Chat now with support
Chat with Support

Enterprise Reporter 3.5.1 - Release Notes

Deprecated features

NOTE:  

Resolved issues

AD Discovery: Group Managed Service Account Members that do not exist cause all members to be lost.

482236

AD Discovery - With the "Create multiple tasks for each domain" option selected, collection tasks may get locked and others tasks stuck waiting.

482104

AD Discovery - Remove Domain Controller information at the end of the discovery process.

482102

AD Discovery - Generating 'Domain Cache not Initialized' when cache is cleared.

482101

Licensing issues.

407740

Unable to run NTFS discovery on NetApp devices.

416025

Group memberships not reflecting deleted groups in Recursive Group Membership by Domain Account report.

416162

Unable to supply credentials in UPN format for non Azure accounts.  Support added and now able to specify credentials in UPN format and select if account is an Azure credential.

438083

Active Directory discovery failing and generating a null reference error.

438355

Reports are only displaying the first service principal name when multiple service principal names are set in Active Directory.

438807

Active Directory discovery fails to generate multiple tasks for domain and discovery processing does not proceed.

438811

Database Utility dialog does not provide adequate information on the requirement of an empty database for the restore and transfer tasks.

439790

Reversible Encryption Password is not collected and does not appear in reports.

445224

Group Membership reports are missing group membership data.

447703

Database disk image is malformed.

453576

Azure credentials with different domain names from Tenant App domain name fail to create cloud discoveries.

455074

Parent/child domain group members are not expanded in the Domain Groups and Members report.

456143

When running LDAP queries, DirectoryOperationException is thrown and ending the discovery.

458288

Unable to save tokens to database due to date time incompatibility.

470127

Failed discovery scan for OneDrive, Azure Resource, and Team.

473662

Computer discovery runs showing “Object reference not set to an instance of an object” error.

474155

AD discovery for Active Roles extended attributes is not functioning properly.

474157

Known issues

Table 4. Known issues

Some of the PDF cross references do not link to their destination pages.

380

Deprecated support for collection of OneDrive attribute 'TenantSyncClientRegistration". No longer available in the One Drive Configuration Settings library report.

235861

When using Multi-Factor Authentication, which uses delegated-only Azure application, there may be inconsistencies with the collection of the Exchange Online mailboxes.

236024

Using discovery credentials that are multi-factor authenticated, may result in some objects not being collected.

236031

To reduce the potential load on ARS Server, we are disabling 'Multiple Tasks' option on the AD scope when collecting ARS attributes.

475475

AD Discovery: If only a read-only domain controller is available for Active Directory discovery, collection will fail.

475471

AD Discovery - Unable to Connect to Database When Primary domain controller (PDC) is shutdown

475473

OneDrive discoveries: Groups are not being properly collected on edits of the group properties/permissions

4009

OneDrive discoveries: Returning unexpected results when "Contribute" permission is being assigned

4221

OneDrive discoveries: Custom Permissions are only returning the "name" of the custom permission and no results on actual set permission

4222

NTFS discoveries: NTFS duplicate files calculation may not be looking at whole computer, only share

7839

PowerShell intermittently returns OneDrive configuration settings incorrectly and updating these attributes is slow on native portal

9902

Azure Active Directory discoveries: Group member of itself not being handled properly

11022

Active Directory discoveries: “TTL” Group Member Property: Data may be overwritten and lost with multiple collections from multiple domains using the “Collect nested groups and members” option

18891

Exchange discoveries: Exchange exclusions should be followed in some cases

25018

Active Directory and Exchange discoveries: Duplicate contacts and distribution groups

25023

NAS Configuration UI Option on NTFS and File Storage Analysis Scopes pages causes confusion

27809

Computer discoveries: Windows service(s) are collecting as a failure on discovery when they are access denied.

27907

Exchange discoveries: Error on Exchange 2007 after collecting mailboxes with subfolders and permissions

76507

Exchange Online discoveries: cannot collect mailbox folders permissions with "/" in name

108051

Exchange Online discoveries: cannot collect permissions for some mailbox folders

108052

Computer discovery: Find Computers dialog: incorrect domain hierarchy after select child domain in Available Scopes

125087

Azure discoveries: Azure Licensed User with Service Plans may report incorrect service plans for users if service plan has not be provisioned

128479

Computer discoveries: With some computer discoveries using a shared data location, objects that have been deleted may not be correctly tombstoned in the database

128660

NTFS discovery taking excessive time to complete when metadata selected and encryption enabled on files and folders

170551

Installing the Enterprise Reporter Server using the Change functionality of the installer fails when UAC is enabled

WORKAROUND: Disable UAC before using the Change function to install the server

371

215300

Crash upon launch of Configuration Manager console post upgrade installation

423

 

Database Wizard does not auto-start after installing Enterprise Reporter on PC with enabled UAC

124827

 

If an ACL references an ACE that is unresolved, that ACE remains unresolved even if the underlying issue is fixed

366

179774

For SQL Server 2000, users who have permissions assigned to database objects will not show properly in the Database Object Permissions report. These permissions are not currently being collected.

367

180536

Registry permissions for a 64-bit key are not being collected when using a 32-bit node

368

180545

A refresh issue sometimes causes a node that was manually removed to remain in the Configuration Manager

WORKAROUND: Close the Configuration Manager, and open it again

370

203553

Alternate credentials for a discovery will be ignored if the discovery target is the same machine as the node processing the discovery task. The service account for the node is used to perform the discovery.

376

316195

The dollar sign ($) used for hidden shares does not look correct in Trebuchet font

379

347709

NTFS discovery errors on DFSROOT folders that are actually on the machine but collector says they cannot be found

396

384183

SQL Discovery does not enumerate the SQL Server located on the same system as Enterprise Reporter

397

384273

SQL Discovery does not support SQL Server cluster as a target

413

399407

Microsoft 365 distribution group account type may be updated incorrectly in the database when changing discovery options and collecting mailbox delegates with permissions

444

622477

Exchange throttling warning can occur during large Exchange collections: “The server cannot service this request right now. Try again later.” Create and run smaller discoveries or update Exchange throttling policy. For more information, see Knowledge Base article SOL205286.

446

624722

Multiple errors when using multiple nodes and running ARS collection with AD if nodes do not have prerequisites

449

626447

Special characters in collected data can cause a sorting issue in the SQL Lite database. Data may appear to be deleted when it is not.

2123

212195

When running the ER consoles in 4K resolution, they do not scale properly; 1920x1080 or lower works better. Solution article for DPI settings is available.

164903

 

Potential Security Risk

Enterprise Reporter sets the PowerShell script execution policy to Unrestricted. This policy is required to allow non-signed scripts to run with reports.

The execution policy can be reset if required for security. If set to RemoteSigned or Restricted, some reports will not run.

478387

 

If you have made changes to parameter values when scheduling a report, you must click Save to preserve your changes. If you navigate away from the parameters, your changes are lost.

If you make a change in parameters, you are not warned that you will lose your changes if you do not click Save.

369

180547

Account credentials for a schedule report share will be ignored if the share is on same machine as the Enterprise Reporter server. The service account for the Server is used to access the share and deliver the reports.

376

316195

Unicode characters are not displayed correctly when exported (out of box reports)

WORKAROUND: Update report layout to font that supports your character

381

358358

Issues may occur when using two Report Manager consoles on the same machine

403

388313

Custom query reports can allow security breach if SQL Server/database is not properly permissioned

438

613837

NullReferenceException occurs in all reports if they were created with parameters named with reserved words

2124

501242

Boolean parameters are shown incorrectly in the Excel files of reports that are created with the auto-layout wizard

2125

588670

Security Explorer cannot take action against 32 registry key from 64 bit machine

10570

 

Scheduled reports write to local share using Enterprise Reporter service account instead of account associated with the schedule

11028

 

Report layout retains parameters that have been deleted and/or renamed

85849

 

Exporting Summary reports to CSV will not work for sub reports or graphs

120306

 

The value displayed in the time last collected in Custom Query reports is being reported in GMT and not local time

122626

 

NTFS: Cannot collect Shares with Cyrillic names in Shares

122634

 

When running the ER consoles in 4K resolution, they do not scale properly; 1920x1080 or lower works better. Solution article for DPI settings is available.

164903

 

Special characters not handled correctly in SSRS published reports - query fails to run in RDL

372

223723

The option to display nested groups and their members in reports is not supported in SSRS

373

224951

Scripts are not supported in SSRS reports

374

224953

When a report is published to SSRS, charts are not published and sometimes a blank space will appear in the SSRS report

409

398868

Links in reports are not supported in SSRS. Reports that include links to other reports include File Storage Analysis reports and Remediation Reports.

411

398872

Custom report column headers do not appear on first page in a tabular report when exported to SSRS

426

490510

Some Enterprise Reporter Exchange library reports publish with errors due to fields that cannot be converted. Exchange Server Details report is not supported for publishing.

431

509490

Azure and Microsoft 365 reports do not publish correctly to SSRS - errors related to Raw Azure ID and unsupported data types

10819

 

Advanced calculated field used in reports not supported in SSRS - reports not published

10889

 

Custom images do not export from Report Manager reports to SSRS

18362

4156245

Parameters used in report layout as binded values are not supported when a report is exported to SSRS.

18363

4156245

Operator EqualswithGroupExpansion is not supported in SSRS. An error will occur when report is published.

85754

 

The ability to publish reports to Quest Knowledge Portal and the integration with Quest Knowledge Portal has been removed from the product. After upgrade to Enterprise Reporter 3.5, all reports will have to be published to SSRS, as previously published reports to Quest Knowledge Portal will no longer be available and cannot be updated.

ADO -265787

 

 

System requirements

Before installing Enterprise Reporter, ensure that your system meets the following minimum hardware and software requirements.

