Chat now with support
Chat with Support

Metalogix ControlPoint 8.2 - Administration Guide

Preface Configuring the Environment in Which ControlPoint Will Run The ControlPoint Configuration Site Managing Your Farm List Managing Your ControlPoint License Configuring Web Applications and Content Databases for ControlPoint Configuring ControlPoint Services Using Discovery to Collect Information for the ControlPoint Database Cache Using Sensitive Content Manager Services Managing ControlPoint Configuration and Permissions Modifying ControlPoint Configuration Settings
Changing Default Settings for Actions and Analyses
Supress "Item is inherited - no processing done" Message(SkipNotDoneMsg) Maximum Line Items in Real-time (REPCAP) "Use Cached Data" Default Value (CACHEDREP) Abort Report Processing on Error (ABORTREPORTONERROR) Display "Include users with AD group membership" Parameter (SHOWADGROUPS) Copy/Move Default Temporary Location (TEMPLOCATION) Time to Retain Page Data in Cache (CACHEREPORT4) Time to Retain Temporary UI Objects in Cache (UICACHEDURATION) Number of Reports to Keep in Memory After Drill-Down (RVSESSIONSKEPT) Exclude Web Application(s) from Statistics List (DASHBOARDWAPEXCLUDE) Number of List Items to Display in Selection Grid (DISPLAYSINGLELISTITEMS) Use Activity Min. Date as Start Date (UseActivityDbDate) Show unique permissions only" Default Value (SHOWUNIQUEPERMONLY) Duplicate Files Report Limit (DuplicateFilesReportLimit) Users to Exclude from Reports (EXCLUDEDUSERS) Eliminate Claims Prefix from Username in Reports (UseCleanedLoginNameInReports) Maximum Number of Orphaned Users to Delete Per Scheduled Batch (OrphanDeleteBatchSize) CSV Delimiter Character (CSVDELIMETER) Largest Active Directory Group to Expand in Reports (MAXMEMBERS) Maximum Number of Users to Act On (MAXUSERSFORACTION) Hide the "Set User Direct Permissions" Action in Permissions Management (PREVENTUSERPERMS) Prevent Set Site Collection Quotas (PreventSetSCQuota) Show Nested Active Directory Groups (PROCESSADHIERARCHY) Hide Interactive Analysis Link (RESTRICTSL) Use Minimum Activity Date as Start Date (USEACTIVITYDBDATES)
Changing Default Settings to Improve Application Performance Audit Log Configuration Settings Changing Settings for Anomalous Activity Detection Restricting Functionality for Members of the Business Administrators Group Changing Default Settings for ControlPoint User Groups Changing Settings to Improve Discovery Performance Changing Settings to Accommodate Special Environmental Factors Changing Default Settings for Navigation Changing Trace Switch Logging Levels Changing Default Settings for Compliance Managing Site Provisioning Settings Specifying Global Settings for ControlPoint Policies Setting Preferences for the ControlPoint Scheduler Miscellaneous and Custom Configuration Settings Special-Purpose Configuration Settings
Archiving SharePoint Audit Log Data Troubleshooting
ControlPoint Log Files Troubleshooting Configuration Errors Troubleshooting the ControlPoint Application Interface Troubleshooting Discovery Troubleshooting SharePoint Users and Permissions Troubleshooting Site Provisioning Troubleshooting ControlPoint Operations

Configuring Web Applications and Content Databases for ControlPoint

ControlPoint Application Administrators must ensure that the ControlPoint Service Account has Full Control access rights to the Web application(s) if:

·a new Web application is added to a farm

·a new content database has been added to a Web application, or

·the permissions for the ControlPoint Service Account have been changed in or deleted from the Web application's policy.

If an account other than the ControlPoint Service Account is used as the Application Pool account, the following text will display beside the Web application icon in the left navigation pane:  "(WebApp is not configured for ControlPoint.)"  

WAP Note Configured for CP

If a content database has been added and access rights have not been granted, site collections beneath the text "Inaccessible" will display.

You can grant access rights to Web applications and content databases from the server on which ControlPoint is installed.

To grant access to additional Web application(s) or Content Database(s):

1.Log into the server where ControlPoint is installed as the ControlPoint installation account.

NOTE:  As a sysadmin, the ControlPoint installation account has the permissions required to grant access rights.

2.Launch the ControlPoint Configuration Wizard.

After the ControlPoint Components check has completed, click [Continue].

The Configuration Wizard Welcome dialog displays.

3.Click Configure Web App.

