Enterprise Reporter 3.5 - Configuration Manager User Guide

If Send notifications on discovery state changes is selected, select Send only failures to send email notifications only for only discovery state changes that are failures.

Managing the Collection of Additional Attributes

Enterprise Reporter collects a pre-defined set of attributes for each object in a discovery. The attributes collected vary depending on the type of discovery, the object, and the version of Enterprise Reporter you are using. You can add and remove attributes collected by Active Directory® and computer discoveries. You can extend:

•

Active Directory® discovery attributes for users, groups, computers, organizational units, and service account.

•

Computer discoveries with attributes from WMI classes added.

•

Active Roles attributes for users, groups, computers, contacts, and organizational units.
The following data types are supported:

•

Boolean

•

Case Ignored String

•

Case Sensitive String

•

•

•

•

•

•

•

NOTE: Collecting Active Roles attributes for users, groups, computers, and organizational units can significantly increase the collection time. Some attributes that are known to increase collection time are:

•

edsaDialinAccessPermissions

•

edsaDialinApplyStaticRoutes

•

edsaDialinApplyStaticIP

•

edsaDialinCallbackNumber

•

edsaDialinCallbackOptions

•

edsaDialinCallerID

•

edsaDialinStaticIP

•

edsaDialinStaticRoutes

•

edsaDialinVerifyCallerID

Attributes you extended in previous versions of Enterprise Reporter can become default attributes in newer versions. In this case, the extended attribute is preserved to ensure that your reports continue to work, but only the default attribute is available for new reports.

When you add or remove attributes for a discovery type, Enterprise Reporter has to process them. This can take some time, during which any running discoveries of the type you extended may fail. You should perform the extension only after ensuring that no discoveries of that type are running or scheduled to run. Additionally, any attributes that are no longer being collected should be removed from any reports in which they were included.


	TIP: To minimize collection time, it is recommended that you only collect attributes that you know are required by your reporting users. You cannot remove attributes that are collected by default.


	NOTE: Reporting users must restart their consoles to have the most up-to-date list of available attributes in their reports. Consider informing users that data is no longer being collected so they can remove the associated fields from their reports.

To add or remove Active Directory attributes

Ensure that no Active Directory discoveries are running or scheduled to run while your changes are processed.

Click Configuration.

Click Manage attributes.

Click Yes in the warning dialog box.

In the Active Directory section, click Extend.

If you want to use a different forest to enumerate the schema, click the ellipsis and select an appropriate domain.

If your logged-in user does not have access to a domain in the forest whose schema you want to enumerate, right-click in the dialog box and choose Connect as user.

Click Get Schema.

The Extend Enterprise Reporter Attributes dialog box is displayed. Default attributes have grey check marks. Extended attributes have blue check marks for easy identification.

Select the type of attributes to collect from the Type menu.

Select to add or deselect to remove attributes.

To view a list of your currently selected attributes, select Only show selected attributes.


	NOTE: An error message is displayed for any attribute that cannot be collected. Use the error message to troubleshoot any issues with collecting the attribute and then redo the steps above.

Click Apply.

Click Close.

To extend computer attributes (using WMI classes)

Ensure that no computer discoveries are running or scheduled to run while your changes are processed.

Click Configuration.

Click Manage attributes.

Click Yes in the warning dialog box.

In the Computer section, click Extend.

Click

Add.

If you want to use a different computer to enumerate the WMI classes, click the ellipsis and select the computer.

The Extend Enterprise Reporter Attributes dialog box is displayed. Any classes that have been extended are shown.

Expand the WMI class treeview as necessary to locate the desired classes.

Select the classes and click the Add button.

You can only add entire classes, not individual properties.

To remove classes, select them from the list and click the Remove button.

Click Add.

The Extend Enterprise Reporter Attributes dialog box reappears, with the newly added classes in bold letters.

If you add more than the recommended number of classes, a warning appears. Ensure that you require the selected extended WMI classes, as they will increase your collection time.

Verify the list and then click Apply.

To remove computer attributes (non-default)

Ensure that no computer discoveries are running or scheduled to run while your changes are processed.

Click Configuration.

Click Manage attributes.

Click Yes in the warning dialog box.

In the Computer section, click Extend.

The Extend Enterprise Reporter Attributes dialog box is displayed. Any classes that have been extended are shown.

Select the desired classes and click Remove.

Click Apply.

To add or remove Active Roles attributes

Ensure that no Active Directory discoveries are running or scheduled to run while your changes are processed.

Click Configuration.

Click Manage attributes.

Click Yes in the warning dialog box.

In the Active Roles section, click Extend.

If you want to use a different forest to enumerate the schema, click the ellipsis, select an appropriate domain, and click OK to continue.

If your logged-in user does not have access to a domain in the forest whose schema you want to enumerate, right-click in the dialog box and choose Connect as user. Use the Credential Manager to select or create a user with the required credentials and click OK.

To select the Active Roles server, click the ellipsis, select a computer, and click OK.

To set the credentials to access the Active Roles server, click the ellipsis, use the Credential Manager to select or create a user with the required credentials, and click OK.

Click Get Schema.

The Extend Enterprise Reporter Attributes dialog box is displayed. Selected Active Roles attributes have blue check marks for easy identification. Extended attributes have blue check marks for easy identification.

Select the type of attributes to collect from the Type menu.

Select to add or deselect to remove attributes.

To view a list of your currently selected attributes, select Only show selected attributes.

Click Apply.

Click Close.

Configuring IT Security Search

You can manage the configuration information and the credentials to access IT Security Search Warehouse Rest API. You can globally configure Enterprise Reporter to send information collected about Active Directory and Computers, NTFS, Azure Active Directory, Azure Resources, and Microsoft Teams to the IT Security Search Repository after every discovery.

To be able to push collected data to the repository, the database account must have db-owner rights to the Enterprise Reporter database. The first discovery transmission includes all of the information collected for IT Security Search (based on your configuration settings). Subsequent discovery transmissions include only information that has been updated, is new, or has been deleted. You can view the statuses of the 100 most recent data transfers sent to the IT Security Search Repository or send all of the information in the database if maintenance or support issues occur.

For Enterprise Reporter to access the IT Security Search Warehouse Rest API, you must provide the appropriate host name, port, and credentials. This information can be obtained from the IT Security Search administrator.

To configure IT Security Search

Click Configuration.

Click Manage configuration of IT Security Search.

Enter the host name.

Enter the host port number.

- OR -

Select Use HTTPS to set the port number to 443.

Optionally, enter a custom host port number.

Click the ellipsis (...) to use the Credential Manager to enter and select the credentials required to access the host. For more information, see Using the Credential Manager .

Optionally, click Test Connection to verify access to the host.


	NOTE: If Enterprise Reporter encounters errors connecting to IT Security Search, the Configuration Manager logs will contain those errors. For more information, see Exporting Logs from the Configuration Manager .

Optionally, select the information to send to the IT Security Search Repository after every discovery.

If the connection test has been completed successfully, click OK to save the configuration settings.

To view the status of IT Security Search data transfers and re-send data if required

Click Configuration.

Click Manage configuration of IT Security Search.

Click View Status.

Optionally, click Send All to send all of the information in the database to the IT Security Search repository, review the confirmation, and click Yes to continue.


	NOTE: Normally, only information that has changed since the last discovery is sent to the IT Security Search Repository. Setting this option to send all available information when the next discovery is complete. You can wait for a scheduled discovery to finish or run a discovery manually.