Chat now with support
Chat with Support

Enterprise Reporter 3.2.2 - Configuration Manager User Guide

Product Overview Understanding Discoveries Creating Discoveries
Step 1. Create the Discovery Step 2. Choose what to include in your discovery (Scopes) Step 2a. Choose scopes for your discoveries
Choosing your Active Directory Scopes Choosing your Computer Scopes Choosing Your Exchange Scopes Choosing Your File Storage Analysis Scopes Choosing Your Microsoft SQL Scopes Choosing Your NTFS Scopes Choosing Your Registry Scopes
Step 2b: Choose scopes for your Office 365 discoveries Step 3. Schedule your Discovery Step 4: Review the summary
Managing Discoveries Configuring the Configuration Manager
Starting the Configuration Manager Finding Answers and Getting Help An Overview of Enterprise Reporter Communications and Credentials Required Logged In User Details Setting Up Your First Collection Computers Modifying your Deployment Improving the Performance of Your Discoveries What does the status of a node or cluster indicate? Using the Credential Manager Changing the Credentials used by the Enterprise Reporter Server Configuring Global Settings Global Discovery Settings
Troubleshooting Issues with Enterprise Reporter Appendix: PowerShell cmdlets Appendix: Encryption Key Manager Appendix: Log Viewer

Global Discovery Settings

There are settings which affect all discoveries of a given type:

•
Configuring Change History
•
Managing the Collection of Additional Attributes
•
Configuring IT Security Search
•
Configuring a NAS Host Device
•
Configuring Server Error Notification
•
Using the Tenant Application Manager
•
Configuring Email Notifications

Configuring Change History

For all discovery types except Azure® Active Directory, Azure® Resource, Exchange, Exchange Online, Microsoft Teams, and OneDrive®, change history allows you to report on changes over time to the objects you collect. For example, if you choose to collect the change history for the NTFS discovery type, and a new file is added to a previously collected folder, you can see this reflected in a change history report.

You configure change history at a global level for each discovery. All discoveries of that type will collect this data. When you create a discovery, the Name page indicates whether change history is enabled for the discovery type.

In addition to the discoveries you can create and run in Enterprise Reporter, there is additional information that is common to more than one type of discovery, such as user accounts, groups or group members. To collect change history information for this data, enable change history for the Common discovery type.

To enable or disable change history for a discovery type
1
Click System | Configuration.
2
Click Configure global change history settings.
A button shows the current status of the change history configuration for each discovery type.
3
Click the Enabled or Disabled button to toggle the setting.
4
Click Close.

Managing the Collection of Additional Attributes

Managing the Collection of Additional Attributes

Enterprise Reporter collects a pre-defined set of attributes for each object in a discovery. The attributes collected vary depending on the type of discovery, the object, and the version of Enterprise Reporter you are using. You can add and remove attributes collected by Active Directory® and computer discoveries. You can extend:

•
Active Directory® discovery attributes for users, groups, computers, organizational units, and service account.
•
Computer discoveries with attributes from WMI classes added.
•
Active Roles attributes for users, groups, computers, contacts, and organizational units.
The following data types are supported:
•
Boolean
•
Case Ignored String
•
Case Sensitive String
•
DN String
•
Integer
•
Large Integer
•
Numeric String
•
Print Case String
•
Time
•
Unicode
 
* 
NOTE: Collecting Active Roles attributes for users, groups, computers, and organizational units can significantly increase the collection time. Some attributes that are known to increase collection time are:
•
edsaDialinAccessPermissions
•
edsaDialinApplyStaticRoutes
•
edsaDialinApplyStaticIP
•
edsaDialinCallbackNumber
•
edsaDialinCallbackOptions
•
edsaDialinCallerID
•
edsaDialinStaticIP
•
edsaDialinStaticRoutes
•
edsaDialinVerifyCallerID

Attributes you extended in previous versions of Enterprise Reporter may become default attributes in newer versions. In this case, the extended attribute is preserved to ensure that your reports continue to work, but only the default attribute is available for new reports.

When you add or remove attributes for a discovery type, Enterprise Reporter has to process them. This can take some time, during which any running discoveries of the type you extended may fail. You should perform the extension only after ensuring that no discoveries of that type are running or scheduled to run. Additionally, any attributes that are no longer being collected should be removed from any reports in which they were included.

* 
TIP: In order to minimize collection time, it is recommended that you only collect attributes that you know are required by your reporting users. You cannot remove attributes that are collected by default.
* 
NOTE: Reporting users will need to restart their consoles in order to have the most up to date list of available attributes in their reports. Consider informing users that data is no longer being collected, so they can remove the associated fields from their reports.
To add or remove Active Directory® attributes
1
Ensure that no Active Directory® discoveries are running or scheduled to run while your changes are processed.
2
Click System | Configuration.
3
Click Manage attributes collected by Enterprise Reporter.
4
Click Yes in the warning dialog box.
5
In the Active Directory® section, click Extend.
6
If you want to use a different forest to enumerate the schema, click the Browse button and select an appropriate domain.
If your logged in user does not have access to a domain in the forest whose schema you want to enumerate, right-click in the dialog box and choose Connect as user.
7
Click Get Schema.
The Extend Enterprise Reporter Attributes dialog box is displayed. Default attributes have grey check marks. Extended attributes have blue check marks for easy identification.
8
Select the type of attributes to collect from the Type menu.
9
Select to add or deselect to remove attributes.
To view a list of your currently selected attributes, select Only show selected attributes.
10
Click Apply.
11
Click Close.
To extend computer attributes (using WMI classes)
1
Ensure that no computer discoveries are running or scheduled to run while your changes are processed.
2
Click System | Configuration.
3
Click Manage attributes collected by Enterprise Reporter.
4
Click Yes in the warning dialog box.
5
In the Computer section, click Extend.
6
Click Add.
If you want to use a different computer to enumerate the WMI classes, click the ellipsis and select the computer.
The Extend Enterprise Reporter Attributes dialog box is displayed. Any classes that have been extended are shown.
7
Expand the WMI class treeview as necessary to locate the desired classes.
8
Select the classes and click the Add button.
You can only add entire classes, not individual properties.
To remove classes, select them from the list and click the Remove button.
9
Click Add.
The Extend Enterprise Reporter Attributes dialog box reappears, with the newly added classes in bold letters.
If you add more than the recommended number of classes, a warning appears. Ensure that you require the selected extended WMI classes, as they will increase your collection time.
10
Verify the list and then click Apply.
To add or remove Active Roles attributes
1
Ensure that no Active Directory® discoveries are running or scheduled to run while your changes are processed.
2
Click System | Configuration.
3
Click Manage attributes collected by Enterprise Reporter.
4
Click Yes in the warning dialog box.
5
In the Active Roles section, click Extend.
6
If you want to use a different forest to enumerate the schema, click the ellipsis, select an appropriate domain, and click OK to continue.
If your logged in user does not have access to a domain in the forest whose schema you want to enumerate, right-click in the dialog box and choose Connect as user. Use the Credential Manager to select or create a user with the required credentials and click OK.
7
To select the Active Roles server, click the ellipsis, select a computer, and click OK.
8
To set the credentials to access the Active Roles server, click the ellipsis, use the Credential Manager to select or create a user with the required credentials, and click OK.
9
Click Get Schema.
The Extend Enterprise Reporter Attributes dialog box is displayed. Default attributes have grey check marks. Extended attributes have blue check marks for easy identification.
10
Select the type of attributes to collect from the Type menu.
11
Select to add or deselect to remove attributes.
To view a list of your currently selected attributes, select Only show selected attributes.
12
Click Apply.
13
Click Close.
To remove computer attributes (non-default)
1
Ensure that no computer discoveries are running or scheduled to run while your changes are processed.
2
Click System | Configuration.
3
Click Manage attributes collected by Enterprise Reporter.
4
Click Yes in the warning dialog box.
5
In the Computer section, click Extend.
The Extend Enterprise Reporter Attributes dialog box is displayed. Any classes that have been extended are shown.
6
Select the desired classes and click Remove.
7
Click Apply.

Configuring IT Security Search

You can globally configure Enterprise Reporter to send information collected about Active Directory and Computers, NTFS, Azure Active Directory, Azure Resources, and Microsoft Teams to the IT Security Search Repository after every discovery. To be able to push collected data to the repository, the database account must have db-owner rights to the Enterprise Reporter database. The first discovery transmission includes all of the information collected for IT Security Search (based on your configuration settings). Subsequent discovery transmissions include only information that has been updated, is new, or has been deleted. You can view the statuses of the 100 most recent data transfers sent to the IT Security Search Repository or send all of the information in the database if maintenance or support issues occur.

For Enterprise Reporter to access the IT Security Search Warehouse Rest API, you must provide the appropriate host name, port, and credentials. This information can be obtained from the IT Security Search administrator.

To configure IT Security Search
1
Click System | Configuration.
2
Click Manage configuration of IT Security Search.
3
Enter the host name.
4
Enter the host port number.
- OR -
Select Use HTTPS to set the port number to 443.
Optionally, enter a custom host port number.
5
Click the ellipsis (...) to use the Credential Manager to enter and select the credentials required to access the host. For more information, see Using the Credential Manager .
6
Optionally, click Test Connection to verify access to the host.
* 
NOTE: If Enterprise Reporter encounters errors connecting to IT Security Search, the Configuration Manager logs will contain those errors. For more information, see Exporting Logs from the Configuration Manager .
7
Optionally, select the information to send to the IT Security Search Repository after every discovery.
8
If the connection test has been completed successfully, click OK to save the configuration settings.
To view the status of IT Security Search data transfers and re-send data if required
1
Click System | Configuration.
2
Click Manage configuration of IT Security Search.
3
Click View Status.
4
Optionally, click Send All to send all of the information in the database to the IT Security Search repository, review the confirmation, and click Yes to continue.
* 
NOTE: Normally, only information that has changed since the last discovery is sent to the IT Security Search Repository. Setting this option to send all available information when the next discovery is complete. You can wait for a scheduled discovery to finish or run a discovery manually.
5
Click OK.
Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating