Home

User Manual - Vyapin Software Systems

1. Enter the name of a forest 24 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE R Enurnerate all Domains in a forest Specify a Forest Name The Forest Hame will be used to retrieve domains present in the forest Clear the Log on using curent user checkbox to specify alternate credentials for connecting to the forest Forest Mame pathfinder local Note The ONS name you specity here must be visible from this computer This computer must be able to resolve the specitted DNS name Domains in forest E Log ori using Curent User _ Show Domains gt gt Show Domains gt gt User Mame RR ee entire adminuser 4 5 Password TTTTTTTT Fj Store the above credentials in Microsoft windows Stored User Mame and Passwords applet OF Cancel Specify user name and the corresponding password to connect to the specified forest Store the above user credential in Microsoft Windows Stored User Names and Passwords applet ARKWE allows the user to enter different user credentials to connect to the forest Uncheck the checkbox Log on using current user if you like to connect to the forest using a different user context ARKWE will store the user credential to connect to forest in the Microsoft Windows Stored User Names and Passwords applet Credential Manager for security reasons The stored user profile is tied to the user context currently logged on user account in w
2. 10 10 10 31 Microsoft Office 15 0 4420 1017 C Program Files m Microsoft Corporation Microsoft Corporation 32 CHAPTER 2 Standard Reports 3 2 How to View Shares and Resources Information _ Standard Reports 4 Domains R Users and Groups a Shares and Resources gt Policies Folders J Files Click a Services Share Name Path User Name Security Maximum and Comment Qj Refresh Export F Filter FE Customize Scan Profiles Computers 5a E mail Find S E Enterprise SHARES AN 4a Shares 75 Folders Q Files a RD83 Generated on 30 Dec 2014 10 42 11 AM Status Success Fitter Not Applied Gl RESEARCHLAB i a Sa VOYAGER Share Name Path User Name Security TE Comment e w Domain Controllers ADMINS c windows l Admin Share Unlimited Remote Admin o eg RD c le Admin Share Unlimited Default share G Servers D D admin Share Unlimited Default share a P ai Folder D Folder BUILTIN Administrators Allow Full Control Unlimited EN TERS Everyone Allow Full Control Unlimited B R7 latest setup D latest setup BUILTIN Administrators Allow Full Control i Unlimited Latest Setup Share 3 RD72 Everyone Allow Full Control Unlimited Latest Setup Share fi RD73 Module D Module BUILTIN Administrators Allow Full Control Unlimited A RD81
3. Scan Profiles Computers Sy E mail Find ka S E Enterprise USERS AP ST General Status Q Logon Privileges 2 User Groups amp Group Members w RD83 Generated on 30 Dec 2014 10 15 16 AM Status Success Filter Not Applied 4a RESEARCHLAB i User Name Full Name Description Home Path Logon Script User Profile Path S 4m VOYAGER lt 7 ini Built in account for administerin e computer domain a Sc hitai Administrator g puter RD40 Guest Built in account for guest access to the computer domain S g m Servers krbtgt Key Distribution Center Service Account B RD4 adminuser1 adminuser 1 S RD43 adfssvcacc adfssvcacc Gi Workstations adminuser2 adminuser2 S R071 adminuser3 adminuser3 j R072 configdbadmin_ sp03 configdbadmin_s sp03 S RD73 i defconaccessacc_sp03 defconaccessacc_sp03 amp Ro81 rtsit _sp03 tsiteapppool_sp03 portsiteapppool_sp03 por RD84 spapppooll1 sp03 spapppool1_sp03 spapppool2 sp03 spapppool2_sp03 spapppool3_sp03 spapppool3_sp03 spsitecoladmi_sp03 spsitecoladm1_sp03 spsitecoladm2_sp03 spsitecoladm2_sp03 farmadmin_sp07 1 farmadmin_sp07 1 farmadmin_sp07 2 farmadmin_sp07 2 z searchdefacc_sp07 1 searchdefacc_sp07 1 op Add Domains cearchdefacc_sp07 2 searchdefacc_sp07 2 all Standard Reports Domains a Usersand Groups Users and a Usersand Groups ef General ml Shares and Resources Policies Logon ia Eve
4. 1 To edit a Scan Profile Users Groups click Edit button in the Scan Profiles Manager The Scan Profile Users Group wizard will appear on the screen which will allow you to edit the selected profile 2 During edit operation you can modify the Users Groups list Delete a Scan Profile Users Groups To delete a Scan Profile Users Groups select the profile you want to delete and then click Delete button The selected Scan Profile Users Groups will be deleted permanently Please note that reports associated with the Scan Profile Users Groups deleted may fail to run when generated Preview the List of Users and Groups in a Scan Profile Users Groups To preview the list of users and groups in a profile select a profile and then click Preview button eur Restricted sers Profile Name Sete lees Account Hame Account Type 40VENTURE Administrator User 40 VENTURE Hygiene ADVENTURE SM_79673cede898484 User The Preview window allows you to view what users and groups will be included in the profile 194 Chapter 7 Scan Profiles Manager 8 8 How to Apply Scan Profiles Users Groups You can apply Scan Profile Users Groups to permissions reports that involve generating permissions for specific users and groups on share folders This is especially useful if you want to generate permissions reports for certain users and groups frequently The following shows permissions reports that involves specific use
5. Control Click ag Depotency to view the following information Display Name Start up Service Type Account and Current State amp Services General RD40 sox Qj Refresh 3 Export P Filter Customize J Scan Profiles Computers yy E mail Find i S Enterprise SERVICES 7 General Control 6 Dependency i cI RD83 Generated on 29 Dec 2014 06 57 23 PM Status Success Fitter Not Applied Gl RESEARCHLAB im S wcities Display Name i Account v Current State rm a eal Cryptographic Services NT Authority NetworkService pee a RD40 DNS Client NT AUTHORITY NetworkService G T Servers KDC Proxy Server service KPS NT AUTHORITY WetworkService i if RD41 KtmRm for Distributed Transaction Coordinator NT AUTHORITY NetworkService of RDB Workstation NT AUTHORITY NetworkService g B Workstations Distributed Transaction Coordinator a NT AUTHORITY WetworkService R71 Network Access Protection Agent NT AUTHORITY NetworkService f RD72 Network Location Awareness INT AUTHORITY WetworkService P sni IPsec Policy Agent NT Authority NetworkService poe Lit in tte OOOO siedbinienaman ih bem E S poss Remote Procedure Call RPC Locator NT AUTHORITY WetworkService Remote Procedure Call RPC NT AUTHORITY NetworkService Software Protection NT AUTHORITY NetworkService Telephony NT AUTHORITY WNetwor
