Chat now with support
Chat with Support

Enterprise Reporter 3.5 - Configuration Manager User Guide

Product Overview Configuring the Configuration Manager
Starting the Configuration Manager Finding answers and getting help Overview of Enterprise Reporter Communications and Credentials Required Using the Credential Manager Setting Up Your First Collection Computers (Nodes) Modifying Your Deployment Configuring Global Settings Customizing the Configuration Manager View
Understanding Discoveries Creating Discoveries
Step 1. Create the Discovery (Name) Step 2. Choose what to include in your discovery (Scopes) Step 2a. Choose scopes for your on-premises discoveries
Choosing your Active Directory Scopes Choosing your Computer Scopes Choosing Your Exchange Scopes Choosing Your File Storage Analysis Scopes Choosing Your Microsoft SQL Scopes Choosing Your NTFS Scopes Choosing Your Registry Scopes
Step 2b: Choose scopes for your cloud discoveries Step 3. Schedule your Discovery Step 4: Review the summary
Managing Discoveries Troubleshooting Issues with Enterprise Reporter Appendix: PowerShell cmdlets Appendix: Encryption Key Manager Appendix: Log Viewer

AD Discovery: Decide what to collect from any domain in the discovery

When you run an Active Directory discovery, it is resolved to a list of domains. You can collect a variety of information from these domains. The basic domain information, including a list of all OUs in the domain, is always collected.

The following table outlines the additional information that can be collected. Collecting additional information impacts discovery performance. Options with a high performance cost will slow discovery performance more than options with a medium or low performance cost.

Users

 

Medium

Collect the count of items in the TokenGroups attribute to monitor access token sizes and to assist with group cleanup and consolidation projects.

High

The Active Directory® LastLogonTimestamp attribute is always collected for users and computers and can be used to determine if a user or computer account has recently logged onto the domain. To determine the actual time of the most recent logon for a user or computer account, enable this option to query all domain controllers for the LastLogon attribute. The LastLogon attribute is subsequently used to calculate the total number of times each domain user has successfully logged on (Number of Logons field).

There are two known cases where the Number of Logons total may be inaccurate.

High

 

Medium

 

Medium

Groups and members

When this option is selected, groups and members are collected from the target domain.

High

When this option is selected, all members of the group are collected, even if those members are from other domains or other forests.

 

Medium

 

If Include members from foreign members is enabled, you can select this option to collect all nested groups and their members from foreign domains.

 

High

Computers

 

Medium

Domain Controllers

 

Low

Permissions

In addition to collecting Active Directory® objects, you may also choose to collect Active Directory® object permissions.

High

Contacts

 

Low

Trusts

 

Low

Sites

 

Low

Deleted Objects

 

Medium

Service Accounts

 

Low

Active Roles Virtual Attributes and Active Roles Server

When this option is selected, Active Roles virtual attributes are collected from all targets managed by the Active Roles Server.

If Active Roles Virtual Attributes is enabled, you must specify the Active Roles Server that manages the target domains. Optionally, you may supply credentials to be used for contacting the Active Roles Server during collection. If these credentials are left empty, the node credentials or alternate credentials specified in on the Name page of the discovery in Step 1. Create the Discovery (Name) will be used.

High

The following options further refine how collection tasks are handled.When collecting additional attributes, especially ones with a high performance cost, consider enabling these performance options to help improve collection performance.

 

Performance Options

 

When this option is cleared, the discovery collects the total number of users, groups, contacts, computers, and organizational units. To collect summary counts of these objects and display them, reports such as Domain Summary, require this option to be cleared.

A collection task is always created for each domain in an Active Directory® discovery. Selecting this option will create individual tasks for domains, users, groups, computers, domain controllers, permissions, and deleted objects. This allows tasks to be load balanced using multiple nodes.

Choosing your Computer Scopes

Computer scopes determine what information will be collected when you run the discovery. There are several steps you should take to properly design your discovery.

See also:

Computer Discovery: Include scopes

You can specifically add domains, OUs, containers or computers. Domains, OUs and containers can contain many computers, which can significantly increase the time it takes to run the discovery.

For full information on using the browser to add scopes, see Step 2b: Choose scopes for your cloud discoveries . You can create scopes using a dynamic query, which is resolved when the discovery is run. This gives you the flexibility to describe the computers you want to target. For more information, see Using Queries to Define Your Scopes .

To explicitly include objects in your Computer scope

1
Click Add.
3
Click Include to add to your selected scopes list.
4
Click OK

Computer Discovery: Optionally refine your scope list with exclusions

Exclusions refine the inclusions you have defined. You can do this optional step in conjunction with inclusions. For full details, see Refining Your Scope with Exclusions .

1
Click Add.
4
Click Exclude.
5
Select the file and click Open to start the import.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating