Chat now with support
Chat with Support

Enterprise Reporter 3.2.2 - Quick Start Guide

Introducing Quest® Enterprise Reporter Key Features of Enterprise Reporter Enterprise Reporter Components For information on installation, see Installing Enterprise Reporter . System Requirements An Overview of Enterprise Reporter Communications and Credentials Required Installing Enterprise Reporter Step-By-Step Walkthroughs

Manage Compliance

If you are required to regularly show compliance with corporate or regulatory security requirements, Enterprise Reporter can be of great assistance by automatically gathering information and reporting on it.

At the beginning of each month, you must deliver a report that shows that users who have been inactive for three months have their accounts disabled, in line with your corporate security policy. You are going to use two reports to do this: one report for yourself, in order to identify accounts that are not compliant, and one report that is sent to the stakeholders showing compliance. You will automate the delivery of the monthly report, to ensure it is always on time. You will need to take the following steps:

Modify an Existing Report

You need to modify an existing report to only show accounts that have been inactive for 90 days and are not disabled. You should manually run an appropriate Active Directory® discovery right before you run the report to ensure you are getting up to date data. This will allow you to address any issues before your compliance report is sent out. To do this, you must perform the following steps:

1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
1
In the My Report container, select the Domain Users without Recent Logons report, and click Edit Report.
2
Change the report name to Domain Users to be Disabled.
3
Change the report description to Shows users in the selected domains who have not logged on in the past 90 days and whose accounts are still enabled.
4
Select the Fields tab.
5
In the Selected Fields list, select Is Locked and Number of Logons, and click Remove.
6
Select the Parameters tab.
7
Click +Create.
10
Set the operator to Equals and the value to No.
11
2
Click Edit.
4
5
Repeat for IsDisabled and IsLocked.
8
Click OK to close the Edit Report dialog box.
9
Click OK to close the Edit Report Definition dialog box, and finish editing the report.
1
If necessary, in the My Reports container, select the Domain Users to be Disabled report.
2
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
3
In the Users not logged on in the last (days) parameter, change the number of days to 90.
4
To make these the default parameter values, click Save parameters as default, and click OK in the confirmation dialog box.
5
Click Run report.

Your report appears, listing all users who are not in compliance. You can now make any changes you need prior to the sending the compliance report to your stakeholders.

Schedule the Discovery

In this scenario, the Active Directory® collection previously configured collects the necessary data. We will edit it to run on a scheduled basis, so that the scheduled reports have up-to-date data. You can also run it manually before you run the report you modified that identifies any compliance issues.

1
On the Manage Discoveries page of the Configuration Manager, select the AD - [Domain Name] discovery you created, and click Edit.
If you did not create an Active Directory® discovery that collects accounts, follow the steps in Create a Discovery to Define the Data Collection , but stop on the Schedule page.
2
3
Click Monthly, and select the last Friday of the month.
4
Click +Add.
5
Click OK if you edited an existing discovery.
Click Finish if you created a new discovery.

Schedule Report Delivery to Stakeholders

Once the data has been collected, the reports can be generated. Using the Schedule tab of the Report Manager, you can create a schedule that will automatically deliver the desired reports to your specified recipients.

To do this, you must:

1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
If you did not rename the report when you modified an existing report (see Modify an Existing Report), the report will have a (1) after its name so you can differentiate them.
2
Click +New Schedule.
3
Name the schedule Compliance Reports.
4
Click Monthly, and select day 1 of the month.
2
Click Configure mail server, and enter the server name and port number.
6
2
Select Domain Users without Recent Logons, and click OK.
3
In the Parameters pane, in the Description text box, type [Domain Name] Users not logged in for 90 days to identify the parameter values you will use.
4
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
5
In the Users not logged on in the last (days) parameter, change the number of days to 90.
6
Click Save.

Your report will now run automatically, reporting on the data from your scheduled discovery.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating