ControlPoint 8.8 - Administration Guide

Use Activity Min. Date as Start Date (UseActivityDbDate)

By default, when an Activity Analysis includes a date range, there are no restrictions on the Start Date users can select, even if it precedes the earliest date that activity that is retained in the database.  ControlPoint Application Administrators can, however, restrict the Start Date that can be selected (that is, prohibit users from selecting a Start Date earlier than the first date of available activity) by changing the Value of the ControlPoint Setting UseActivityDbDate from False to True.

If this value is set to True, page load time may take significantly longer.

"Show unique permissions only" Default Value (SHOWUNIQUEPERMONLY)

When a permissions analyses is initiated, users have the option of including only objects with unique (non-inherited) permissions or objects with both inherited and non-inherited permissions.  Having Show unique permissions only selected is the ControlPoint default.  

ControlPoint Application Administrators can, however, change the default (so that Show Unique Permissions Only is unselected) by changing the parameter value of the ControlPoint Configuration Setting "Show unique permissions only" Default Value from true to false.

Duplicate Files Report Limit (DuplicateFilesReportLimit)

By default, when a Duplicate File analysis is run, up to 3000000 (three million) files can be evaluated for duplicates.  ControlPoint Application Administrators can, however, increase this number by changing the Value of the ControlPoint Setting Duplicate Files Report Limit.

NOTE:  This is an Advanced Setting.

NOTE:  If you set too high a limit, out-of-memory exceptions may occur, particularly on 32-bit operating systems.

Users to Exclude from Reports (EXCLUDEDUSERS)

By default, unless one or more users are specified in the People Picker, all SharePoint users are included in the following ControlPoint analyses:

·Site Permissions

·Comprehensive Permissions

·Site Collection Activity

·Site Activity

·Activity by User

·Activity by Document

·Inactive Users

ControlPoint Application Administrators can, however, exclude certain users and/or Active Directory groups from these analyses by entering the user account name(s) as the Value for the ControlPoint Configuration Setting Users to Exclude from Reports.  Enter multiple account names as a comma-separated list.

You may, for example, want to exclude common system accounts such as Sharepoint\System and NTAuthority\Authenticated Users.  

NOTE:  You must exclude users based on full account names (sometimes known as pre-Windows 2000account names in Active Directory), not display names.  For example, you cannot exclude system accounts by entering the display name System Account.

You can still run permissions and activity reports on excluded users if you enter them in the People Picker.  

NOTE:  You can exclude users from audit log analyses via the ControlPoint Configuration Setting Users to Exclude from Audit Log Analyses.