Configuration Wizard CONFIGURE WEB APP

Configure Web APP Complete

4.

Configuring ControlPoint Services

If you are installing ControlPoint for SharePoint 2010 or later, at the conclusion of ControlPoint configuration process, you have the option to configure the following Windows service(s):

·The ControlPoint Discovery Service is an alternative to the (default) ControlPoint Full Discovery timer job, which runs from SharePoint Central Administration.  The ControlPoint Discovery Service runs as a Windows Service, and is especially suited to very large SharePoint environments as it can significantly reduce Discovery run time.

AND/OR

·If Sensitive Content Manager is installed in your environment, ControlPoint Sensitive Content Manager (SCM) Services can be used instead of the default ControlPoint Schedule Job Review timer job, which runs from SharePoint Central Administration:

§as a means of checking for:

Content Analysis (CA) jobs ready to be uploaded from ControlPoint to Sensitive Content Manager for scanning.

AND

§Scan results ready to be downloaded from Sensitive Content Manager to ControlPoint for further action.

The use of SCM Services offers the following advantages:

·Unlike the ControlPoint Scheduled Job Review job, which checks for Sensitive Content Manager upload and results jobs on a fixed schedule (by default, every ten minutes), SCM Services carry out these checks continuously.

AND

·Because they support multi-threading, SCM Services are especially suited to very large content analysis jobs.

NOTE:  If you want to configure services at a later time, you can do so by launching the Configuration Wizard from the server on which ControlPoint is installed (using the same login account that was used to install the ControlPoint application).  After the Wizard has finished checking installed components, select Configure Services.

Configure Services from Wizard

To configure ControlPoint Services:

1On the Configure Services dialog, select the service(s) you want to configure.

IMPORTANT:  The Service Account must meet all of the requirements of the ControlPoint Service Account, as well as permission to Run as a Service.

2Select the service(s) you want to configure.

3Click [Continue].

4Click [Start Deployment].

The installer deploys the selected Windows service(s).

Installer Services Deployed

5When the services have been successfully deployed, click [Finish].

Additional Setup Requirement for the ControlPoint Discovery Service

Before you can use the ControlPoint Discovery Service for the first time, you must also perform the following configuration tasks on the General tab of the Discovery Setup application (located, by default, in the folder C:\Program Files\Metalogix\ControlPoint\ControlPointFeatures\Services\Discovery):

·For Configure Discovery to run under, select SharePoint Local, and

·Add the SQL Server Connection String for xcAdmin Database.

NOTE:  You can copy the Connection String from the file CPConfiguration.exe.config, located, by default, in the folder C:\Program Files\Metalogix\ControlPoint\ControlPointFeatures. Use the portion of the string that starts with the words Data Source and ends with Integrated Security = <value>.

CP Discovery Connection String

Using Discovery to Collect Information for the ControlPoint Database Cache

Discovery is a farm-specific background task that collects information and stores it in the ControlPoint Services (xcAdmin) database cache for the following purposes:

·for use in ControlPoint data analysis and reporting

·to populate SharePoint permissions for members of the ControlPoint Business Administrators group

·to identify ControlPoint users who meet the criteria for "Admins" for scheduled analysis distribution, and

·to populate and update statistics lists used to create dashboards.

NOTE:  Discovery can be a resource-intensive process, especially in a large SharePoint farm.  If you regularly experience performance issues when the Discovery task is in progress, contact Quest Technical Support for help in fine-tuning the process to run more efficiently in your environment.  

 

Nightly Full Discovery

Full Discovery—which encompasses an entire farm—is normally triggered by a SharePoint timer job or the ControlPoint Discovery Service to run nightly, after all SharePoint data usage jobs have completed. In addition to collecting data for analysis and reporting, Full Discovery records the SharePoint permissions of site administrators (that is, members of the ControlPoint Business Administrators group).  See Making ControlPoint Available to Business Users (Site Administrators) in the ControlPoint User Guide.

If you want to ensure that your ControlPoint analyses have the most recent cached data—you can run the Full Discovery process manually.  

When ControlPoint is first installed, the nightly Discovery job is disabled, by default, as are operations and parameters that rely on cached data collected by Discovery.

Disabled Discovery Options

The ControlPoint Application Administrators can, however, enable both the nightly Discovery job and the operations and parameters that rely on it or configure the ControlPoint Discovery Service.  

NOTE:  If the ControlPoint Application Administrator configures the ControlPoint Discovery Service, these Discovery-dependent operations and parameters will be enabled automatically.

Related Documents