6. Microsoft Windows Securi RD40 Voyager local Standard Reports a Users and Groups wml Shares and Resources a Domains Policies g Services ck Ef Application a Security to view the following information Event Date Event Time Description Source Name Event End Computer Name User Name Event Type and Category Qj Refresh 9 Export P Filter AE Customize J Scan Profiles Computers 5a E mail amp J Enterprise EVENTS _ Application A Security MH System ip Saved Logs Status Canceled 5 0 RD83 Generated on 29 Dec 2014 07 14 59 PM g Gil RESEARCHLAB 11 43 33 AM File System Filter luafv 6 2 2012 07 2 The Active Directory Domain Services se Microsoft Windows FilterMa 6 RD40 Voyager local RD40 Voyager local Information 11 43 33 AM The DCOM Server Process Launcher ser RD40 Voyager local 11 43 33 AM The RPC Endpoint Mapper service enter 11 43 33 AM The Remote Procedure Call RPC servic RD40 Voyager local RD40 Voyager local 11 43 33 AM The Background Tasks Infrastructure Se RD40 Voyager local 11 43 33 AM The Local Session Manager service enter RD40 Voyager local 11 43 34 AM The Windows Event Log service entered 11 43 34 AM The Themes service
7. 6 7 How to Scan Specific Servers in a Domain You can have the System Info reports and summary information of a domain namely Summary Shares and Applications generated either for an entire domain or for selected servers in the domain using the Scan option for dialog NOTE This dialog appears if either it is the first time the report is run against the domain or when you refresh the report Se Scan option for VOYAGER 0 Scan Entire Domain Scan Selected Server s in Domain Enter Computer Name Add From Remove Select Scan Profile Select a Profile ARKWE defaults to scanning the entire domain with the provision to enumerate Domain Controllers Servers Workstations only To scan only selected servers you can either select the computers by using Scan Selected Server s in Domain option or by selecting Select a Scan Profile option By using the Scan Selected Server s in Domain option you can specify a computer list by manually typing in the computer name and adding it to the list or by selecting computers from the network using the Add From button as shown below 106 Chapter 5 Additional Features You may also apply a scan profile to the report to restrict the list of computers for which you want the report to be generated oo Scan option for PHOENIX O Scan Entire Domain 6 Scan Selected Server s in Domain Select Scan Profle A Scan Profile essenti
8. ADMINS c D Folder latest setup Module Path C Windows c D D Folder D Folder D atest setup D atest setup D Module D Module BUILTIN Administrators Everyone BUILTIN Administrators Everyone BUILTIN Administrators Everyone Security Admin Share Admin Share Admin Share Allow Allow Allow Allow Allow Allow Full Control Full Control Full Control Full Control Full Control Full Control Uses Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Unlimited Comment Remote Admin Default share Default share Latest Setup Share Latest Setup Share C Windows SYSVOL sysvol Voyager local SCRIPTS Everyone Allow Read C Windows SYSVOL sysvol Voyager local SCRIPTS BUILTIN Administrators Allow Full Control Unlimited NTFS Share C NTFS Test Folder NTFS Share VOYAGER adminuser3 Allow Full Control Unlimited NTFS Test Folder C NTFS Test Folder Everyone Allow Read Unlimited Share D Share Everyone Allow Full Control Unlimited D Share BUILTIN Administrators Allow Full Control Unlimited share22 D share22 BUILTIN Administrators Allow Full Control Unlimited D share22 Everyone Allow Full Control Unlimited D SPListX Target BUILTIN Administrators Allow Full Control Unlimited D SPListX Target Everyone Allow Full Control Unlimited NETLOGON SPListX Target 69 CHAPTER 3 Built in Reports
9. 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 160 Chapter 6 Power Export Step 2 Server Selection Step 2o0f6 Server Selection For each of the following reports select the list of servers for which you would like to generate the report tin Double click on a report or click Add Servers The report for each of the selected servers will be exported as mS a separate file i No Server Selected E List of Local and Global groups List of disabled user accounts List of locked out user accounts E Password settings of all user accounts Password never exp Members of Local Administrators group E Log on rights assigned for all accounts Log on locally etc E Privileges assigned for all accounts E Group membership with nested groups 1 Click Add Servers button to select the servers for which you wish to run the server reports selected in Step 1 This will display a window where you can select the servers you want to add Selecting a domain will add all the servers in that domain to the report 2 Click OK to apply the selected servers to the current report or click Apply to Reports to apply the servers to the rest of the selected server reports The selected servers will be added to the wizard as shown below 161 Chapter 6 Power Export K Power Export Built in Reports step 2 of6 Server Selection For each of the following reports select the
10. Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths trom a text file Select a folder in the list below and Click Edit Folder Options to modity the default properties for scanning each folder Report List of permissions for specific users and groups on folders UNC Path Scan Profile Shares Se m ao Folder Path Include sub fold Folder level Add From ROS ADMINE True all Hl Import HRDSOARKWE True all cis WRDSOWCS True All Remove WADSOVES True All WRDSO Mew True All Eil Do not display Folders that hawe the same permissions as the parent Sea Include group membership information Include SID E Validate For Errors etek Ce See 1 Select the desired folder s for which you wish to run the permissions report 2 You may also click Import button to import a list of UNC folder paths from a text file 3 Files that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want files with identical permissions as the parent folder reported then select Do not display files that have same permissions as the parent folder option This option will not report files with identical permissions as the parent folder 139 Chapter 6 Power Export 4 ARKWE defaults to scanning all the sub folders for a given folder If you want
11. RD40 Voyager local 01 48 36 PM User Device daims information Subject Microsoft Windows Securi RD40 Voyager local 01 48 36 PM An account was logged off Subject Sec Microsoft Windows Securi RD40 Voyager local 01 48 36 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 36 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 36 PM 01 48 36 PM The Windows Filtering Platform has per The Windows Filtering Platform has per Microsoft Windows Securi Microsoft Windows Securi RD40 Voyager local RD40 Voyager local 01 48 37 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 37 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 37 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 38 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 38 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 38 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 38 PM The Windows Filtering Platform has per