Topics:  

For the Enterprise Reporter Server, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

Hard disk space

For the Configuration Manager and Report Manager, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

Hard disk space

For the Enterprise Reporter nodes, we recommend the following minimum hardware. For detailed recommendations for node requirements, see

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores - 4 recommended)

Hard disk space

For the Enterprise Reporter SQL Server, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 4cores)

Hard disk space

The Enterprise Reporter database is the storage location of all data collected for reporting. As such, the amount of hard disk space required is directly related to the amount of data being collected. The Database Size Estimator tool shipped with Enterprise Reporter can help determine how much space will be required.

Larger environments may have additional requirements for memory, processor, and hard disk space. There are many factors that can affect these requirements.

The following hardware is required for Enterprise Reporter 3.2 and higher.

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

The following operating systems are supported for Enterprise Reporter components.

 

X

X

X

X

 

X

X

 

X

X

 

X

X

 

X

X

X

X

X

 

X

X

X

X

X

 

X

Windows® 11

 

X

 

Windows® 10

 

X

 

The following operating systems are supported for Enterprise Reporter discovery targets.

 

 

 

 

 

Windows Server® 2016 Functional Level

X

 

 

 

 

Windows Server® 2012 R2 Functional Level

X

 

 

 

 

Windows Server® 2012 Functional Level

X

 

 

 

 

 

 

 

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

Windows Server® 2019 and 1809

 

X

X

 

 

Windows Server® 2016 and 1803

 

X

X

 

 

Windows Server® 2012, 2012 R2, and 2012 Core

 

X

X

 

 

Windows® 11

 

X

X

 

 

Windows® 10

 

X

X

 

 

Windows® 8.1

 

X

X

 

 

 

 

 

 

 

 

X

X

 

 

 

X

X

 

 

NetApp® 9.4

 

X

X

 

 

NetApp® 9.3

 

X

X

 

 

NetApp® Filer - Data ONTAP® 8..x - 9.x and above
(Cluster mode is supported as of version 8.2)

 

X

X

 

 

 

X

X

 

 

EMC® VNX 7.1.47.5 X (Supported by collecting as a Windows Server)

 

X

X

 

 

EMC® VNX 7.0.35.3 X (Supported by collecting as a Windows Server)

 

X

X

 

 

 

X

X*

 

 

 

 

 

 

 

SQL Server® 2022

 

 

 

X

 

SQL Server® 2019

 

 

 

X

 

SQL Server® 2017

 

 

 

X

 

SQL Server® Clusters

 

 

 

X

 

SQL Server® 2016

 

 

 

X

 

SQL Server® 2014

 

 

 

X

 

SQL Server® 2012

 

 

 

X

 

 

 

 

 

 

Exchange® 2019

 

 

 

 

X

Exchange® 2016

 

 

 

 

X

Exchange® 2013

 

 

 

 

X

The following versions of Active Roles are supported as targets of Active Directory discoveries. See the Active Roles web site for the hardware and software requirements for your version of Active Roles.

Enterprise Reporter can be configured to send discovery information to the following versions of IT Security Search. See the IT Security Search web site for the hardware and software requirements for your version of IT Security Search.

Enterprise Reporter can support IPv6 (Internet Protocol version 6) as well as IPv4.

The following versions of SQL Server® are supported for the Reporter database. See the Microsoft® web site for the hardware and software requirements for your version of SQL Server®:

SQL Server® 2022
SQL Server® 2019
SQL Server® 2017
SQL Server® 2016
SQL Server® 2014
SQL Server® 2016 Always On
SQL Server® 2014 Always On

Enterprise Reporter can be configured to work with a SQL Server® instance. To secure communications while working with Enterprise Reporter, data sent over connections to the SQL Server can be encrypted using an SSL certificate.

The steps required to configure this encryption are as follows.

The following software is required for Enterprise Reporter.

To collect Active Roles information, the following software is required on the computer where the Enterprise Reporter Configuration Manager is installed and on the computer where the Enterprise Reporter node is installed:

For more information and installation instructions, see the Active Roles Quick Start Guide.

The following additional considerations are required:

To collect Exchange information, the following additional considerations are required:

To collect Exchange mailbox folders, the following additional considerations are required:

To collect Exchange Online information, the following additional considerations are required:

Cloud discoveries (Azure Active Directory, Azure Resources, Exchange Online, Teams, and SharePoint Online) support both MFA (Multi-Factor Authentication) enabled and disabled credentials. However, using Multi-Factor Authentication enabled credentials on cloud discoveries can result in an incomplete collection that omits one or more of the following objects and attributes.See the following table for details.

Azure Active Directory

Risky users and Azure Active Directory extended attributes

Azure Resources

Fails with no data returned

Exchange Online

All Exchange Online Permissions, Mailbox Folders, Mailbox Statistics, Public Folders, Dynamic Groups and Members

Microsoft Teams

No files and folders (drives)

SharePoint Online

Fails with no data returned

One Drive

Fails with no data returned

The following services are required on the Enterprise Reporter server and nodes.

The following services must be enabled on discovery targets for collections.

 

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating