Chatta subito con l'assistenza
Chat con il supporto

Enterprise Reporter 3.5.1 - Quick Start Guide

Introducing Quest® Enterprise Reporter Key Features of Enterprise Reporter Enterprise Reporter Components System Requirements Overview of Enterprise Reporter communications and required credentials Installing Enterprise Reporter Step-By-Step Walkthroughs

Manage Compliance

If you are required to regularly show compliance with corporate or regulatory security requirements, Enterprise Reporter can be of great assistance by automatically gathering information and reporting on it.

At the beginning of each month, you must deliver a report that shows that users who have been inactive for three months have their accounts disabled, in line with your corporate security policy. You are going to use two reports to do this: one report for yourself, in order to identify accounts that are not compliant, and one report that is sent to the stakeholders showing compliance. You will automate the delivery of the monthly report to ensure it is always on time. You must take the following steps:

Modifying an Existing Report

You need to modify an existing report to only show accounts that have been inactive for 90 days and are not disabled. You should manually run an appropriate Active Directory discovery right before you run the report to ensure you are getting up to date data. This will allow you to address any issues before your compliance report is sent out. To do this, you must perform the following steps:

1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
1
In the My Report container, select the Domain Users without Recent Logons report, and click Edit Report.
2
Change the report name to Domain Users to be Disabled.
3
Change the report description to Shows users in the selected domains who have not logged on in the past 90 days and whose accounts are still enabled.
4
Select the Fields tab.
5
In the Selected Fields list, select Is Locked and Number of Logons, and click Remove.
6
Select the Parameters tab.
7
Click +Add.
8
Set This parameter is: to Hidden.
9
Set Select the field to associate with this parameter: to IsDisabled.
10
Set the operator to Equals and the value to No.
11
2
Click Edit.
3
In the detailHeader row of the report layout, right-click Number of Logons, and select Delete then Cell.
4
Repeat for IsDisabled and IsLocked.
6
Click the Preview tab below the report to ensure the new layout it is accurate:
7
Click OK to close the Edit Report dialog box.
8
Click OK to close the Edit Report Definition dialog box, and finish editing the report.
1
If necessary, in the My Reports container, select the Domain Users to be Disabled report.
2
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
3
In the Users not logged on in the last (days) parameter, change the number of days to 90.
4
To make these the default parameter values, click Save parameters as default, and click OK in the confirmation dialog box.
5
Click Run report.

Your report appears, listing all users who are not in compliance. You can now make any changes you need prior to the sending the compliance report to your stakeholders.

Scheduling the Discovery

In this scenario, the Active Directory collection previously configured collects the necessary data. We will edit it to run on a scheduled basis so that the scheduled reports have up-to-date data. You can also run it manually before you run the report you modified that identifies any compliance issues.

1
On the Manage Discoveries page of the Configuration Manager, select the AD - [Domain Name] discovery you created, and click Edit.
2
3
Click Monthly, and select the last Friday of the month.
4
Click +Add.
5
Click OK if you edited an existing discovery.
Click Finish if you created a new discovery.

Scheduling Report Delivery to Recipients

Once the data has been collected, the reports can be generated. Using the Schedule tab of the Report Manager, you can create a schedule that automatically delivers the desired reports to your specified recipients.

To do this, you must:

1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
If you did not rename the report when you modified an existing report (see Modifying an Existing Report), the report will have a (1) after its name so you can differentiate them.
2
Click +New Schedule.
3
Name the schedule Compliance Reports.
4
Click Monthly, and select day 1 of the month.
2
Click Configure mail server.
NOTE: To use Exchange Online, you must register an application for Enterprise Reporter with Azure Active Directory, using certificate-based authentication. For more information, see “Registering an Enterprise Reporter Application for Exchange Online Email Delivery” in the Configuration Manager User Guide.
7
1
2
Select Domain Users without Recent Logons, and click OK.
3
Click the Modify Report Parameters icon for the Domain Users without Recent Logons report.
4
In the Report Parameters pane, complete the Parameter Set Name: by typing [Domain Name] Users not logged in for 90 days to identify the parameter values you will use.
5
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
6
In the Users not logged on in the last (days) parameter, change the number of days to 90.
7
Click Save.

Your report will now run automatically, reporting on the data from your scheduled discovery.

Related Documents

The document was helpful.

Seleziona valutazione

I easily found the information I needed.

Seleziona valutazione