立即与支持人员聊天
与支持团队交流

Enterprise Reporter 3.5 - Release Notes

Resolved issues

Changed the workflow for creating cloud discoveries so the user must configure the tenant before adding credentials. This change allows Enterprise Reporter to ensure the credentials are authorized for the specified tenant, eliminating possible discovery failures due to credentials being used that are not authorized for the tenant.

369336

 

Added the ability to select fields for raw CSV output

3500

3774541

Local groups in a cluster are recorded incorrectly

41916

4287008

Getting the error System.Exception: CalculatedAceExtension: NTFSComputer.NTFSShare.NTFS.ACL.ACE entity not found for extension with 2.6 reports

120179

 

Re-arranging selected fields bug

128028

4465907

Log Viewer: A user cannot delete zip file when added directly

129085

 

Error: "Unable to connect to the report server" if security Groups are not in the Users OU

155365

 

Enterprise Reporter Account Lockout Duration Reported as -1

157448

4514583

Unable to continue upgrading to 3.2.1 - 'Server Port Failed' message

160409

 

Node deployment logs service account password in plain text

160849

4495990

OneDrive: Collection may not exit cleanly as expected when more than three repeated throttling errors occur on same folder or file

160851

 

Error during AD discovery for permissions: "The Control is Critical."

162177

4483576

Report Client fails to load with error when using SQL Server Authentication and selecting the Remember Credentials option

162298

4509532

Exchange Online public folder discovery RunspaceSessionController error

162522

 

Options for CSV in the Report Manager scheduler are greyed out

164896

 

Report schedule time is displayed in 12hr format and does not show AM/PM

164902

 

Reduce amount of logging during SQL discoveries

167126

4556245

Report Manager not opened if user in "Reporter_Exploring_Operators" group

168006

 

Discovery node settings: the settings "separate SQL Server Authentication credential" cannot be saved correctly

168939

 

Allow email addresses with the character "_" at the beginning of the email

168955

 

AutoRun: Unnecessary component in Redistributables - .NET 4.0

170505

 

ER is terminated with an exception if we use 'X' to close "Sign in to your account" window twice

170860

 

Exchange Online: Error message with exception text on clicking Configure if incorrect tenant credential is selected

171267

 

Computer Discovery: Errors in node log and incorrect report after collect with enabled 'Policies' option

171566

 

ER server started with incorrect listened TCP port if alternate port specified in the Installation process

172872

 

Node: Impossible to install Node if alternate port specified in the Installation process

172879

 

Report with no layout (Custom CSV output report) is still trying to run a report layout when run generating

173030

 

Ability to use partial paths for Global Exclude scopes

174036

4553592

EO: Impossible to select Tenant Discovery > Options > Tenant Application Manager

174816

 

DB Wizard: Error appears if we use groups for which the "name" attribute differs from the "sAMAccountName" attribute

176525

 

Many Errors in Node Log if we collect Users in AD with permissions - "Unable to retrieve the OU for permissioned object " error message

177419

 

AAD collection of devices not handling null device version

178961

 

ER Report is not showing the correct amount of Exchange mailboxes

179503

4578944

Exchange Online discovery is working but slow in 3.2.1. 7 days + vs 1 day in 3.2.0

179507

4601901

Discovery-Configuration: Duplicate Subnet and/or no objects resolved

184929

 

Registry Paths Accessible and Registry Subpaths Accessible are reversed in reports and database

185065

4640711

"C:\Program Files\Quest\" folder remains after removal all ER components

187909

 

AD discovery - RetrieveFineGrainPasswordPolicy method performs an incorrect datatype check and will never read Fine Grain Password Policy settings

189384

 

Upgrade: Manual Node install spawns workflow issues with alternative credentials prompts

190649

 

Report could not be generated

192546

4656755

AD collection - Dynamic Distribution Groups (Exchange) are not being collected

192765

 

Enterprise Reporter 3.2.1: Unable to collect Extended attribute

193128

4656984

Database clean-up utility throws error

195426

4605150

Azure AD Tenant object contains DirSyncEnabled field which is never set.

195958

 

Push of computers sometimes does not include domain name for computer objects and groups inside computers

196300

 

Group Comparison Report Showing Outdated Results

202002

469639

Duplicate Files Collection error after upgrade from ER 3.1 H1 to ER 3.5.0.468

203474

 

Errors in Exchange Online Discovery after collect 'Infected' mailbox folders

203913

 

Database Cleanup in 3.2.1 H1 not cleaning up NTFS tables properly

204195

 

Errors in Node log after collect Mailboxes with folders (sometimes)

204977

 

Report Manager with older version able to connect to new server

204978

 

CSV reports are not generating in scheduled task

205589

4721312

Exchange Online Performance Issues

205832

4672635

Exchange Online: EXO V2 asks for a credentials during the collect

207304

 

Azure AD Reports no MFA user information

207660

4716632

Report Manager giving error when enter single quote (apostrophe) in the parameter e.g. folderPath

209283

 

One drive discovery with Azure works intermittently

214878

4712034

Cannot access Email Notification Dialog

219826

4772876

Test Email can fail on CM but not RM

219837

4772876

NTFS Report: Double clicking on a folder with special characters (apostrophe) causes a crash in Report Manager

219992

4765825

DefaultAccount does not appear in local groups and members reports

221079

4773414

ACS_Unable_to_export_csv_with_correct_encoding

222312

4759275

DNS server report returns all computers even if not a DNS server

222655

 

SQL Discover does not enumerate the SQL Server located on the same system as Enterprise Reporter

222657

 

SSL error - Cannot successfully run an SQL discovery if targeting the SQL server or multiple databases-SSL errors

236098

 

Home-Demo environment failed to run discovery successfully after it was upgraded

247516

4846070

MFA - Incorrect Storage of data in Azure AD MFA settings

253294

4864809

Internal error when running the "QMM Matching Users"

253905

4871100

Azure AD Discovery failing to collect Group info

262130

 

Run the Exchange online with the parameters in the attached file

264959

4868536

Active Directory Discovery: Investigating the additional retry logic if an object is unable to be collected

273361

 

Fix for case sensitive collation

280926

4926992

Fix for case sensitive collation

280928

4926992

Configuration Manager crashes with Trademark character in computer query

316293

4952414

Configuration Manager crashes with Trademark character in computer query

316295

4952414

Active Directory Account Lockout Duration Reported as -1

321208

4996280

Database Content Wizard: Transfer is failing

333018

 

Known issues

Table 3. Known issues

OneDrive discoveries: Groups are not being properly collected on edits of the group properties/permissions

4009

 

OneDrive discoveries: Returning unexpected results when "Contribute" permission is being assigned

4221

 

OneDrive discoveries: Custom Permissions are only returning the "name" of the custom permission and no results on actual set permission

4222

 

NTFS discoveries: NTFS duplicate files calculation may not be looking at whole computer, only share

7839

 

PowerShell intermittently returns OneDrive configuration settings incorrectly and updating these attributes is slow on native portal

9902

 

Azure Active Directory discoveries: Group member of itself not being handled properly

11022

 

Active Directory discoveries: “TTL” Group Member Property: Data may be overwritten and lost with multiple collections from multiple domains using the “Collect nested groups and members” option

18891

 

Exchange discoveries: Exchange exclusions should be followed in some cases

25018

 

Active Directory and Exchange discoveries: Duplicate contacts and distribution groups

25023

 

NAS Configuration UI Option on NTFS and File Storage Analysis Scopes pages causes confusion

27809

 

Computer discoveries: Windows service(s) are collecting as a failure on discovery when they are access denied.

27907

 

Exchange discoveries: Error on Exchange 2007 after collecting mailboxes with subfolders and permissions

76507

 

Exchange Online discoveries: cannot collect mailbox folders permissions with "/" in name

108051

 

Exchange Online discoveries: cannot collect permissions for some mailbox folders

108052

 

Computer discovery: Find Computers dialog: incorrect domain hierarchy after select child domain in Available Scopes

125087

 

Azure discoveries: Azure Licensed User with Service Plans may report incorrect service plans for users if service plan has not be provisioned

128479

 

Computer discoveries: With some computer discoveries using a shared data location, objects that have been deleted may not be correctly tombstoned in the database

128660

 

NTFS discovery taking excessive time to complete when metadata selected and encryption enabled on files and folders

170551

 

Email notifications to Office 365 email is not supported when Basic Authentication is disabled on the tenant

386185

 

Installing the Enterprise Reporter Server using the Change functionality of the installer fails when UAC is enabled

WORKAROUND: Disable UAC before using the Change function to install the server

371

215300

Crash upon launch of Configuration Manager console post upgrade installation

423

 

Database Wizard does not auto-start after installing Enterprise Reporter on PC with enabled UAC

124827

 

If an ACL references an ACE that is unresolved, that ACE remains unresolved even if the underlying issue is fixed

366

179774

For SQL Server 2000, users who have permissions assigned to database objects will not show properly in the Database Object Permissions report. These permissions are not currently being collected.

367

180536

Registry permissions for a 64-bit key are not being collected when using a 32-bit node

368

180545

A refresh issue sometimes causes a node that was manually removed to remain in the Configuration Manager

WORKAROUND: Close the Configuration Manager, and open it again

370

203553

Alternate credentials for a discovery will be ignored if the discovery target is the same machine as the node processing the discovery task. The service account for the node is used to perform the discovery.

376

316195

The dollar sign ($) used for hidden shares does not look correct in Trebuchet font

379

347709

NTFS discovery errors on DFSROOT folders that are actually on the machine but collector says they cannot be found

396

384183

SQL Discovery does not enumerate the SQL Server located on the same system as Enterprise Reporter

397

384273

SQL Discovery does not support SQL Server cluster as a target

413

399407

Office 365 distribution group account type may be updated incorrectly in the database when changing discovery options and collecting mailbox delegates with permissions

444

622477

Exchange throttling warning can occur during large Exchange collections: “The server cannot service this request right now. Try again later.” Create and run smaller discoveries or update Exchange throttling policy. For more information, see Knowledge Base article SOL205286.

446

624722

Multiple errors when using multiple nodes and running ARS collection with AD if nodes do not have prerequisites

449

626447

Special characters in collected data can cause a sorting issue in the SQL Lite database. Data may appear to be deleted when it is not.

2123

212195

When running the ER consoles in 4K resolution, they do not scale properly; 1920x1080 or lower works better. Solution article for DPI settings is available.

164903

 

If you have made changes to parameter values when scheduling a report, you must click Save to preserve your changes. If you navigate away from the parameters, your changes are lost.

If you make a change in parameters, you are not warned that you will lose your changes if you do not click Save.

369

180547

Account credentials for a schedule report share will be ignored if the share is on same machine as the Enterprise Reporter server. The service account for the Server is used to access the share and deliver the reports.

376

316195

Unicode characters are not displayed correctly when exported (out of box reports)

WORKAROUND: Update report layout to font that supports your character

381

358358

Issues may occur when using two Report Manager consoles on the same machine

403

388313

Custom query reports can allow security breach if SQL Server/database is not properly permissioned

438

613837

NullReferenceException occurs in all reports if they were created with parameters named with reserved words

2124

501242

Boolean parameters are shown incorrectly in the Excel files of reports that are created with the auto-layout wizard

2125

588670

Security Explorer cannot take action against 32 registry key from 64 bit machine

10570

 

Scheduled reports write to local share using Enterprise Reporter service account instead of account associated with the schedule

11028

 

Report layout retains parameters that have been deleted and/or renamed

85849

 

Exporting Summary reports to CSV will not work for sub reports or graphs

120306

 

The value displayed in the time last collected in Custom Query reports is being reported in GMT and not local time

122626

 

NTFS: Cannot collect Shares with Cyrillic names in Shares

122634

 

When running the ER consoles in 4K resolution, they do not scale properly; 1920x1080 or lower works better. Solution article for DPI settings is available.

