Enterprise Security Reporter User Guide
Contents
1. Y Database Wizard Establish Connection Enter server parameters and authentication information then click Next to continue SAL Server Instance vM d WINZESVHR Browse Database Mame dbESR3 Browse Use Windows Authentication C Use SOL Server Authentication User Mame Password Back New Cancel UPDATED 2 May 2011 15 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 16 6 The default selection for authentication is Use Windows Authentication If you select Use SQL Server Authentication type the name of the SQL Server user account in the User Name box and the password in the Password box 7 Click Next The database definition dialog box displays the default sizes for the database mdf and transaction log Idf files Y Database Wizard Mie E Enter Database Settings Choose create database settings and then click Mext to continue File Sizes Security Groups Initial Database Size 50 Initial Log File Size 50 M Create default security groups as Local Group Mon DC Global Domain Local File Paths Override Default File Locations Data File Path Log File Path lt Back News Cancel File Sizes By default the database and log files are created at 50 MB each If you want to change the default type a value in the appropriate box The data and log files grow automatically starting from the initial value specif2. Typeface Conventions Bold Indicates a button menu selection tab dialog box title text to type selections from drop down lists or prompts on a dialog box ScriptLogic may be contacted about any questions problems or concerns you might have a ScriptLogic Corporation 6000 Broken Sound Parkway NW Boca Raton Florida 33487 2742 561 886 2400 Sales and General Inquiries 561 886 2450 Technical Support 561 886 2499 Fax www scriptlogic com LA AT ScriptLogic can be found on the web at www scriptlogic com Our web site offers customers a variety of information E Download product updates patches and or evaluation products Locate product information and technical details E Find out about Product Pricing m Search the Knowledge Base for Technical Notes containing an extensive collection of technical articles troubleshooting tips and white papers m Search Frequently Asked Questions for the answers to the most common non technical issues m Participate in Discussion Forums to discuss problems or ideas with other users and ScriptLogic representatives UPDATED 2 MAY 2011 Il ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE IV Contents INTRODUCTION Se dacs cecstedoaap i veccuas s M 1 INSTALLING ENTERPRISE SECURITY REPORTER cccccccssccccsscccsccccscscccccccccccccccccccccccsccccscccccccccccccccscccccccceccceees 3 IMIENIMU
3. A A 22 DISCOVERY ENGINE FAILS AFTER THE UPGRADE ococcnnccnoconccnnconoconocnnconaconocnnronoconocnaronoronocnnronrnnocnaronconccnarenoss 22 Removine the Discovery EDS ME uuo ie rene R annee ennui rud d 22 DISCOVERY ENGINE SERVICE MARKED FOR DELETION eese e Ree emen rennen reni enses ee ree esee ene 22 SETTING THE FREQUENCY OF DISCOVERY STATUS UPDATES ecce RII hene hehehe senten eere seen reete 22 UNLOCKING THE DISCOVERY CONSOLE unid Di 23 UNINSTALLING THE DISCOVERY ENGINE Sad e Dude baba oot eoo used tuto eode li atta 23 DBESR3S DATABASE S CHEMA 24 COMPUTER DISCOVERY OBJECTS scott eret tot Eos cedes 24 DOMAIN DISCOVERY OBIE CES si ee a ee de et ias 25 Pe COIN OE A EA e EE E PEE dead latino Lee Nine 26 SHAREPOINT DISCOVERY OBIECTS 5 de et et a ee 27 SOLEDIICOVERT OB IEC IS ES a dac deco ad 28 UPDATED 2 May 2011 IV ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 1 Introduction Enterprise Security Reporter is an agent less fast comprehensive discovery and reporting solution for analyzing file security group memberships and other security settings on Windows file servers Active Directory servers SharePoint servers and SOL Servers Enterprise Security Reporter retrieves and stores data on NTFS permissions security policies user accounts group memberships Active Directory SharePoint and SOL Server security ESR3 Discovery Console 3 File Tools Help gala a BRAS p m Share
