Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

Enterprise Reporter 3.2.2 - Configuration Manager User Guide

Table of Contents

Product Overview

Key Features of Enterprise Reporter Components of Enterprise Reporter 3.2.2

The Configuration Manager

An Overview of the Configuration Manager Clusters Shared Data Locations Nodes Discoveries Role of the Server

The Report Manager The Database Wizard and Database Content Wizard The Encryption Key Manager Knowledge Portal

Enterprise Reporter Architecture Summarizing the Workflow

Understanding Discoveries

Defining the Data Collection (Discoveries) Multi-Factor Authentication Discovery Credential Limitations Best Practices for Creating Discoveries

Creating Discoveries

Step 1. Create the Discovery Step 2. Choose what to include in your discovery (Scopes)

Scopes: An Overview How Scopes Affect Tombstoning Using the Browser to Include and Exclude Scopes Including Objects in Your Scope Importing Computers to Your Scopes Refining Your Scope with Exclusions Filtering in the Browser Using Queries to Define Your Scopes Using Subnets to Define Your Scopes Using Subnet Credentials

Step 2a. Choose scopes for your discoveries

Choosing your Active Directory Scopes

AD Discovery: Include scopes AD Discovery: Optionally refine your scope list with exclusions AD Discovery: Optionally select one or more domain controllers AD Discovery: Decide what to collect from any domain in the discovery

Choosing your Computer Scopes

Computer Discovery: Include scopes Computer Discovery: Optionally refine your scope list with exclusions Computer Discovery: Decide what to collect from any computer in the discovery

Choosing Your Exchange Scopes

Exchange Discovery: Include Scopes Exchange Discovery: Optionally refine your scope list with exclusions Exchange Discovery: Decide what to collect from any server in the discovery

Choosing Your File Storage Analysis Scopes

File Storage Analysis Discovery: Include scopes File Storage Analysis Discovery: Optionally refine your scope list with exclusions File Storage Analysis Discovery: Decide what to collect from any server in the discovery File Storage Analysis Discovery: Configure NAS Host Devices

Choosing Your Microsoft SQL Scopes

MS SQL Discovery: Include scopes MS SQL Discovery: Optionally refine your scope list with exclusions (Scope Exclusions and Global Exclusions)

Choosing Your NTFS Scopes

NTFS Discovery: Best Practices NTFS Discovery: Include scopes NTFS Discovery: Optionally refine your scope list with exclusions NTFS Discovery: Select your global scopes NTFS Discovery: Decide what to collect from any computer in the discovery NTFS Discovery: Configure NAS Host Devices NTFS Discovery: Configure your file collection

Choosing Your Registry Scopes

Registry Discovery: Include scopes Registry Discovery: Optionally refine your scope list with exclusions Registry Discovery: Select your global scopes Registry Discovery: Decide what to collect from any computer

Step 2b: Choose scopes for your Office 365 discoveries

Choosing Your Azure Active Directory Scopes

Azure AD Discovery: Configuring Enterprise Reporter Applications for Azure Azure AD Discovery: Decide what to collect from the tenant in the discovery

Choosing Your Azure Resource Scopes

Azure Resource Discovery: Configuring Enterprise Reporter Applications for Azure Azure Resource Discovery: Include Scopes Azure Resource Discovery: Optionally refine your scope list with exclusions Azure Resource Discovery: Decide what to collect from the subscriptions in the discovery

Choosing Your Exchange Online Scopes

Exchange Online Discovery: Configuring Enterprise Reporter Applications for Azure Exchange Online Discovery: Decide what to collect from the tenant in the discovery

Choosing Your Microsoft Teams Scopes

Microsoft Teams Discovery: Configuring Enterprise Reporter Applications for Azure Microsoft Teams Discovery: Include Scopes Microsoft Teams Discovery: Decide what to collect from the subscriptions in the discovery

Choosing Your OneDrive Scopes

OneDrive Discovery: Configuring Enterprise Reporter Applications for Azure OneDrive Discovery: Include Scopes OneDrive Discovery: Optionally refine your scope list with exclusions OneDrive Discovery: Decide what to collect from the drives in the discovery

Step 3. Schedule your Discovery

Run your discovery once Run your discovery on a daily interval Run your discovery on specified days of the week Run your discovery on a specified day of the month Run Your Schedule Yearly Enabling and Disabling Discovery Schedules

Step 4: Review the summary

Managing Discoveries

How is a Discovery Processed?