12. Reports only the user accounts both built in and custom that have been locked out and or otherwise Reports password settings of the users viz Password never expires User must change password at next logon User cannot change password Reports user and or group members for the given group s Reports user and or group accounts having the logon rights viz Log on locally Log on as a service Log on as a batch job Reports the assigned privileges for both user and group accounts Reports all the members of a group along with their sub group members 74 CHAPTER 3 Built in Reports 4 5 How to View Built in Reports for Domains Domains Reports Domain Reports are generated across for the entire domain Built in Reports a Permissions Shares and Resources 3 Users and Groups Click on JJ toolbar button under Built in Reports in button in the The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time Click Next to proceed to the next step Built in Reports List of trusted and trusting domains Step 1of3 Select Report This window shows the list of Builtan reports available for the selected Builtan report category Select any Report to proceed List of Windows Servers E List of Domain Controllers E List of Application Servers IIS Exchange Serv
13. gt List of permissions for folders gt List of permissions for specific users and groups on files gt List of permissions for files Schedule Permissions Built in Reports List of Permissions for Specific Users and Groups on Folders This report allows you to view folder permissions for specific users and groups X Power Export a Mna ia A Standard Reports wal Shares and Resources heed 2 Users and Groups re a a Domains option under Power Export Select This will bring up the Power Export Wizard 124 Chapter 6 Power Export Step 1 Report Selection Ea Fower Export Built in Reports Step 1of6 Report Selection Select the desired report to proceed Only one report can be selected in this category List of permissions For specific users and groups on Folders E List of permissions For Folders reeset List of permissions For specific users and groups on Files as List of permissions For Files lt Back 1 Select Permissions Reports from the select report category drop down list 2 Select the desired report Only one report may be selected to run in a single task 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 125 Chapter 6 Power Export Step 2 User and or Group Selection Step 2 of6 User Group Selection Select a server or a Scan Profile Computers or a Scan Profile UsersAsroups to retriev
14. ARKWE CLIENTO1 with data ARKWE CLIENTO1 mdf and log ARKWE CLIENTO1_log LDF files stored in the default SQL data folder in the SQL server for example C Program Files Microsoft SQL Server MSSQL 1 MSSQL Data Database Cleanup ARKWE will delete the application database while uninstalling the ARKWE application from the computer 14 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 2 Computer Enumeration Configure Computer Enumeration For enumerating computers in your network automatically ARKWE uses either Computer Browser Service or Active Directory Services Select an option for enumerating computers in your domain as shown below You may use the Browser service if you have a smaller network as it may take time for the Browser service to respond to data requests on large networks The advantage of a Browser service is that it lists only those computers that are currently active or alive on your network You may use the Active Directory Services option if you have a large network and you need a quicker enumeration of computers in your domain However this option requires that the domain controller is contacted and queried Therefore the currently logged on user must have sufficient privileges to connect to a domain controller or you may specify alternate domain credentials for a domain controller see configuring the Domain Credentials section in the wizard NOTE IF you use the Browser service ens
15. Do not display folders that have same permissions as the parent folder option would be enabled by default 34 CHAPTER 2 Standard Reports The report would be displayed as shown below PSOUrCces Export Y Filter GE Customize G Scan Profiles Computers Ey E mail E Foes Generated on 30 Dec 2014 10 49 08 AM Folder Path Sub Folders Owner User Name Security Inherited Apply To RD40 Folder Folder BUILTIN Administrators BUILTIN Administrators Allow Full Control No This folder subfolders and files Folder BUILTIN Administrators NT AUTHORITY SYSTEM Allow Full Control No This folder subfolders and files Folder BUILTIN Administrators VOYAGER Administrator Allow Full Control This folder subfolders and files Folder BUILTIN Administrators VOYAGER adminuser3 Allow Full Control This folder subfolders and files latest setup RD40 latest setuy latest setup BUILTIN Administrators BUILTIN Administrators Allow Full Control This folder subfolders and files latest setup BUILTINVAdministrators NT AUTHORITY SYSTEM _ Allow Full Control This folder subfolders and fles latestsetup BUILTIN Administrators VOYAGER Administrator Allow Full Control This folder subfolders and files latest setup BUILTIN Administrators VOYAGER adminuser 1 Allow Full Control This folder subfolders and files latest setup VOYAGER adminuser 3 Allow Full Control This fold
16. Power Export iy Built in Reports ia standard Reports scheduled Tasks Export Wizard Select option under Power Export This will bring up the Power Step 1 Report Selection Step lof6 Report Selection select the desired report s using the checkboxes given below ER Domain Reports efi Domains Network Configuration i df Operating System amp Hot Fixes i Printer Info Hardware Info 7 Display Configuration i Mf Internet Explorer Configuration Current Status Environment Info Gi Server Reports E users and Groups General F Status 1 Select the report s using the checkboxes to the left of the reports You may select any number of reports to run in a single task 2 There are two categories of reports Domain Reports and Server Reports 3 Reports falling under Domain Reports default to scanning and collecting data for the entire domain However you can also restrict the domain scope and scan and collect data only for a specific set of servers and have the domain reports generated viz Summary Shares and Applications 112 Chapter 6 Power Export 4 Reports falling under Server Reports scan each server and collect data specific to each server They are further classified by the category they report on viz Users Policies and Events etc 5 Click Next to proceed to the next step You may Click Back button anytime to come back to a