4. 4cme com Policies 64 01 786C 01 BF 11D2 945F 00C04fB984F9 CAMINDOWSISYSVOLisysvol4cme com Policies 31 B2F 340 01 6D 11D2 945F 00CO4FB984F9 MACHINE CAVINDOWSISYSVOLisysvol4cme com Policies 31 B2F 340 01 6D 1 1D2 945F 00CO4FB984F9 USER CAMINDOWSISYSVOLisysvol4cme com Policies 31 B2F 340 01 6D 11D2 945F 00CO4FB984F9 MACHINE Microsoft CWINDOWS SYSVOL sysvolAcme com Policies 31 B2F 340 01 6D 11D2 945F 00CO4FB984F9 MACHINE Microsoft Vvindows NT CAWINDOWS SYSVOL sysvolAcme com Policies 31 B2F 340 01 6D 1 1D2 945F 00CO4FB984F9 MACHINE Microsoft Windows NTYSecEdit Completed Elapsed Time 00 00 03 UPDATED 2 MAY 2011 2 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 3 Installing Enterprise Security Reporter Enterprise Security Explorer is flexible in that you can create a simple system by installing the entire package on one server to discover and report on the servers on your network or you can create a more complex system to manage the discovery process Take some time to map out how you want your system to operate to maximize efficiency Reporting Consoles y Database Server 7 Discovery Server 2 Discovery Server 1 Discovery Console Server 1 Server 4 Server 2 Server 5 Server 3 UPDATED 2 MAY 2011 3 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 4 Discovery Console Enterprise Security Reporter s Discovery Console can be installed on Windows XP 2003 2008 2008 R2 Vista
5. 7 and requires SOL Express 2005 2008 or SQL Server 2000 2005 2008 2008 R2 Discovery Engines Discovery Engines can be installed on Windows XP 2003 2008 2008 R2 Vista 7 Reporting Enterprise Security Reporter s Reporting Console can be installed on Windows XP 2003 2008 2008 R2 Vista 7 Client Support Enterprise Security Reporter can discover information on Windows NT XP 2000 2003 2008 2008 R2 Vista 7 operating systems NT domains and Windows 2000 2003 2008 Active Directory Supported Versions of SharePoint for Enterprise Security Reporter m Microsoft Office SharePoint Server 2007 m Windows SharePoint Services 3 0 Microsoft SharePoint Server 2010 m SharePoint Foundation 2010 Hardwar RENE on which you install the Discovery Console and Discovery Engine must meet the following minimum criteria Intel Pentium 4 or higher processor 1 5 GHz or higher 512 MB RAM 50 MB free hard disk space for installation 2 GB free hard disk space for the discovery and reporting databases The computers on which you install the Reporting Console must meet the following minimum criteria Intel amp PentiumQ 4 or higher processor m 1 5 GHz or higher m 512 MB RAM m 50 MB free hard disk space for installation UPDATED 2 MAY 2011 4 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 5 What s New To see what is new in Enterprise Security Reporter 3 please see article Q13442 Enterprise Security Reporter 3 x Version Histo
6. Active Directory amp Server Management pr VERSION 3 ScriptLogic Enterprise Security Reporter VERSION 3 Installation Guide Kaa Occ A QUEST SOFTWARE COMPANY ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE Il Copyright 2011 by ScriptLogic Corporation All rights reserved This publication is protected by copyright and all rights are reserved by ScriptLogic Corporation It may not in whole or part be copied photocopied reproduced translated or reduced to any electronic medium or machine readable form without prior consent in writing from ScriptLogic Corporation This publication supports Enterprise Security Reporter 3 x It is possible that it may contain technical or typographical errors ScriptLogic Corporation provides this publication as is without warranty of any kind either expressed or implied ScriptLogic Corporation 6000 Broken Sound Parkway NW Boca Raton Florida 33487 2742 1 561 886 2400 www scriptlogic com Trademark Acknowledgements Enterprise Security Reporter is a registered trademark of ScriptLogic Corporation in the United States and or other countries Microsoft Windows Windows NT Windows Server and Active Directory are registered trademarks of Microsoft Corporation Intel and Pentium are registered trademarks of Intel Corporation or its subsidiaries in the United States and other countries UPDATED 2 MAY 2011 II ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE IIl
7. ECURITY REPORTER 3 INSTALLATION GUIDE 9 6 Click Install As the install progresses a message box displays When the installation is complete the InstallShield Wizard Completed box appears InstallShield Wizard Completed The InstallShield Wizard has successfully installed Enterprise Security Reporter Discovery Console Click Finish to exit the wizard i inel 7 Click Finish You can install the Reporting Console on any computer in your network 1 Double click the ESR3Setup_ReportingConsole msi file The Welcome box appears Welcome to the InstallShield Wizard for Enterprise Security Reporter Reporting Console The Install5hield R Wizard will install Enterprise Security Reporter Reporting Console an your computer To continue click Mex WARMING This program is protected by copyright law and international treaties E Cancel UPDATED 2 MAY 2011 9 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 10 2 Click Next The License Agreement box appears License Agreement Please read the Following license agreement carefully END USER LICENSE AGREEMENT READ THE TERMS OF THIS LICENSE AGREEMENT THE AGREEMENT CAREFULLY BEFORE DOWNLOADING OR INSTALLING THE SOFTWARE TOGETHER WITH WHERE APPLICABLE ASSOCIATED DATABASES DATA SERVICES AND CERTAIN ADDITIONAL SOFTWARE FUNCTIONALITY COLLECTIVELY THE SOFTWARE I accept the terms in the license agreement Print Installshi
8. File View Options Help re EMG Reports EL All Domain Account Reports m Compliance EE Computer Reports E Computer Accounts 2 Computer IP Addresses E Computer Policies 2 Event Logs e 0 Files EE Folders i fa Folder Size Report Sorted By Path W Folder Size Report Sorted By Sigs 4 Folders Created In Date Range ai Folders Created In Date Range Sorted By Path Folders Created In Last N Days Sorted By Date Created ai Folders Created In Last N Days Sorted By Path Biel ES Define Reports 7 3 Ja Folders Modified In Date Range Sorted By Date Created Y Define Categories Shows the size of all folders on a specific computer Parameters Select Computer s required computerscope tue false Report XML Results Quer GeO E SS Print I d OBR Q o ME 7 fa Backward Forward gr Discovery Logs User Settings Discovery dbESR3 on Folder Size Report 10 17 2007 4 55 23 PM Path Folder Size Bytes Selected Computers ACME gatest2k 2k32Acme com Discovery Date 10 16 2007 11 48 42 AM CAVINDOWSISYSVOLisysyvol CAMINDOWSISYSVOLisysvolAcme com CVNINDOVWSYS Y SVvOLYsysvol amp cme com DO NOT REMOVE MNtFrs Prelnstall Directory CAMINDOW SIS Y Sv OLYsysvol amp cme com Policies CAVWYINDOWSISYSVOLisysvolAcme comscripts CAMINDOWSISYSVOLisysvol4cme com Policies 31 B2F 340 01 6D 11D2 945F 00C04FR984F9 CAV INDOWSISYSVOLisysvolA
9. NCIRSEOUIREMENTS t Rd e HE a 4 UPGRADING ENTERPRISE SECURITY REPORTER cccccsccsccsscsscssccsccscesscsccsscscescescessessesscscescescessessesscescescescencs 5 ULTRA TATE TERT TII IRE EMI 5 DOCK DEO TOS tere ai US RO MDN too ne oen de eui ON 5 Danse X DODIdE eee eae ftare tutti tu ce tete CLIE oco de in eee TT 5 INSTALLING THE DISCOVERY CONSOLE cccccseccsscccssccsccesccescceusccescceusceusccesccescseusseusccessceusseusceescceesseusceesseueesens 5 INSTALLING THE REPORTING CONSOLE ccccsccseccssccusccuccescecccsccesceucceuccescesceucsessecsesssesceuscencsesseussenssesceuseensees 9 STARTING ENTERPRISE SECURITY REPORTER cccccccceccssccscccuccesccuscenccesceuscencsesceussenscesseuscencsesseuscenccusceuseensees 13 Applying a License File asciende n 13 Evaluating the Products te NEETA M LI 14 CREATING THE DISCOVERY AND REPORTING DATABASES ccccsccssccsccsccsccsscescescescesscsscsscescescessessesccsscuscescenss 14 INSTALEING THE DISCOVERY ENGINE e ie ie Le te 17 PORTS AND PROTOCOLS USED BY ENTERPRISE SECURITY REPORTER cccccssccssccsccsccusceeccscenccesceuscenscusceusss 18 Changing the Default TCP PORP ae o Ra ed uat riii 18 CONNECTING TO THE DISCOVERY DATABASE roce eoe otto nee Ee eo vache une is evi ve abore edo eve aed pa 19 CONFIGURING THE REPORTING CONSOLE FOR NON ADMINISTRATIVE USERS users eee eene 20 OPTIONAL REGISTRY SETTINGS italia 21 WHERE TOGONE Tia cabida di deca 21 TROUBLESHOOTING lt a A E AAA A
10. Point 8 SQL Computer Domain Type E Items cl Paths 4 Fie Fiters g Registy Keys Options ig PC 45678 ACME File Tools Help Workstation qe Discovery Parameters FN Local accounts M Local security policy M Event log configuration v Printers IV Services Shares dg qi t3 riis ale a VM4 WIN2KSYR ACME Primary Domain Controller A Discovery Servers SD Configure stop Install 4 Uninstall 2 Refresh Show Server Name altas Version Maxdobs Running Database M 5 1 f QATEST2K 2K3R2 Y Running dbESR3 on GATE ESR 3 Discovery Console 3 3 Add Connection server V VM4 WIN2KSVE amp Search Current Discovery Queue Select Job g Cancel Job JH move Job Group By G Set Current 3 Delete Job kel Export Logs QATEST2K 2K3R2 il gatest2k 2k3r2 acme com Computer amp Started DO 00 00 07 sqor AJaAO2SIQ lr Connection server QATEST2K 2K3R2 da Discovery server DATEST2K 2K3R2 Licenses 3 Remaining 2 UPDATED 2 MAY 2011 1 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 2 Enterprise Security Reporter also provides the administrator with tools to compare analyze query and report on the security and configuration of the network Enterprise Security Reporter includes numerous ready made and customizable reports with output in eight popular file formats ESR3 Reporting Console
11. RE ScriptLogic Corporation Enterprise Security Reporter v3 Config Value Name Port Value Type REG DWORD decimal Value Enter the port number 8104 is the default After you change the registry key both the Discovery Console and the Discovery Engine service must be stopped and restarted UPDATED 2 May 2011 18 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE If you have more than one discovery server and database you need to connect to the one that you want to use 1 From the File menu choose Connect to database The Database box displays the current discovery server and database The default database created during the install process is dbESR3 mdf Windows Authentication Username C SOL Authentication Password Server vM AAN INE ESA Database dbE SRS 2 Choose the type of authentication to use If you choose SQL Authentication enter the user name and password 3 Choose the discovery server and database to use and then click OK UPDATED 2 MAY 2011 19 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 20 Since the reporting console often is used by people who are not involved in the discovery process we have made it very easy to distribute the reporting console to end users and have it pull the configuration data from a master server All you need to do is configure one server with the reporting console and then configure each user s reporting console to pull its configuration da
12. another install can be completed C Program Files ScriptLogic Corporation V ESR3 Discovery Engine If you see a message stating that the service has been marked for deletion and are unable to install the discovery engine on the target server reboot the target server and then reinstall the discovery engine If you are running discoveries against a remote database you might want to adjust the rate at which the Discovery Engine records the status of discovery jobs in the discovery database The default rate is 5 seconds The valid range is 1 60 seconds UPDATED 2 MAY 2011 22 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 23 HKEY LOCAL MACHINENSOFTWARENScriptLogic Corporation Enterprise Security Reporter v3 Config Value Name DiscoveryStatusUpdateInterval Value Type REG DWORD decimal Default Value 5 I for any reason the licensing objects become corrupted the Discovery Console locks and you see a message box when you start the application To unlock the discovery console you need an unlock code Click Request unlock code to send an email to ScriptLogic When you receive the unlock code via email type the code in the Unlock code box and then click OK Type the following at the command line on the computer on which the discovery engine is installed C NWINDOWSMMicrosoft NETNFrameworkNv2 0 50727 Installutil exe u Cr Program Fil es S riptlogie Corporation ESRI Discovery Engine ESR3DiscoveryEngine exe On
13. ard M Gancel 7 Click Finish UPDATED 2 MAY 2011 12 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 13 Click Start point to Programs gt ScriptLogic Corporation gt Enterprise Security Reporter 3 and then select one of the following options Database Utilities gt Discovery Set up and manage the discovery database Database Wizard Database Utilities gt Reporting Set up and manage the reporting database Database Wizard Discovery Console Create and run jobs on selected computers to discover data for use in reports Reporting Console Create and run reports using discovered data in the reporting database Discovery Guide Open the user manual for the Discovery Console Reporting Guide Open the user manual for the Reporting Console Note You also can access the Database Wizards and Reporting Console from the Discovery Console Applying a License File The first time you start Enterprise Security Reporter you see the New Installation dialog box which allows you to apply a license file or evaluate the product without a license as well as contact ScriptLogic Corporation and visit our website for further information New Installation Enterprise Security Reporter tm Enterprise Security Reporter Em 3 Copyright C 2011 ScriptLogic Corporation http nan scripklaqic com THANK YOU for choosing Enterprise Security Reporterftm IF vnu have a license File enter the path to the File below and click A
14. ce the discovery engine has been successfully uninstalled the installation directory must be removed before another install can be completed C Program Files ScriptLogic Corporation ESR3 Discovery Engine UPDATED 2 MAY 2011 23 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 24 dbESR3 Database Schema Computer Discovery Objects Diagram rex commedo FK1 DiscoveryJobID DomainName ComputerName Comment IsHidden PlatformiD ServerType OSMajorVersion OSMinorVersion OSSPLevel OSProductType OSProductSuite wee em men ComputerlD ComputerlD ComputerlD ComputerlD ShareName PathlD ServiceName PrinterName Comment IsFolder DisplayName Attributes SharePath IsRootFolder CurrentState Comment ShareType Size StartupMode DataType ACLID DateCreated BinaryPathName DefaultPriarity DateLastAccessed LogonAccountID Description DateLastModified PasswordLastSet DriverName Attributes ServiceType Location ACLID Isinteractive Parameters HasExplicitAces Description PortName SameAsParent ACLID PrintProcessor SepFile Status ShareName ACLID ComputerlD VolumeName VolumePath ComputeriD LogName DisplayName FileName MaxSize CurrentSize OverwriteDays FileDateCreated FileDateModified FileDateLast ccessed TotalSpace FreeSpace SerialNumber FileSystem AccountiD PermType AceType AccessMask IsInherited AppliesTo FK2 ComputeriD FK1 OwnerAccountlD IsProtected ObjectType Checksu
