its progress section by section. At the end it sends the results, and the assessment appears in the portal.

#Running It as a Probe

To run Active Directory assessments from the portal and on a schedule, install the agent as a Windows service: see Run as a Service.

#If Sending Fails

If the machine loses its connection while sending, the scan is kept on the machine. Send it again later, without repeating the collection:

.\CyberGuard-ADAssessment.exe --Resend <file>

#Forests With More Than One Domain

The agent assesses the domain of the machine where it runs. If your forest has more domains, the assessment lists them: run the agent in each domain you want to assess.