Types of Tasks Manually Running a Discovery

Viewing your Discoveries

Navigating the Manage Discoveries Pane Viewing the History of a Discovery What Does the Discovery Status Indicate? Viewing the Tasks for a Finished Discovery Viewing the Tasks for a Processing Discovery What Does the Task Status Indicate? Why is My View Empty? Viewing Errors and Error Suppressions Suppressing Discovery Errors Viewing Statistics Viewing a Cluster's Queue

Working with Discoveries and Tasks

Duplicating a Discovery Modifying a Discovery Canceling a Task or Discovery Deleting a Discovery

Configuring the Configuration Manager

Starting the Configuration Manager Finding Answers and Getting Help An Overview of Enterprise Reporter Communications and Credentials Required

Node Credential and Alternate Credential Details for On-Premises Discoveries Detailed Permissions for Enterprise Reporter Discoveries Permissions for Enterprise Reporter Discoveries on NAS Devices Permissions for Enterprise Reporter Tenant Applications Logged In User Details

Logged In User Details

Server Service Credential Details

Setting Up Your First Collection Computers

Configuring Clusters and Nodes for Effective Data Collection Things to Consider Before Creating a Cluster Creating Your First Cluster and Node

Modifying your Deployment

When Do You Add a Cluster? Modifying a Cluster Deleting a Cluster Disabling a Cluster What To Do if a Cluster is Disabled Enabling a Cluster Managing Nodes

Modifying Node Credentials Modifying the Location of a Node's Temporary Files Changing a Node to a Different Cluster Removing a Node Why Disable a Node? Stopping a Node Enabling a Node Starting a Node

Improving the Performance of Your Discoveries

Adding a Node Improving the Performance of a Node

What does the status of a node or cluster indicate? Using the Credential Manager

Changing Passwords Using the Credential Manager Changing Account Names Using the Credential Manager

Changing the Credentials used by the Enterprise Reporter Server Configuring Global Settings

System | Configuration Tips for Customizing the Configuration Manager Views

Global Discovery Settings

Configuring Change History Managing the Collection of Additional Attributes Configuring IT Security Search Managing the Logon Configuration Configuring a NAS Host Device Configuring Server Error Notification Using the Tenant Application Manager Configuring Email Notifications

Troubleshooting Issues with Enterprise Reporter

Problems Opening the Consoles Troubleshooting Connectivity Issues

Restoring a Connection to the Enterprise Reporter Server Restoring a Connection to the Enterprise Reporter Database

Troubleshooting Connection Timeouts Troubleshooting Credential Change Failures Auditing Enterprise Reporter Activity Resolving Configuration Manager Issues

Node Deployment Issues Dealing with Unassociated Nodes Dealing with Faulted Nodes Problems Deleting a Node Changing the Node Logging Level Changing the Size of the Node Log Files

Scope Enumeration Issues Data Collection Issues

Computer Discovery Errors

Troubleshooting Features in Enterprise Reporter

Exporting Logs from the Configuration Manager Viewing Information About Your Enterprise Reporter Configuration Viewing Errors and Statistics for Tasks

Moving the Enterprise Reporter Database Disaster Recovery

Back Up of Enterprise Reporter How to Deploy Enterprise Reporter to Another Computer After a Disaster Checking the Enterprise Reporter Configuration After a Recovery

Appendix: PowerShell cmdlets

What is Microsoft Windows PowerShell? What are cmdlets? Registering Enterprise Reporter cmdlets Adding the snap-ins automatically to new sessions Enterprise Reporter cmdlets Enabling Enterprise Reporter cmdlets Loading the Enterprise Reporter cmdlets Using cmdlets to manage clusters and nodes

Creating a cluster Creating a node Disabling a node Enabling a node Finding a node by name Piping cmdlets Finding a cluster by name Disabling a cluster Enabling a cluster

Using cmdlets to manage jobs (discoveries)

Getting job information Creating a job Running a job Scheduling a job Deleting a job

Using cmdlets to run reports

Connecting to the server Getting report information Exporting a report definition Generating a report with data

Appendix: Encryption Key Manager

Starting the Encryption Key Manager Generating a Key File Importing a Key File Exporting a Key File Resetting Credentials

Appendix: Log Viewer

Starting the Enterprise Reporter Log Viewer Finding and Opening Log Files Viewing and Searching Log File Entries Filtering Log File Entries

AD Discovery: Optionally refine your scope list with exclusions

AD Discovery: Optionally refine your scope list with exclusions

Active Directory® excluded objects are resolved after included objects. For example, if you include an object that exists below an excluded object in the AD structure, it will not be collected, as the exclusion will take precedence. For more information, see Using the Browser to Include and Exclude Scopes .

To explicitly exclude objects from your selected scope

1

Add.

2

Expand the treeview to locate the object you want to exclude.

You can press Ctrl to select multiple objects.

3

Click Exclude.

AD Discovery: Optionally select one or more domain controllers

In order to enumerate your domain, Enterprise Reporter looks to domain controllers. Depending on the domain controllers chosen, the time it takes to perform the collection may vary. You can either allow Enterprise Reporter to choose the first available domain controller returned by Active Directory®, or you can select one or more that will optimize collection time. In this case, select one or more domain controllers that are located physically close to the cluster you assigned to the discovery, or one or more that you know are fast computers.

To set the domain controllers used to enumerate a domain

1

Add your scopes.

For more information, see AD Discovery: Include scopes or AD Discovery: Optionally refine your scope list with exclusions .

2

In the scopes list for the included domain you want to configure, click "..."

3

To use the first available domain controller returned by Active Directory®, select Automatic selection.

To assign one or more specific domain controllers, choose Select available domain controllers, and then select the domain controllers from the list, or choose Select Available Domain Controllers from current Sub-Net and then select the domain controllers from the list.

4

AD Discovery: Decide what to collect from any domain in the discovery

When you run an Active Directory® discovery, it is resolved to a list of domains. You can collect a variety of information from these domains. The basic domain information, including a list of all OUs in the domain, is always collected.

The following table outlines the additional information that can be collected. Collecting additional information impacts discovery performance. Options with a high performance cost will slow discovery performance more than options with a medium or low performance cost.

Table 8. Active Directory Discovery: Optionally collect information for the following objects

Performance Cost

•

Token groups count

Collect the count of items in the TokenGroups attribute to monitor access token sizes and to assist with group cleanup and consolidation projects.

•

Query all domain controllers for last logon

The Active Directory® LastLogonTimestamp attribute is always collected for users and computers and can be used to determine if a user or computer account has recently logged onto the domain. To determine the actual time of the most recent logon for a user or computer account, enable this option to query all domain controllers for the LastLogon attribute. The LastLogon attribute is subsequently used to calculate the total number of times each domain user has successfully logged on (Number of Logons field).

There are two known cases where the Number of Logons total may be inaccurate.

•

Since the LastLogon attribute is not replicated, domain controllers that are retired, and are therefore not collected, may have contained logons for users that would be missing from the count.

•

The attribute can track up to 65535 logons. After this limit has been reached, it becomes an inaccurate indicator of user activity on this domain controller.

•

In addition, you may choose to collect remote desktop information for the accounts collected.

•

You may also choose to collect thumbnail photographs of domain users.

Groups and members

When this option is selected, groups and members are collected from the target domain.

•

Include members from foreign domains

When this option is selected, all members of the group are collected, even if those members are from other domains or other forests.

•

Collect nested groups and members from foreign domains

If Include members from foreign members is enabled, you can select this option to collect all nested groups and their members from foreign domains.

Domain Controllers

In addition to collecting Active Directory® objects, you may also choose to collect Active Directory® object permissions.

Deleted Objects

Service Accounts

Active Roles Virtual Attributes and Active Roles Server

When this option is selected, Active Roles virtual attributes are collected from all targets managed by the Active Roles Server.

NOTE: Collecting Active Roles attributes for users, groups, computers, and organizational units can significantly increase the collection time. Some attributes that are known to increase collection time are:

•

edsaDialinAccessPermissions

•

edsaDialinApplyStaticRoutes

•

edsaDialinApplyStaticIP

•

edsaDialinCallbackNumber

•

edsaDialinCallbackOptions

•

edsaDialinCallerID

•

edsaDialinStaticIP

•

edsaDialinStaticRoutes

•

edsaDialinVerifyCallerID

If Active Roles Virtual Attributes is enabled, you must specify the Active Roles Server that manages the target domains. Optionally, you may supply credentials to be used for contacting the Active Roles Server during collection. If these credentials are left empty, the node credentials or alternate credentials specified in on the Name page of the discovery in Step 1. Create the Discovery will be used.

The following options further refine how collection tasks are handled.When collecting additional attributes, especially ones with a high performance cost, consider enabling these performance options to help improve collection performance.

Table 9. Active Directory Discovery: Additonal Performance Options

Performance Options

•

Do not collect object counts

When this option is cleared, the discovery collects the total number of users, groups, contacts, computers, and organizational units. To collect summary counts of these objects and to be able to display them, reports such as Domain Summary, require this option to be cleared.

•

Create multiple tasks for each domain

A collection task is always created for each domain in an Active Directory® discovery. Selecting this option will create individual tasks for domains, users, groups, computers, domain controllers, permissions, and deleted objects. This allows tasks to be load balanced using multiple nodes.

Choosing your Computer Scopes

Computer scopes determine what information will be collected when you run the discovery. There are several steps you should take to properly design your discovery.

•

Computer Discovery: Include scopes

•

Computer Discovery: Optionally refine your scope list with exclusions

•

Computer Discovery: Decide what to collect from any computer in the discovery

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center