15. eld Cancel 3 Select I accept the terms in the license agreement and then click Next The Customer Information page appears im Enterprise Security Reporter Customer Information Please enter your information User Name System Administrator Organization pe o Install this application For Anyone who uses this computer all users C Only for me System Administrator Installshield lt Back Cancel UPDATED 2 MAY 2011 10 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 11 4 Select who can use the application and then click Next The Destination Folder dialog box appears po Enterprise Security Reporter Reporting Console InstallShield Wizard Destination Folder Click Next to install to this Folder or click Change to install to a different Folder Imstall5fitela m Ifyou want to change the installation destination click Change and then select a new location 5 Click Next The Ready to Install the Program box appears Ready to Install the Program The wizard is ready to begin installation Irystall Shield UPDATED 2 MAY 2011 11 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 12 6 Click Install A bar displays the progress When the installation is complete the InstallShield Wizard Completed box appears The InstallShield Wizard has successfully installed Enterprise Security Reporter Reporting Console Click Finish to exit the wiz
16. ied here You can change the size of the data file at a later time M Create default security groups By default default security groups are created as local groups on non domain controllers only You can select to create default domain global or local groups To bypass the creation of default security groups clear the check box Override Default File Locations Select to create the database transaction log files in a location other than the default location Type the physical path in the appropriate boxes Express the path as a logical path and not as a UNC path 8 Click Next The Create New Database box displays the database name 9 Click Finish UPDATED 2 MAY 2011 16 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 17 1 Click Start point to Programs gt ScriptLogic Corporation gt Enterprise Security Reporter 3 and then choose Discovery Console The Discovery Console opens 2 Click FA The Install Discovery Service box opens 3 Inthe Target machine name box type the name of the computer where the Discovery Console is installed or select the computer from the list 4 In the Domain username box type the account name that can run the Discovery Engine or click to locate an account name 5 Inthe Password box type the password 6 Click OK The Discovery Engine Setup window shows the progress of the installation of the discovery engine and service Enterprise Security Reporter Discovery Engine Se
17. is number is very large the MaxGridMemorySize value limits the amount of data displayed TempFolder default value is C Documents and Settings userlD Local Settings Temp Designate the folder for generation of xml report file Type the full path to the folder See the Enterprise Security Reporter 3 Discovery Guide for information on using the Database Maintenance Utility and the Discovery Console See the Enterprise Security Reporter 3 Reporting Guide for information on using the Reporting Console UPDATED 2 MAY 2011 21 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 22 Troubleshooting ScriptLogic Corporation has a library of articles in its Knowledge Base which may provide an answer to a problem you are experiencing Before calling technical support check to see if your problem is documented here You might also browse the Discussion Forums to see if anyone else is experiencing the same issue http www scriptlogic com support If the discovery engine fails after the upgrade remove and then reinstall the discovery engine Removing the Discovery Engine Type the following at the command line on the computer on which the discovery engine is installed C WINDOWS Microsoft NET Framework v2 0 50727 gt Installutil exe u C Program Files ScriptLogic Corporation ESR3 Discovery Engine ESR3DiscoveryEngine exe Once the discovery engine has been successfully uninstalled the installation directory must be removed before
18. isting instance of SOL Server on a remote machine press the Text button to continue the installtion Download the Microsoft SQL Server 2005 Express Edition Download the Microsoft SQL Server 2008 Express Edition tale 2 uu E Cancel 3 Select I accept the terms in the license agreement and then click Next The Customer Information page appears ie Enterprise Security Reporter Customer Information Please enter your information User Mame System Administrator Organization ee K Install this application For Anyone who uses this computer all users C Only For me System Administrator Installshield lt Back Cancel UPDATED 2 MAY 2011 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 8 4 Select who can use the application and then click Next The Destination Folder dialog box appears po Enterprise Security Reporter Discovery Console InstallShield Wizard Destination Folder Click Next to install Ea this Folder or click Change to install to a different Folder Imstall5titela Ifyou want to change the installation destination click Change and then select a new location 5 Click Next The Ready to Install the Program box appears im Enterprise Security Reporter Discovery Console InstallShield Wizard Ready to Install the Program The wizard is ready to begin installation ImstallStitela UPDATED 2 MAY 2011 8 ENTERPRISE S
19. m UPDATED 2 MAY 2011 24 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE Domain Discovery Objects Diagram pe osoena tblDiscoveryConfig DiscoveryType DomainMame ComputerName ObjectPath ObjectTypeFlags FK1 DiscoveryConfiglD DiscoveryType LaunchDate StartDate EndDate Status LastStatusChange ServicedBy Priority LastMessage LastMessageChange CancelDiscovery IsCurrent tblDomainsSite SiteName Description Location tblDomainComputer PK DomancamautenD DomainlD 2 Damain GL ln NetBiosName ComputerName DistinguishedName ComputerTypeFlags IsHidden Description LastLogon NumLogons PasswordLastSet OSName OSVersion OSServicePack Location ManagedBy tblDomainCoantroller FK1 FK2 DomainlD Domainctulnp MetBiosName ComputerName SiteName isEnabled IsPDC IsGC ManagedBy UPDATED 2 MAY 2011 29 DiscoverylobID NetBiosName DamainName ManagedBy DomainlD DomainQUID AccountiD IsGroup DiscoverylablD tblDomainTrust DomainlD DomainiD MetBiosDomainMame Mame DnsDomainName DistinguishedName Direction ParentContainer TrustType Description IsTreeRact ManagedBy IsPrimary CanonicalName IsNativeMode 29 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 26 Account Objects Diagram SAMAccountDomain SAMAccountMame DisplayMame FullMame isSecurityEnabled Comment AccountLookuplD Disting
20. n pauses and a message displays asking the user to continue or not You can suppress this message by setting this value to 1 CacheRowLimit default value is 50 000 Determines the number of rows that a data set must contain in order to cause the report to be cached to disk Disk caching is slower and therefore should not be used unless the report is very large RenderMaxVirtualMemorySize default value is 1 536 000 000 or 1 5GB Sets the amount of memory that may be consumed by the report before rendering is automatically stopped Some reports can get beyond a size that can fit in memory even when using disk caching If the computer runs out of virtual memory it will cause unpredictable behavior therefore by default rendering stops once 1 5GB of memory is consumed If the report will not render in 1 5GB of memory then you can increase this value or modify the report design to remove graphical elements such as the ScriptLogic icon in the page footers MaxGridMemorySize default value is 512000000 or 500MB Sets the maximum amount of virtual memory that the results grid is allowed to consume Although the data grid may not be allowed to display all rows because it does not support a disk caching mechanism the full dataset is still available via the export option on that grid The full dataset can be exported to a CSV or XML file MaxGridRowCount default value is 1000 rows Sets the number of rows that the grid can display If th
21. ose Discovery Database Wizard The Welcome to the Database Wizard box appears EE Database Wizard Welcome to the Database Wizard This wizard will assist you with various database maintenance activites relating to your product installation Please refer to your users quide for a full explanation of usage Click Mext to continue ar Cancel to exit this wizard Back Next gt Cancel UPDATED 2 MAY 2011 14 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 15 2 Click Next to display the main menu When you choose an operation from the list a brief description displays Y Database Wizard Mme E Main Menu Choose a wizard operation and then click Nest to continue Description This will create a new database Choose Operations Create New Database Remove Database Increase Database Size A Shrink Database Size Hun SQL Script View Database Statistics Attach Database Detach Database CheckPoint and Truncate Log Change Security Made Set 54 Password Save Connection Information Perform Database Maintenance Reset Database Security Back New Cancel 3 Select Create New Database and then click Next The Establish Connection box appears 4 Inthe SQL Server Instance box type the name of the SQL Server or click to locate the server 5 Inthe Database Name box type the name of the auditing database to create To view existing database names click Browse
22. plicit r PK sQlservertoleMemberi F ip DE pc Salservertogint One Account Px _ sotsemerace FK1 SQLServerLoginID OwnerAccountiD FK1 SOlLServerACLID tbISQLServerDatabaseRole GrantorType GrantorlD GranteeType GranteelD PermissionState AccessMask IsInherited tblSQLServerDatabaselser SOLServerDatabaselD RoleType RoleName na sasererDatabaset FK2 SQLServerLoginlD UserType PK UserName CertificateName FK1 SOQLServerDatabaselD SchemaName OwnerName IsFixedRole Owner Default amp chema KeyMame IsGuestUser DefaultSchema tbiSQLServerDatabaseSchemaPerm tblSQLServerDatabaseRoleMember tblSQLServerDatabaseObject sOlserverDatabaseSchemaPermID SOlserverDatabaseRoleMemberiD px solserverbatabascObiectD SQLServerDatabaseSchemalD SQLServerDatabaseRolelD FK2 SQLServerDatabaselD GranteeType MemberType ObjectType GranteelD MemberName PermissionState AccessMask ObjectName SQLServerDatabaseUserlD SchemaName IsDirect Member FK1 SQLServerACLID UPDATED 2 MAY 2011 28
23. pply License File IF vou do not have a license File click Begin Evaluation to start Enterprise Security Reporter Emi in evaluation made License File EE Apply License File Begin Evaluation Cancel Enterprise Security Reporter requires a valid license file in order to function properly If you have a company license file or were provided with an evaluation or temporary license file you must enter the location and filename in the License File box The license file is approximately 1KB in size and has a lic file extension Your sales account executive or a licensing team specialist should have sent this file to you as an email attachment Click to locate the license file and then click Apply License File UPDATED 2 MAY 2011 15 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 14 Evaluating the Product If you are evaluating the software and would like to use the preset values for the number of licenses objects and evaluation days click Begin Evaluation You must create the discovery and reporting databases before you can perform any tasks using Enterprise Security Reporter 3 Create the discovery database first and then repeat the process for the reporting database The default discovery database is dbESR3 mdf and the default reporting database is dbESR3Report mdf 1 Click Start point to Programs gt ScriptLogic Corporation gt Enterprise Security Reporter 3 Database Utilities and then cho
24. right law and international treaties License Agreement Please read the Following license agreement carefully END USER LICENSE AGREEMENT READ THE TERMS OF THIS LICENSE AGREEMENT THE AGREEMENT CAREFULLY BEFORE DOWNLOADING OR INSTALLING THE SOFTWARE TOGETHER WITH WHERE APPLICABLE ASSOCIATED DATABASES DATA SERVICES AND CERTAIN ADDITIONAL SOF WARE FUNCTIONALITY COLLECTIVELY THE SOFTWARE I accept the terms in the license agreement Installshield Cancel UPDATED 2 MAY 2011 6 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE Note If SOL Server is not detected a message box displays prompting you to download and install Microsoft SOL Server 2005 Express Edition or Microsoft SOL Server 2008 Express Edition When the install is complete restart the Enterprise Security Reporter Server install process im Enterprise Security Reporter Discovery Console InstallShield Wizard SOL Server SQL Server is not installed InstallShield has detected that vou do not have any instances of SQL Server installed on your system Before continuing with this setup please download and install the Microsoft SQL Server Express Edition by clicking on one of the buttons below This will open your browser bo ScriptLogic s website where you can select the recommended edition of Microsoft SOL Server Express to download Once this step has been completed please restart the setup IF you plan to use an ex
25. ry which you can access at http www scriptlogic com support Products ESR Back Up Your Files As with all software installations it is recommended that you back up your files before installing the new software The simplest way to back up your files is to navigate to the directory on the server where Enterprise Security Reporter is installed Press CTRL A to select all files in this folder Press CTRL C to copy the files to the clipboard Create a new folder and press CTRL V to paste these files into this new backup folder Database Upgrade Enterprise Security Reporter 3 checks the version of your databases against the version of the software installed and automatically upgrades the databases if necessary If you have not yet done so please download the latest version of Enterprise Security Reporter at the following link http www scriptlogic com su 1 Double click the ESR3Setup_DiscoveryConsole msi file If you are upgrading double click the ESR3Setup_DiscoveryConsoleUpgrade msi file UPDATED 2 MAY 2011 5 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 6 The Welcome box appears iz Enterprise Security Reporter Discovery Console InstallShield Wizard Welcome to the InstallShield Wizard for Enterprise Security Reporter Discovery Console The Install5hield R Wizard will install Enterprise Security Reporter Discovery Console on your computer To continue click Mex WARMING This program is protected by copy
