Filter
Top Products
14 Starter Guide SurfControl Web Filter for ISA v5.5
I
NSTALLATION
D
ECISIONS
User Name Resolution
2
METHODS OF INSTALLING EUM
You can install EUM in one of two ways:
1 Install an EUM Agent on your domain controllers or Novell NetWare NDS Tree Server.
2 Install an EUM Login Agent on your network that can monitor all users via a login script. (page 17)
Installing the EUM Agent on your Domain controllers works well in a LAN environment where all users log
on to the Windows domain. If you do not have access to, or do not wish to install the EUM Agent on your
domain controller, you can use the EUM Login Agent.
THE EUM AGENT ON DOMAIN CONTROLLERS
You can install the EUM Agent on domain controllers which have the following operating systems:
• Windows NT
• Windows 2000
• Windows 2003 (Standard and Enterprise)
• Windows 2003 x64 (Standard and Enterprise)
There is also a version of the EUM Agent that works with Novell NetWare. This is explained further in
"NetWareEUM" on page 16.
During the installation, the configuration file scua.ini is installed into the c:\Surfcontrol User Agent folder
on each domain controller. This file contains connection information about your Web Filter server(s) and
identifies ignored users, which are specified during the installation. Additional domain controllers and/or
ignored users can also be added to your EUM Agent configuration at a later date. For further details about
installing the EUM Agent and post configuration tasks, refer to the following sections:
• "Installing the EUM Agent on your domain controllers" on page 53
• "Making changes to the EUM Agent configuration" on page 55
EUM on Windows 2000 and 2003 domain controllers
The EUM agent is installed on to Windows 2000 and 2003 domain controllers as a driver file called
ScSubAuth.dll. If you are installing EUM on a Windows 2003 x64 operating system, the driver file
ScSubAuth_AMD64.dll is loaded on to the domain controller during installation. When EUM is installed
on to a Windows 2000 or 2003 server, Web Filter uses Microsoft’s Sub-Authentication to resolve user
names.
EUM on Windows NT domain controllers
Web Filter installs the EUM User Agent (UA) on to Windows NT domain controllers as a service
(SurfControl User Agent service; ScUserAgent.exe). During EUM installation, Web Filter configures NT
domain controllers to record Successful Logons to the security log (event 528). If you make changes to this
audit policy and disable event 528 logs (Successful Logon), EUM will not work correctly.
Confirm that event 528 logs are enabled by performing the following:
1 From the Web Filter server, select User Manager for Domains from the Programs > Administrative
Tools menu.