164903

 

Special characters not handled correctly in SSRS published reports - query fails to run in RDL

372

223723

The option to display nested groups and their members in reports is not supported in SSRS

373

224951

Scripts are not supported in SSRS reports

374

224953

When a report is published to SSRS, charts are not published and sometimes a blank space will appear in the SSRS report

409

398868

Links in reports are not supported in SSRS. Reports that include links to other reports include File Storage Analysis reports and Remediation Reports.

411

398872

Custom report column headers do not appear on first page in a tabular report when exported to SSRS

426

490510

Some Enterprise Reporter Exchange library reports publish with errors due to fields that cannot be converted. Exchange Server Details report is not supported for publishing.

431

509490

Azure and Office365 reports do not publish correctly to SSRS - errors related to Raw Azure ID and unsupported data types

10819

 

Advanced calculated field used in reports not supported in SSRS - reports not published

10889

 

Custom images do not export from Report Manager reports to SSRS

18362

4156245

Parameters used in report layout as binded values are not supported when a report is exported to SSRS.

18363

4156245

Operator EqualswithGroupExpansion is not supported in SSRS. An error will occur when report is published.

85754

 

The ability to publish reports to Quest Knowledge Portal and the integration with Quest Knowledge Portal has been removed from the product. After upgrade to Enterprise Reporter 3.5, all reports will have to be published to SSRS, as previously published reports to Quest Knowledge Portal will no longer be available and cannot be updated.

ADO -265787

 

Some of the PDF cross references do not link to their destination pages

380

348264

System requirements

Before installing Enterprise Reporter, ensure that your system meets the following minimum hardware and software requirements.

Topics:  

For the Enterprise Reporter Server, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

Hard disk space

For the Configuration Manager and Report Manager, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

Hard disk space

For the Enterprise Reporter nodes, we recommend the following minimum hardware. For detailed recommendations for node requirements, see

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores - 4 recommended)

Hard disk space

For the Enterprise Reporter SQL Server, we recommend the following minimum hardware.

Memory

Processor

Intel® or AMD 2 GHz multiprocessor (with at least 4cores)

Hard disk space

The Enterprise Reporter database is the storage location of all data collected for reporting. As such, the amount of hard disk space required is directly related to the amount of data being collected. The Database Size Estimator tool shipped with Enterprise Reporter can help determine how much space will be required.

Larger environments may have additional requirements for memory, processor, and hard disk space. There are many factors that can affect these requirements.

The following hardware is required for Enterprise Reporter 3.2 and higher.

Intel® or AMD 2 GHz multiprocessor (with at least 2 cores)

The following operating systems are supported for Enterprise Reporter components.

 

X

X

X

X

 

X

X

 

X

X

 

X

X

 

X

X

X

X

X

 

X

X

X

X

X

 

X

Windows Server® 2012 R2

X

X

X

X

X

X

Windows Server® Core 2012 R2

X

 

X

Windows Server® Core 2012 R2 Cluster

X

 

X

Windows Server® Core 2012

X

 

X

Windows Server® Core 2012 Cluster

X

 

X

Windows Server® 2008 R2 with Service Pack 1

X

X

X

Windows Server® Core 2008 R2 with Service Pack 1

X

 

X

Windows Server® Core 2008 R2 with Service Pack 1 (64-bit) Cluster

X

 

X

Windows® 11

 

X

 

Windows® 10

 

X

 

Windows® 8.1

 

X

 

The following operating systems are supported for Enterprise Reporter discovery targets.

 

 

 

 

 

Windows Server® 2016 Functional Level

X

 

 

 

 

Windows Server® 2012 R2 Functional Level

X

 

 

 

 

Windows Server® 2012 Functional Level

X

 

 

 

 

 

 

 

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

 

X

X

 

 

Windows Server® 2019 and 1809

 

X

X

 

 

Windows Server® 2016 and 1803

 

X

X

 

 

Windows Server® 2012 R2

 

X

X

 

 

 

X

X

 

 

Windows Server® Core 2012

 

X

X

 

 

Windows® 11

 

X

X

 

 

Windows® 10

 

X

X

 

 

Windows® 8.1

 

X

X

 

 

 

 

 

 

 

 

X

X

 

 

 

X

X

 

 

NetApp® 9.4

 

X

X

 

 

NetApp® 9.3

 

X

X

 

 

NetApp® Filer - Data ONTAP® 8..x - 9.x and above
(Cluster mode is supported as of version 8.2)

 

X

X

 

 

 

X

X

 

 

EMC® VNX 7.1.47.5 X (Supported by collecting as a Windows Server)

 

X

X

 

 

EMC® VNX 7.0.35.3 X (Supported by collecting as a Windows Server)

 

X

X

 

 

 

 

 

 

 

SQL Server® 2022

 

 

 

X

 

SQL Server® 2019

 

 

 

X

 

SQL Server® 2017

 

 

 

X

 

SQL Server® Clusters

 

 

 

X

 

SQL Server® 2016

 

 

 

X

 

SQL Server® 2014

 

 

 

X

 

SQL Server® 2012

 

 

 

X

 

 

 

 

 

 

Exchange® 2019

 

 

 

 

X

Exchange® 2016

 

 

 

 

X

Exchange® 2013

 

 

 

 

X

The following versions of Active Roles are supported as targets of Active Directory discoveries. See the Active Roles web site for the hardware and software requirements for your version of Active Roles.

Enterprise Reporter can be configured to send discovery information to the following versions of IT Security Search. See the IT Security Search web site for the hardware and software requirements for your version of IT Security Search.

Enterprise Reporter can support IPv6 (Internet Protocol version 6) as well as IPv4.

The following versions of SQL Server® are supported for the Reporter database. See the Microsoft® web site for the hardware and software requirements for your version of SQL Server®:

SQL Server® 2022
SQL Server® 2019
SQL Server® 2017
SQL Server® 2016
SQL Server® 2014
SQL Server® 2012
SQL Server® 2016 Always On
SQL Server® 2014 Always On
SQL Server® 2012 Always On

Enterprise Reporter can be configured to work with a SQL Server® instance. To secure communications while working with Enterprise Reporter, data sent over connections to the SQL Server can be encrypted using an SSL certificate.

The steps required to configure this encryption are as follows.

The following software is required for Enterprise Reporter 3.5.0 and higher.

The following software is required for Enterprise Reporter.

To collect Active Roles information, the following software is required on the computer where the Enterprise Reporter Configuration Manager is installed and on the computer where the Enterprise Reporter node is installed:

For more information and installation instructions, see the Active Roles Quick Start Guide.

The following additional considerations are required:

To collect Exchange information, the following additional considerations are required:

To collect Exchange mailbox folders, the following additional considerations are required:

To collect Azure information, the following additional software is required:

To collect Exchange Online information, the following additional considerations are required:

To collect OneDrive information, the following additional software is required:

To collect Azure Active Directory resource information, the following additional software is required:

To collect Microsoft Teams information, the following additional software is required:

To collect SharePoint Online information, the following additional software is required:

Cloud discoveries (Azure Active Directory, Azure Resources, Exchange Online, Teams, and SharePoint Online) support both MFA (Multi-Factor Authentication) enabled and disabled credentials. However, using Multi-Factor Authentication enabled credentials on cloud discoveries can result in an incomplete collection that omits one or more of the following objects and attributes.See the following table for details.

Azure Active Directory

No Risky users and no MFA Attributes

Azure Resources

Fails with no data returned

Exchange Online

All Exchange Online Permissions, Mailbox Folders, Mailbox Statistics, Public Folders, Dynamic Groups and Members

Microsoft Teams

No files and folders (drives)

SharePoint Online

Fails with no data returned

The following services are required on the Enterprise Reporter server and nodes.

The following services must be enabled on discovery targets for collections.

Overview of Enterprise Reporter communications and required credentials

There are many communication channels in Enterprise Reporter, involving different sets of credentials. This allows for controlled access to your environment, but you must understand where each set of credentials are used, and what permissions they need.

Figure 1 outlines where and for what each of the credentials are used, and the following tables explain the necessary permissions. For information on managing the credentials used in the Configuration Manager, see the Using the Credential Manager section in the Quest Enterprise Reporter Configuration Manager User Guide.

Topics:  
相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级