26. ta from that master server 1 Click Start point to Programs gt ScriptLogic Corporation gt Enterprise Security Reporter 3 and then select Reporting Console 2 From the Reporting Console main window click User Settings Alternatively select Settings from the Options menu The Report Console Settings box opens to General Settings 3 Click Database The Database Settings box appears On each computer where the Reporting Console resides you must set the discovery server and the discovery and reporting database You also can adjust the amount of time before the computer times out trying to access the databases 4 ESR3 Report Console Settings IOJ ES Application Settings Database Settings Windows Authentication Username C SQL Authentication Password Server vM AMIE SYR Database dbESR2 CCE Windows Authentication Username C SQL Authentication Password Server vM AMINZKSVHR Database dbESR3R eport Command o 4 Select the servers where the databases reside and select the databases 5 Click OK UPDATED 2 MAY 2011 20 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 21 There are a few settings you can add to the registry on a user s computer to configure the Report Console HKEY_CURRENT_USER SOFTWARE ScriptLogic Corporation Enterprise Security Reporter v3MeportExecutingSettings RenderWarningPageCount When a report reaches 10 000 pages report generatio
27. tup Server VWWM 2K3 DC1 MOSSFARM LOCAL Close Sever lg ml 3 MyM zZK3 DC1 MOSS verifying service installation GO we 2k3 Dc1 Moss Configuring discovery engine CU WWM 2k3 DC1 Configuring service account GO WM 2k3 DC1 MOS5 Starting the discovery engine CU WWM 2K3 DC1 MOSS Process complete 7 When you see Process complete click Close UPDATED 2 MAY 2011 17 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 18 The Discovery Engine Management Console and Reporting Console use TCP IP and Named Pipes protocols to communicate with the dbESR3 SQL Server database By default SQL Server uses port 1433 During discovery the Discovery Servers communicate via port 8104 with the computer where the Discovery Console is installed in order to update the status of the discovery as far as job progress completion and cancellation If the Discovery Engine service is not installed on the server s to be discovered then the Discovery Engine uses RPC communication to perform the discovery on remote servers RPC ports are well known and are usually 135 139 TCP or UDP Changing the Default TCP Port The default TCP port used to communicate between the Discovery Console and the Discovery Engine is 8104 If you need to change the TCP port adjust the registry key on the computer where the Discovery Console is installed and the computer on which the Discovery Engine is installed HKEY_LOCAL_MACHINE SOFTWA
28. uishedMame ManagedBy IsDomainMember UPDATED 2 MAY 2011 26 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 27 SharePoint Discovery Objects Diagram tblDiscoveryJob tblSPServer PK DiscovengobID FK1 DiscoveryJoblD ServerName a FK1 DiscoveryConfiglD DiscoveryType LaunchDate StartDate EndDate Status LastStatusChange ES ServicedBy Priority LastMessage LastMessageChange CancelDiscovery IsCurrent SPServerlD URL Title SPSDID SPSitelD PermsArelnherited i NodeType ParentSPSitelD tblDiscoveryConfig Container Px osent DiscoveryType DomainName ComputerName ObjectPath SPSDID SPSitelD PermsArelnherited MemberAccountiD Size IsSiteAdmin ParentModelD ObjectTypeFlags tbiSPPermissionLevel tbISPPermissionLevelDetail PK seso SPPermissionD PK SPPermissiontevelD SPPermissionLevelDetaillD FK1 SPServerlD SPSDID FK1 SPSitelD SPPermissionLevellD Checksum AccountiD Title AccessMask SPPermissionLevellD Description AccessMask Description IsHidden UPDATED 2 MAY 2011 27 ENTERPRISE SECURITY REPORTER 3 INSTALLATION GUIDE 28 SQL Discovery Objects Diagram FK1 SQLServerlD AccountiD ES i ServerName tblSOLServerACL LoginName InstanceName i i SQLServerACLID alie 501L5erverlD Version PK SOlServerACLID DefaultDatabase RoleName SQLServerlD IsPasswordExpirationEnforced Checksum IsPasswordPolicyEnfarced IsSystemObject tblSQLServerRoleMember IsIm
Download Pdf Manuals
Related Search