Chat now with support
Chat with Support

Enterprise Reporter 3.2.2 - Quick Start Guide

Introducing Quest® Enterprise Reporter Key Features of Enterprise Reporter Enterprise Reporter Components For information on installation, see Installing Enterprise Reporter . System Requirements An Overview of Enterprise Reporter Communications and Credentials Required Installing Enterprise Reporter Step-By-Step Walkthroughs

Manage Compliance

If you are required to regularly show compliance with corporate or regulatory security requirements, Enterprise Reporter can be of great assistance by automatically gathering information and reporting on it.

Scenario

At the beginning of each month, you must deliver a report that shows that users who have been inactive for three months have their accounts disabled, in line with your corporate security policy. You are going to use two reports to do this: one report for yourself, in order to identify accounts that are not compliant, and one report that is sent to the stakeholders showing compliance. You will automate the delivery of the monthly report, to ensure it is always on time. You will need to take the following steps:

1
Modify an Existing Report
2
Schedule the Discovery
3
Schedule Report Delivery to Stakeholders

Modify an Existing Report

You need to modify an existing report to only show accounts that have been inactive for 90 days and are not disabled. You should manually run an appropriate Active Directory® discovery right before you run the report to ensure you are getting up to date data. This will allow you to address any issues before your compliance report is sent out. To do this, you must perform the following steps:

1
Copy the report from the Library to My Reports, which is the only container in which you can edit reports.
2
Edit the report to remove unnecessary fields from the report, and to create a hidden parameter to filter disabled accounts.
3
Modify the report layout to remove unnecessary fields.
4
Run the report to identify issues.
To copy the report so you can edit it
1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
To edit the report name, fields, and parameters
1
In the My Report container, select the Domain Users without Recent Logons report, and click Edit Report.
2
Change the report name to Domain Users to be Disabled.
3
Change the report description to Shows users in the selected domains who have not logged on in the past 90 days and whose accounts are still enabled.
4
Select the Fields tab.
5
In the Selected Fields list, select Is Locked and Number of Logons, and click Remove.
A warning dialog box appears, indicating that the report layout needs to be updated. Click Yes.
You could skip this step, however your report will be more usable if it contains only the required information.
6
Select the Parameters tab.
7
Click +Create.
8
Set the Usage to Hidden.
9
Set the associated field to IsDisabled.
10
Set the operator to Equals and the value to No.
11
Click OK.
Leave the dialog box open so you can modify the layout.
To modify the report layout
1
In the Edit Report dialog box, click the Layout tab.
It may take a few seconds for the layout to generate.
2
Click Edit.
3
To change the report title, double-click in the text box containing the current title, and replace the text with Domain Users to be Disabled.
4
In the detailHeader row of the report layout, right-click Number of Logons, and select Delete.
5
Repeat for IsDisabled and IsLocked.
6
In the detailBand row of the report layout, remove all fields except Account Name and Last Logon (Domain User).
7
Check your report layout to ensure it is accurate:
8
Click OK to close the Edit Report dialog box.
9
Click OK to close the Edit Report Definition dialog box, and finish editing the report.
To run the report and save the parameter values for future report runs
1
If necessary, in the My Reports container, select the Domain Users to be Disabled report.
2
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
3
In the Users not logged on in the last (days) parameter, change the number of days to 90.
4
To make these the default parameter values, click Save parameters as default, and click OK in the confirmation dialog box.
5
Click Run report.

Your report appears, listing all users who are not in compliance. You can now make any changes you need prior to the sending the compliance report to your stakeholders.

Schedule the Discovery

In this scenario, the Active Directory® collection previously configured collects the necessary data. We will edit it to run on a scheduled basis, so that the scheduled reports have up-to-date data. You can also run it manually before you run the report you modified that identifies any compliance issues.

To edit a discovery and create a schedule
1
On the Manage Discoveries page of the Configuration Manager, select the AD - [Domain Name] discovery you created, and click Edit.
- OR -
If you did not create an Active Directory® discovery that collects accounts, follow the steps in Create a Discovery to Define the Data Collection , but stop on the Schedule page.
2
If necessary, click the Schedule tab.
3
Click Monthly, and select the last Friday of the month.
4
Click +Add.
5
Click OK if you edited an existing discovery.
- OR -
Click Finish if you created a new discovery.

Schedule Report Delivery to Stakeholders

Once the data has been collected, the reports can be generated. Using the Schedule tab of the Report Manager, you can create a schedule that will automatically deliver the desired reports to your specified recipients.

To do this, you must:

1
Copy the Domain Users without Recent Logons report to My Reports, the only container from which you can schedule a report.
2
Create a report schedule.
3
Configure your SMTP server.
4
Schedule the report, and provide parameter values.
To copy the report so you can schedule it
1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
If you did not rename the report when you modified an existing report (see Modify an Existing Report), the report will have a (1) after its name so you can differentiate them.
To create a report schedule
1
In the Report Manager, click the Schedule tab.
2
Click +New Schedule.
3
Name the schedule Compliance Reports.
4
Click Monthly, and select day 1 of the month.
5
Launch the Credential Manager, and add an account that has read access to the database.
6
In the Delivery section, choose a network share where the reports will be delivered.
Ensure the credentials provided in the previous step have write access to this share.
Leave the dialog box open to configure email delivery.
To configure email delivery
1
In the Delivery section of the Create or Edit Schedule dialog box, enable the Send Email option.
2
Click Configure mail server, and enter the server name and port number.
3
Launch the Credential Manager, and select the account used to access the mail server.
If your SMTP server is configured to accept anonymous connections, you do not need to provide an account.
You can test your connection to ensure the mail server is properly configured.
4
In the From field, type the email address of the sender.
5
In the To field, type the email addresses of the recipients, separated by a comma or semicolon.
6
Click OK.
The schedule card is created.
To schedule a report
1
On the Compliance Reports schedule card, click +Schedule Report.
2
Select Domain Users without Recent Logons, and click OK.
3
In the Parameters pane, in the Description text box, type [Domain Name] Users not logged in for 90 days to identify the parameter values you will use.
4
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
5
In the Users not logged on in the last (days) parameter, change the number of days to 90.
6
Click Save.

Your report will now run automatically, reporting on the data from your scheduled discovery.

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating