The foundation of NNT Change Tracker is the grouping system. Deployed agents and devices monitored by Change Tracker’s agentless operations are placed into groups which carry monitoring templates for that group.

For example, the Change Tracker group Windows 2012 R2, has an attached template that monitors all the key configuration components of a Windows 2012 R2 server. Sounds pretty straightforward I’m sure you will agree.

 

GroupNotification1

The grouping system is accumulative in Change Tracker, meaning that a single device can reside in more than one group and so a Change Tracker user can dial in granular coverage for the systems within the organization.

 

GroupNotification

For example, device WIN-CU6R9J08UAR is a web server and as such, has Internet Information Service installed. Therefore, this system has also been placed into the Microsoft IIS group and so the accompanying Microsoft IIS template, which monitors wwwroot, has been applied to the system.

 

GroupNotification

 

To recap the configuration then!

C:\inetpub\wwwroot Polling and Tracking. hashing: SHA256 match: Web Files - is applied by the Microsoft IIS templated attached to the Microsoft IIS group

 

GroupNotification

 

The remaining monitoring comes from the template attached to the Windows 2012 R2 group. Two groups, two templates, got it? Good!

 

GroupNotification

 

Why is this useful?

It is not uncommon for IT departments to be subdivided into technology and application silos, providing focused knowledge and expertise. In such an environment we can use the Change Tracker groups to provide targeted information to users of the Change Tracker application within the different silos. Starting with Change Tracker’s role-based access control, users can be organized by groups so they only see systems which are members of their group or groups of interest.

In our example here, AdamC, who looks after the web applications, only has access to the Microsoft IIS group.

 

GroupNotification

 

Consequentially, when AdamC logs into Change Tracker, only the Microsoft IIS group and the members of that group are available to him.

 

GroupNotification

 

The same approach is utilized for the notifications which Change Tracker issues. A user, such as AdamC, can be configured to only receive notification events which have been detected by the Microsoft IIS group and template.

 

GroupNotification

 

There could be many more changes identified on a system by other applied templates as this screenshot shows, note the paths of the first two events within the table are for changes within C:\Program Files.

 

GroupNotification

 

However, once AdamC logs in, the group is changed to Microsoft IIS and only event changes which match this group are displayed.

 

GroupNotification

 

And because AdamC’s notification setup includes unplanned changes for the Microsoft IIS, then a notification email regarding the changes to wwroot is sent to him.

 

GroupNotification

 

 

NNT has a range of training and managed service offerings to help you get the most of your solution.
Call (844) 898-8362 or click here to request more information.

Contact Us

Corporate Headquarters

Netwrix
6160 Warren Parkway, Suite 100
Frisco, Texas, 75034

Phone 1: 1-949-407-5125

Phone 2: 888-638-9749 (toll-free)


[email protected]
 

United Kingdom

Netwrix
5 New Street Square
London EC4A 3TW

Phone: +44 (0) 203 588 3023


 [email protected]
SC Magazine Cybersecurity 500 CSGEA Winners 2021 CIS benchmarking SEWP Now Certified IBM Security
Copyright 2024, New Net Technologies LLC. All rights reserved. 
NNT and Change Tracker are registered trademarks of New Net Technologies LLC.
All other product, company names and trademarks are the property of their respective owners.