立即与支持人员聊天
与支持团队交流

Enterprise Reporter 3.5.1 - Quick Start Guide

Introducing Quest® Enterprise Reporter Key Features of Enterprise Reporter Enterprise Reporter Components System Requirements Overview of Enterprise Reporter communications and required credentials Installing Enterprise Reporter Step-By-Step Walkthroughs

Manage Compliance

If you are required to regularly show compliance with corporate or regulatory security requirements, Enterprise Reporter can be of great assistance by automatically gathering information and reporting on it.

Scenario

At the beginning of each month, you must deliver a report that shows that users who have been inactive for three months have their accounts disabled, in line with your corporate security policy. You are going to use two reports to do this: one report for yourself, in order to identify accounts that are not compliant, and one report that is sent to the stakeholders showing compliance. You will automate the delivery of the monthly report to ensure it is always on time. You must take the following steps:

1
Modifying an Existing Report
2
Scheduling the Report
3
Scheduling Report Delivery to Recipients

Modifying an Existing Report

You need to modify an existing report to only show accounts that have been inactive for 90 days and are not disabled. You should manually run an appropriate Active Directory discovery right before you run the report to ensure you are getting up to date data. This will allow you to address any issues before your compliance report is sent out. To do this, you must perform the following steps:

1
Copy the report from the Library to My Reports, which is the only container in which you can edit reports.
2
Edit the report to remove unnecessary fields from the report, and to create a hidden parameter to filter disabled accounts.
3
Modify the report layout to remove unnecessary fields.
4
Run the report to identify issues.
To copy the report so you can edit it
1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
To edit the report name, fields, and parameters
1
In the My Report container, select the Domain Users without Recent Logons report, and click Edit Report.
2
Change the report name to Domain Users to be Disabled.
3
Change the report description to Shows users in the selected domains who have not logged on in the past 90 days and whose accounts are still enabled.
4
Select the Fields tab.
5
In the Selected Fields list, select Is Locked and Number of Logons, and click Remove.
A warning dialog box appears, indicating that the report layout needs to be updated. Click Yes.
You could skip this step, however your report will be more usable if it contains only the required information.
6
Select the Parameters tab.
7
Click +Add.
8
Set This parameter is: to Hidden.
9
Set Select the field to associate with this parameter: to IsDisabled.
10
Set the operator to Equals and the value to No.
11
Click OK.
Leave the dialog box open so you can modify the layout.
To modify the report layout
1
In the Edit Report dialog box, click the Layout tab.
2
Click Edit.
3
In the detailHeader row of the report layout, right-click Number of Logons, and select Delete then Cell.
4
Repeat for IsDisabled and IsLocked.
5
Repeat for all fields in the detailBand row of the report layout except Account Name and Last Logon (Domain User).
6
Click the Preview tab below the report to ensure the new layout it is accurate:
7
Click OK to close the Edit Report dialog box.
8
Click OK to close the Edit Report Definition dialog box, and finish editing the report.
To run the report and save the parameter values for future report runs
1
If necessary, in the My Reports container, select the Domain Users to be Disabled report.
2
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
3
In the Users not logged on in the last (days) parameter, change the number of days to 90.
4
To make these the default parameter values, click Save parameters as default, and click OK in the confirmation dialog box.
5
Click Run report.

Your report appears, listing all users who are not in compliance. You can now make any changes you need prior to the sending the compliance report to your stakeholders.

Scheduling the Discovery

In this scenario, the Active Directory collection previously configured collects the necessary data. We will edit it to run on a scheduled basis so that the scheduled reports have up-to-date data. You can also run it manually before you run the report you modified that identifies any compliance issues.

To edit a discovery and create a schedule
1
On the Manage Discoveries page of the Configuration Manager, select the AD - [Domain Name] discovery you created, and click Edit.
- OR -
If you did not create an Active Directory discovery that collects accounts, follow the steps in Create Discoveries to Define the Data Collection , but stop on the Schedule page.
2
If necessary, click the Schedule tab.
3
Click Monthly, and select the last Friday of the month.
4
Click +Add.
5
Click OK if you edited an existing discovery.
- OR -
Click Finish if you created a new discovery.

Scheduling Report Delivery to Recipients

Once the data has been collected, the reports can be generated. Using the Schedule tab of the Report Manager, you can create a schedule that automatically delivers the desired reports to your specified recipients.

To do this, you must:

1
Copy the Domain Users without Recent Logons report to My Reports, the only container from which you can schedule a report.
2
Create a report schedule.
3
Configure your email server.
4
Schedule the report, and provide parameter values.
To copy the report so you can schedule it
1
On the Report tab of the Report Manager, expand Report Library | Active Directory.
2
Locate the Domain Users without Recent Logons report, and drag it into the My Reports container.
If you did not rename the report when you modified an existing report (see Modifying an Existing Report), the report will have a (1) after its name so you can differentiate them.
To create a report schedule
1
In the Report Manager, click the Schedule tab.
2
Click +New Schedule.
3
Name the schedule Compliance Reports.
4
Click Monthly, and select day 1 of the month.
5
Launch the Credential Manager, and add an account that has read access to the database.
6
In the Delivery section, choose a network share where the reports will be delivered.
Ensure the credentials provided in the previous step have write access to this share.
Leave the dialog box open to configure email delivery.
To configure email delivery
1
In the Delivery section of the Create or Edit Schedule dialog box, enable the Send Email option.
2
Click Configure mail server.
3
There are two ways to configure email delivery: SMTP or Exchange Online.
•
If your administrator has configured a default email SMTP server, the fields are filled in.
•
If your administrator has configured email to use Exchange Online, the fields are filled in.
For information about configuring a default server, see “Configuring a Default Email Server” in the Report Manager User Guide.
NOTE: To use Exchange Online, you must register an application for Enterprise Reporter with Azure Active Directory, using certificate-based authentication. For more information, see “Registering an Enterprise Reporter Application for Exchange Online Email Delivery” in the Configuration Manager User Guide.
4
Launch the Credential Manager, and select the account used to access the mail server.
If your SMTP email server is configured to accept anonymous connections, you do not need to provide an account.
You can test your connection to ensure the mail server is properly configured.
5
In the From field, type the email address of the sender.
6
In the To field, type the email addresses of the recipients, separated by a comma or semicolon.
7
Click OK.
The schedule card is created.
To schedule a report
1
On the Compliance Reports schedule card, click +Add a report to this schedule.
2
Select Domain Users without Recent Logons, and click OK.
3
Click the Modify Report Parameters icon for the Domain Users without Recent Logons report.
4
In the Report Parameters pane, complete the Parameter Set Name: by typing [Domain Name] Users not logged in for 90 days to identify the parameter values you will use.
5
In the Include the following domains parameter, type the domain name, and click Add.
You can also click Search, locate and add the domain, and click OK.
6
In the Users not logged on in the last (days) parameter, change the number of days to 90.
7
Click Save.

Your report will now run automatically, reporting on the data from your scheduled discovery.

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级