17. Subject Reports generated by ARKWE Please find the attached report generated by Admin Report Kit For Windows Enterprise _ Cancel Step 4 Schedule Settings Sg Power Export Built in Reports Step4d ofS Schedule Settings Enter a unique task name and specity t schedule settings Task Name File Permissions Specify an account that has sufficient privileges to retrieve report information From the selected Domains Servers Pun As TREELAB adminusers Set Password Schedule Task Daily Start time 06 30 PM Schedule Task Daily Every 1 days 1 Enter a unique name for the task 148 Chapter 6 Power Export 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step Step 5 Summary Step 5of5 Summary Click Finish ta save the task details Task Name File Permissions Report Built in Report Run As TREELAB adminusers Schedule Ak O6 S0 PM every day starting 32212013 Shared Export Export Folder Folders AS Export PathiTask Mame C Users Publici Documents ARE WE 6 x Export File Permissions Report Mame Printer List of permissions Rece Click here to view a 1 This step displays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Scheduled Tasks folder 149 Chapter 6
18. The specified credentials will be used to connect to all computers in the domain to retiewe report information f you want to specify altemate Domain Administrator credentials you may do so by clicking on the Add button below Click Add domains from forest option to enumerate domains from a diferent forest and then supply necessary credentials for the selected domain H na A ty Py Add domains from forest 17 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE The various operations that can be performed in the Domain Credentials screen are given below CoA To Add a new domain to the list Edit To Edit the properties of a domain server in the list Select a domain server and click Edit button Delete To Delete a domain server from the list Select a domain server and click Delete button Connect To connect to a domain server in the list Select a domain server and click Connect button 18 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 4 Add a Domain Server You may also add one single domain or server at a time to the list of domains or servers in the credentials list by using Add Domain Server feature Add a domain to the list 1 Launch Domain Credentials window 2 In the Domain Credentials window click z Add button to add a domain server to the list 3 The New Add domain server dialog will be displayed as shown below 254 Add domain server Speci
19. 2013 03 21 21 PM Status Success Network Adapter 5 Address Suhel DHCP Enabled Deia DHCP Server Name Mask Gateway Host Name RD30 00000012 Micrasq 10 10 10 30 255 0 0 0 Yes 10 10 10 6 10 10 10 1 Yes 10 10 10 41 10 10 10 1 10 10 10 1 00000012 Microsq 10 10 10 63 255 0 0 0 Yes 10 10 10 1 10 10 10 1 10 10 10 1 I 81 CHAPTER 4 System Information Click a Login Profiles tab to view the following information Host Name Account Name and Last Logon to Computer O Refresh 3 Export Y Filter GE Customize Egy E mail Note All System Info reports require WAI to be installed and enabled Click here for more information m Network Adapters amp Network Protocols Last Logon to Computer NT AUTHORITALOCAL SER TREELABadminus erz 20 2013 3 24 47 PM RESEARGCHLAB ad minus ert 20 2013 11 59 54 AM RESEARCHLAB ad minuser2 W20 2013 3 24 47 PM RESEARCH adminuserd 202013 3 13 49 PM LAB Ad ministratt 3192013 4 12 35 PM VSSLAB adminus ert W202013 11 59 54 AM VSSLAB ad minus er W20V2013 3 24 47 PM Click tab to view the following information Host Name Adapter Name Adapter Type Adapter ID Description and Physical Address kiohamrk Fomedroircaiceer Klehessk Edenton PEC CARCU ARI oe H Weta J k Cont gu TION letwork Ada ate 5 PES EA ICH AB Ee 4 Oy Refresh Export F Filter FE Customize Eg E mail Find Note All System Info reports require Will to be installed an
20. 4420 1017 C Program Files 10 10 10 31 i 15 0 4420 1017 C Program Files C Program Files Vyapin Software Systems Private Limited c Program Files Microsoft Corporation Microsoft Corporation Vyapin Software Systems Private Limited 23960 Microsoft Corporation 6078 Microsoft Corporation 170040 10 10 10 31 22 c Program Files Microsoft Corporation 2470 10 10 10 31 Microsoft Docum 15 0 4420 1017 C Program Files Microsoft Corporation 171313 Microsoft Corporation 7845 Microsoft Corporation 166974 10 10 10 31 Microsoft Docum 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Educati 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Educati 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Excel 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Excel 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Excel 15 0 4420 1017 C Program Files 10 10 10 31 Microsoft Excha 15 0 516 14 10 10 10 31 Microsoft Identity 2 0 1459 0 10 10 10 31 Microsoft InfoPat 15 0 4420 1017 C Program Files Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation Microsoft Corporation 10 10 10 31 Microsoft InfoPat 15 0 4420 1017 C Program Files
21. Any Workstation 12 30 2014 10 09 43 AM adminuser3 Any Workstation 12 30 2014 10 13 58 AM configdbadmin_sp03 Any Workstation defconaccessacc_sp03 Any Workstation portsiteapppool_sp03 Any Workstation spapppooll sp03 Any Workstation spapppool2 sp03 Any Workstation spapppool3 _sp03 Any Workstation spsitecoladm1_sp03 Any Workstation spsitecoladm2_sp03 Any Workstation farmadmin_sp07 1 Any Workstation 2 25 2014 2 13 05 PM farmadmin_sp07 2 Any Workstation searchdefacc_sp07 1 Any Workstation searchdefacc_sp07 2 Any Workstation 38 CHAPTER 2 Standard Reports _ Standard Reports Domains b g Users and Groups b p wml Shares and Resources gt Policies b General Ewents b B aF Services User Groups Click on a Group Members information Displays privilege lists on a per user and per privilege basis to view the following Q Refresh P Filter 3 Export GE Customize aj Scan Profiles Computers Ea E mail Gif Enterprise USERS AN 1 General T Status A Logon _5 Privileges User Groups l amp 2 Group Members a cc RD83 Generated on 30 Dec 2014 10 26 21 AM Status Success Filter Not Applied eal RESEARCHLAB i i User Name Privilege a VOYAGER AUTH Replace a process level token Domain Controllers NT AUTHORITY NETWORK SERVICE place a pr i RD40 NT AUTHORITY LO
22. C Users Public Documents CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 Getting Started 2 1 Configuration Wizard Configure ARKWE There are two ways to configure ARKWE one through the configuration wizard and the other by directly modifying the specific configuration settings Using ARKWE Configuration Wizard ARKWE configuration wizard will help you configure the application during the startup of the first run You can access the wizard anytime by choosing Tools gt Configuration Wizard from the main application menu AREWE Configuration Wizard Welcome to ARKWE configuration wizard The wizard will guide you through the process of configuring n ARKWE This wizard allows you to configure the following 1 Database Settings 2 Computer Enumeration 3 Domain Credentals Show at startup Neat gt Close Click Next to proceed CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Step 1 of 3 Database Settings Configuration Settings Select an option for storing the application data either in MS Access or SQL server f you choose SQL server enter a SQL server cunning SQL Server 2005 2008 2012 Enterprise 7 Standard Express edition and the user credential having sufficient privileges to connect create and delete database in the specified SQL server Use MS Access Use SQL Server SQL Server RD28 eg MSSQLSRYV1 Database Option Use a single central database for al
23. E Custom User Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below a Built in Reports List of User accounts Refresh Data 3 Export ay E mail Report Details Report Name List of User accounts Domain Serwer User Name Description Guest Built in User krbtgt Custom User adminuser 1 Custom User alex Custom User andy Custom User bennoit Custom User david Custom User esan Custom User gavin Custom User ilia Custom User 73 CHAPTER 3 Built in Reports List of Reports Report Name List of Users and Groups List of User accounts List of Local and Global groups List of disabled user accounts List of locked out user accounts Password settings of all user accounts Password never expires etc Members of Local Administrators group Log on rights assigned for all accounts Log on locally etc Privileges assigned for all accounts Group membership with nested groups Description Reports both the user and group accounts Reports only the user accounts This report lists both built in and custom users Reports only the group accounts with member information This report lists all Local groups for all the servers and also the Global groups if the server happens to be a PDC Reports only the user accounts both built in and custom that have been disabled and or otherwise
24. Everyone Allow Full Control Unlimited cf RD84 NETLOGON C Windows SYSVOL sysvol Voyager local SCRPTS Everyone Allow Read Unlimited Logon server share BUILTIN Administrators Allow Full Control Unlimited b server share NTFS Share C NTFS Test Folder NTFS Share VOYAGER adminuser3 Allow Full Control Unlimited NTFS Test Folder C NTFS Test Folder Everyone Allow Read Unlimited D Share Everyone Allow Full Control Unlimited BUILTIN Administrators Allow Full Control Unlimited D share22 BUILTIN Administrators Allow Full Control Unlimited 7 o Everyone Allow Full Control Unlimited s a 4 D SPListx Target BUILTIN Administrators Allow Full Control Unlimited ip Add Domains Everyone Allow Full Control Unlimited Standard Reports 4 Domains g Users and Groups ml Shares and Resources Policies id ae Services j Ewents b Click Permissions dialog appears tab The Folders to view the following information and 33 CHAPTER 2 Standard Reports ge Shares and Resources Folders RD40 o aE Q Refresh Export Filter Customize J Scan Profiles Computers E mail Find 3 Enterprise SHARES AN a Shares E Folders Folders and Permissions Gl RD83 All shares il RESEARCHLAB Select share s Gil VOYAGER Fodder m Domain Controllers latest setup m 3 L Module J amp B Servers NETLOGON Cl E RD41
25. IP SystemRoot system32 tcp 9 7 2011 10 47 35 AM MSAFD Tcpip UDP IP SystemRoot lsystem32 ic 9 7 2011 10 47 35 AM tab to view the following information Host Name Protocol A 83 CHAPTER 4 System Information 5 3 How to View Operating System amp Hot Fixes Reports ii System Info Printer Info Hardware Info Display Configuration Internet Explorer Configuration Current Status cal ame OB Ml AP F Environment Info Click on Hot Fixes information available under each tab as listed below under System Info button to view OS and NOTE For information on restricting the domain scan for generating Operating System and Hot Fixes reports please see How to scan specific servers in a domain tab to view the following information Host Name Operating System Service Pack Version Product ID Build Type Total Virtual Memory MB Installed Date Time Zone and Page File Location s Fitter Not Applied Version Product ID Build Type 84 CHAPTER 4 System Information Click a Hot Fixes tab to view the following information Host Name Hot Fix Description Installed By Installed Date Fix Comments and Service Pack Y Generated on 20 Mar 2013 03 54 01 PM 85 CHAPTER 4 System Information 5 4 How to View Printer Configuration Reports da Network Configuration ie sabia amp Hot Fixes J aes Info Display Con
26. IP Address Disk s Disk Capacity GB and Number of Partitions in Disk a2l Hardware Info Summary RESEARCHLAB Eo eee Refresh Lae kis EE Customize eia mail Find Ea Status Success Fiter Not Applied Total Number of System System System Physical Processors Model Manufacturer Type Memory MB BIOS Version Boot Device 1 Veiton Series Acer x64 based PO 16204 95 ACRSYS 1072009 WWevice Harddi Veiton Series Acer xB4based PC 7991 12 AGRSYS 2011013 Device Harddi da Add Domains 87 CHAPTER 4 System Information Click BIOS Inf tab to view the following information Host Name BIOS Name Version and Release Date Host Name BIOS Name RD30 BIOS Date 07 20 11 19 22 31 Ver 04 06 04 712012011 ron otaa sa a Click bet Processors tab to view the following information Host Name Processor Type Description Version and Number of Processors EET Intel R Core TIM 15 2320 CPU intel64 Family 6 Mode 42 Ster T ron ml ora 9CPU 8 centalProcesor itat Famityeioda sr sieo 3 Click Physical Memo tab to view the following information Host Name Memory Identifier Type Capacity MB and Memory Bank 88 CHAPTER 4 System Information net a lt _ Click tab to view the following information Host Name Drive Type Capacity GB Space Used GB and Space Free GB 2022 1400 89 CHAPTER 4 System Information 5 6 H
27. List of Shares with permissions Edit Criteria lt Back Mesck gt Close This step allows you to apply specific conditions for filtering report data 1 To set criteria for a report select a report and Click Edit Criteria or Double Click the report 2 The Criteria Settings window will be displayed as shown below Criteria settings Report List of Shares Share Type Admin Share E Cancel 153 Chapter 6 Power Export 3 Specify the criteria to filter the report data using the checkboxes 4 Click OK in Criteria Settings window to go back to the wizard 5 A description of the selected criteria will be displayed under Criteria Description as shown below A Power Export Built in Reports Step 3 of6 Report Criteria Optional You may specity a criteria for each of the following reports to fiter data Click Mest to keep the current criteria as described under Criteria Description or click Edit Criteria to modity i eee mE Server Reports Criteria Description _ Bist of Shares Share Type Folder Share OR Share Type Admin Share 4 Eeeeeeeeeen List of Shares with permissions Edit Criteria lt Back Mesck gt Close 6 Click Next to proceed to the Next step 154 Chapter 6 Power Export Step 4 Delivery Options om Power Export Standard Reports Step 4of6 Delivery Options Select the report delivery options You can Export and E mail t
28. NTFS Share L B S RD43 NTFS Test Folder Ga Workstations C share m 5 _ share22 E ia SPListX Target E RD73 RD31 Indude sub folders E RD84 Do not display folders that have the same permissions as the parent folder 4 T t Ce E rg EES Add Domains cancel You can view permissions of folder s in a share or for all the shares in the selected server by selecting All shares option or Select share s option respectively You can also optionally include the sub folder s information by selecting the Include sub folders option The sub folder s having permissions identical as the parent folder would be shown in bold text with Same as parent in both User Name and Security fields in the report If you do not want folders with identical permissions as the parent folder reported then select the Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder To view up to a certain level of sub folders select the Traverse only n level s of sub folder in the share option and specify a sub folder level where the levels are numbered as follows server sharename Level 1 Level 2 Level 3 NOTE The Include sub folders option defaults to enumerating all the sub folders unless you specify a sub folder level in Traverse only n level s of sub folder in the share option NOTE The
29. Perform the following steps to create a Scan Profile 1 Click New button in the Scan Profiles Manager window The Scan Profile dialog will show up on screen 2 Specify a name for the Scan Profile You must give a unique name for the Scan Profile 3 Specify how you want to create the profile by selecting appropriate profile type You can create Scan Profiles in one of the following ways A Selecting computers from network scan Profile Computers You can specify a computer list by using either the Import option or by selecting computers From the network Or you may select specific versions of Windows Profile Mame Profile Select computers From network C Select specific Windows version s Import list of computers From text File Import list of IP addresses from text File Enter Computer Mame Domainiserver Name DISCOVERY ISP45 ADVENTUREIRD49 ADVENTUREIRDSS PATHFINDER D45 Remove Cancel I Select computers from network option II You can type in computer name in the format Domain Name Computer Name and then click Add button to manually add it to the list Or you may click Add from button to browse the network and select specific computers B Selecting specific Windows versions 180 Chapter 7 Scan Profiles Manager scan Profile Computers You can specify 4 computer list by using either the Import option or by selecting computers from the network Or you may select specific versions of Win
30. Privileges assigned for all accounts Group membership with nested groups 71 CHAPTER 3 Built in Reports Step 2 Select Domain s Server s Select the server s Domain s or Select a Scan Profile for which the report needs to be generated The default option selected is All Domains for all the reports Built in Reports List of User accounts Step 2of3 Select Domain s Server s You can either generate the report across domains by selecting All Domains or for a specific domain server by selecting the Select Domain Server option This report can also be generated specifically for a single server by selecting the Server option O All Domains Select Domain Server dp Add Domains FaECIYRESEARCHLAB fm TREELAB Lt Mi VSSLAB Select Scan Profile Select a Profile Click Next to proceed to the next step Step 3 Select Report Criteria To view the part of the report that is of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report 72 CHAPTER 3 Built in Reports Built in Reports List of User accounts Step 3of3 Select Report Criteria To view part of the report thatis of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report User Type aged Built in User
31. Public Documents tA RKW E 5 x Export Builtin Domain Task Ci Users Publici Documents tA RKW E 5 x Export Builtin Domain Task and service pack List of Windows Servers Click here to view HTML List of Domain Controllers Click here to view HTML List of Application Servers 115 Exchange Server SQL Server Click here to view HTML etc Preaek C eee ebie LLL E a a h whip row ebm Libre ee ee Lek AI ie i lt Back Einish Close 1 This step displays the summary information of the task 2 Click Finish to save the task details 177 Chapter 6 Power Export 3 The task will be added to Windows Schedule Tasks and will be displayed in the Scheduled Tasks Manager Window as shown below 4 scheduled Tasks Ex a E Scheduled Tasks Task Hame Builtin Domain Task 2 Buitin Report Ta Run As TREELAB adminuser3 E Buitin Domain Ts Report Type Buit in Report Exported Files Click here to view Schedule At 245 PM every day starting 3 22 2013 Export Export Folder AS Export PathiTask Mame List of trusted and trusting PET eeee 1 C Users Public Documents ARKE domains Click here ko view HTML 8 x Export Builtin Domain Task List of machines with their 05 E E O HTML C Users Public Documents ARE WE and service pack SIER METE es 5 x Export Builtin Domain Task C Users Public Documents ARE WE 8 x1ExportiBuiltin Domain Task Ci Users Public Documents ARE WE 8 x1Export Builtin Domain Tas
32. RD83 Generated on 30 Dec 2014 10 50 49 AM Status Success 4 RESEARCHLAB Share Folder File Folder File Folder File 4a VOYAGER Name Path Name Type Filter Not Applied Owner User Name Inherited Apply To m Domain Controllers RD40 m Servers S RD4 S RD43 m Workstations S RD71 amp RD72 amp RD73 amp RD81 amp RD83 amp ross WW b JF Add Domains Folder RD40 Folder Folder Folder Folder Folder latest setup RD40 latest setug latest setup latest setup latest setup latest setup latest setup NETLOGON RD40 NETLOGON NETLOGON NETLOGON NETLOGON NETLOGON NETLOGON NETLOGON NETLOGON NETLOGON Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder Folder BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators NT AUTHORITY SYSTEM VOYAGER Administrator VOYAGER adminuser3 BUILTIN Administrators NT AUTHORITY SYSTEM VOYAGER Administrator VOYAGER adminuser 1 VOYAGER adminuser3 BUILTIN Administrators BUILTIN Administrators BUILTIN A
33. Servers ITS Exchange Server 50 seesnsen List of machines that run TCPIP services FTP telnet a B List of machines that have auditing enabled for disabl t Edit Criteria prr lt Back Next gt Close This step allows you to apply specific conditions for filtering report data 1 To set a criterion for a report select a report and Click Edit Criteria or Double Click the report 2 The Criteria Settings window will be displayed as shown below Criteria settings Report List of trusted and trusting domains Trusted Trusting Domains Trusted 172 Chapter 6 Power Export 3 Specify the criteria to filter the report data using the checkboxes 4 Click OK in Criteria Settings window to go back to the wizard 5 A description of the selected criteria will be displayed under Criteria Description as shown below K Power Export Built in Reports Step 3of6 Report Criteria Optional You may specify a criteria for each of the follaying reporta to fiter data Click Next to keep the current criteria as described under Criteria Description or click Edit Criteria to modify it m Domain Reports Criteria Description Domains Trusted OR Domains ag List of trusted and trusting domains ae Trusting List of machines with their 25 and service pack List of Windows Servers List of Domain Controllers List of Application Servers 115 Exchange Server SQ List of m
34. a given domain to view the trusted and trusting Click Users and Groups Shares and Resources Policies Events Services i J k ee domain to view the shares for a given 31 CHAPTER 2 Standard Reports Domai Q Refresh Export Ff Filter fE Customize Sy E mail S E Enterprise DOMAI 4 Z Summary Trust Shares 5 Applications IP Address Generated on 30 Dec 2014 10 36 55 AM Share Name 10 10 10 39 ADMINS cs Status Success C Windows CA Admin Share Admin Share Unlimited Remote Admin Default share DS DA Folder D Folder Admin Share Default share Everyone Allow Full Control D Folder BUILTIN Administ Allow Full Control latest setup D Natest setup 4 Everyone Allow Full Control Latest Setup Share D Matest setup BUILTIN Administ Allow Full Control Latest Setup Share Module D Module BUILTIN Administ Allow Full Control D Module 4 Everyone Allow Full Control NETLOGON CAWindows SY Everyone Allow Read Logon server share C Windows SY BUILTIN Administ Allow Full Control Logon server share NTFS Share C NTFS Test Fol VOYAGER admin Allow Full Control NTFS Test Folder Share C NTFS Test Fo
35. also click Import button to import a list of UNC folder paths from a text file 3 Files that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want files with identical permissions as the parent folder reported then select Do not display files that have same permissions as the parent folder option This option will not report files with identical permissions as the parent folder 4 ARKWE defaults to scanning all the sub folders for a given folder If you want to modify the Include sub folders and sub folder level options click Edit Folder Options button That will show up a window as shown below 145 Chapter 6 Power Export Folder Options Folder Path GEE eles Include sub folders k F F Apply this setting to all folders in list Cancel Traverse only 1 level s of sub folder in the share 5 Modify the folder options as required and click OK 6 Select the Validate for Errors option for validating the folders files based on the folder traversal option selected before proceeding to report generation gt Generate report ignoring any errors found This option will validate the folders files path s and generate the report even if errors are encountered during the validation option gt Generate report only if no error were found Send error report through e mail This option will validate the fol
36. and user credentials to manage its own application database You can access the Database settings by clicking Tools gt Configuration Settings menu in the ARKWE main application window and choose Database settings as shown below Configuration Settings Ea Datat a Select an option for storing the application data either in MS Access or SQL server f you choose SQL server enter a SQL server running SQL Server 2005 2008 2012 Enterprise 7 Standard Express edition and the user credential having sufficient privileges to connect create and delete database in the specified SUL server Use MS Access Use SQL Server SQL Server RDZ28 eg MSSQLSRV1 Database Option Use a single central database for all instances of the application Use a separate database for each instance of the application Authentication Mode 6 Windows Authentication Curently logged on user SQL Server Authentication User Name sallogin3 Password s eseeeeee8 EE User Authentication To connect to SQL Server ARKWE uses the relevant user accounts based on the authentication mode as listed below 13 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE A Windows Authentication In this method ARKWE uses the currently logged on user account while running reports B SQL Authentication In this method ARKWE uses the specified SQL user account and password while running reports ARKWE stores the SQL u
37. by default ARKWE defaults to scanning all the sub folders under a given shared folder If you want to change the Include sub folders and Folder level options click Edit Folder Options folders and Folder level options click Edit Folder Options Folder Options Folder Path Mea WY Include sub folders Traverse only 1 l level s of sub folder in the share Apply this setting to all folders in list Cancel Click OK to Proceed Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below a Built in Reports List of permissions for files 0 Refresh Data Export a E mail Report Details Report Name List of permissions for files Folder F ile Folder File Folder Path Hame Type Gwener User Mame Security Inhertec Apply To WRD45ttest1 testi Folder BUILTIN Administrat Unknown Account allow Special acces This folder subfolders and files BUILTIN Administrat Allow Full Control Mo This Folder only Allow Special Acces Mo This Folder subfolders and Files PATHFINDER admin Allow Full Control Mo This Folder subfolders and Files PATHFINDER crouch Allow Special Acces No This Folder subfolders and Files Everyone Allow Special Acce Wo This Folder subfolders and Files Unknown Account Allow Special Acce Mo This Folder subfolders and Files PATHFINDER Twst Allow Special Acces Mo This Folder subfolde
38. computers n ai nee ee eee you may do co eee Hat bulion Voyager local voyageradminusers Connected 3 An alert message asking for confirmation to delete the domain server will be displayed as shown below 4 Click Yes to delete the selected forest 5 Click No to abort the delete process of the selected forest 23 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 7 Add Domains from Forest In order to connect to a different forest in your Active Directory and configure these domains for enumerating computers and generating reports on them you may use the Add Domains from Forest feature Add domains from forest to the list 1 Launch Domain Credentials window 2 In the Domain Credentials window click Ato add domains from forest button to add domains in the forest to the list 3 The Enumerate All domains in a forest dialog will be displayed as shown below ay Enumerate all Domains tn a forest Jh Specify a Forest Mame The Forest Name will be used to retrieve domains present in the forest Clear the Log on Using curent user checkbox to specify alternate credentials for connecting to the forest Forest Name Note The ONS name you specity here must be visible from this computer This computer must be able to resolve the specified DNS name Domains in forest Log on using current user Show Domains gt gt trator User Mame AD S44 dminis Passivord OF Cancel
39. condition follow these steps 1 Click Clear All button and clear the filter 2 Choose a field name an operator and a possible value from the respective dropdown options 3 Click 4 The Add to Filter will change to AND to Filter The OR to Filter button will be enabled The selected condition will be set as a filter and displayed as shown below 96 Chapter 5 Additional Features Kr Filter Dormains Shares Field Operator Values Host Mame I RD45 AND to Filter OR to Filter 5 Click OK to apply the filter NOTE gt use the C meme oS Goa ana to build enhanced filter condition as shown below gt Field A Value 1 AND Field B Value 2 OR Field C Value 3 AND Field D Value 4 gt Use Ed to remove the parenthesis gt Use to delete a selected condition The status bar s FILTERED indicator is used to indicate whether the current data is filtered or not For a normal view the status bar will appear as SY Filtered For a filtered view the status bar will appear as 97 Chapter 5 Additional Features 6 3 How to Refresh Data Refresh the current report data to view the latest information from the Domain Controller Refresh K a Refresh Domains Refresh Data Click on Q si button in the toolbar available in the report window or press F5 to refresh report data Alternatively you can right click on the grid in the righ
40. entered the running RD40 Voyager local RD40 Voyager local 11 43 35 AM The COM Event System service entere RD40 Voyager local 11 43 35 AM The User Profile Service service entered 11 43 35 AM The System Event Notification Service se RD40 Voyager local RD40 Voyager local 11 43 35 AM The Group Policy Client service entered t RD40 Voyager local 11 43 35 AM The Network Store Interface Service ser RD40 Voyager local 11 43 35 AM The TCP IP NetBIOS Helper service ente RD40 Voyager local SESS 5 515 155 15 11 43 36 AM DHCPv4 dient service is started RD40 Voyager local o 11 43 36 AM DHCPv6 dient service is started RD40 Voyager local 3 11 43 36 AM The DNS Client service entered the runni RD40 Voyager local 47 CHAPTER 2 Standard Reports Click Opens the saved log stored in current system or network share J Standard Reports Domains Users and Groups Shares and Resources b Policies b f Application A Security Be System Services b Saved Lo to view the following information 48 CHAPTER 2 Standard Reports 3 6 How to View Service Information Standard Reports Domains Users and Groups Shares and Resources b Policies b Events b Services 460 Bde Ge Hh
41. gt Generate report only if no error were found Send error report through e mail This option will validate the folders files path s and skip the report generation if errors were encountered during the validation option It will then email the error s encountered during the validation process to users 7 You may select Include Error Details option for including the error information of folders files into report data 8 Click Next to proceed to t to proceed to the Next step Step 3 Delivery Options Ea Power Export Standard Reports Step 4of6 Delivery Options Select the report delwery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mn dd hh mm ss under the task name folder Export Type HTML W Export Export Fath C Wsers Public Documents ARKWE amp x Export E E mail pg Note This evaluation version exports e mails only the first 10 records 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path 134 Chapter 6 Power Export Click Additional E mail Settings button to specify optional e mail settings as shown below Additional E mail Settings You can customize the SMTP Server From and To address Subject and body
42. of the e mail message SMTP Server d4 From jarmienathtinder local To Tom Ford pathfinder local subject Reports generated by ARKWE Please find the attached report generated by Admin Report Kit For Windows Enterprise ok Cancel Step 4 Schedule Settings E Power Export Built in Reports Step 4of5 Schedule Settings Enter a unique task name and specify ts schedule settings Task Name Folder Permissions Specify an account that has sufficient privileges to retrieve report information From the selected Domains Servers Run As TREELAB adminusers Sek Password Schedule Task Daily Start time 05 30 PM z Advanced Schedule Task Daily Every 1 gt davis Cea Cet cise 135 Chapter 6 Power Export 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step Step 5 Summary Step5of5 Summary Click Finish ta save the task details Task Name Folder Permissions Report Built in Report Run As TREELAB adminusers Schedule GF OS 30 PM every day starting 3 22 2015 Shared Export Export Folder Printer Report Name Folders As Export PathiTask Name C Users Publici Documents ARK E 8 x Export Folder Permissions List of permissions peels Click here to wiew HTML 1 This step displ
43. should contain valid IP addresses with each entry in a separate line as shown below sample IP Address List 18 10 10 53 10 10 10 56 10 108 10 255 o During the import process each IP address will be translated to a corresponding computer name Hence only valid entries will be imported To view the list of entries imported click Verify Imported List button The list of IP addresses and their corresponding computer names will be displayed as shown below Entries Imported This window shows the lisk of entries imported IF Address Host Mame 10 10 10 44 40VENTUREWRD49 o Changes to the external text file will not automatically be reflected in the Scan Profile You need to edit the Scan Profile and re import the updated IP address list from the file 4 Click OK to save the Scan Profile for later use 184 Chapter 7 Scan Profiles Manager 8 3 How to Manage Scan Profiles Computers Customize Filter Export a E mail Tm acan Profiles Manager Computers Fy amp Configuration Settings de Usersand Groups F10 Click Profiles Manager The Scan Profiles Manager shows the list of Scan Profiles available to launch the Scan C Scan Profiles Manager Computers You can setup Scan Profiles to scan a subset of computers in the network and save these profiles For repeated use This window lists available profiles Click Mew to create a new profile Click Edit to modify selected profile Click Del
44. to modify the Include sub folders and sub folder level options click Edit Folder Options button That will show up a window as shown below Folder Options Folder Path PREE Include sub folders E Traverse only l level s of sub Folder in the share m F Apply this setting to all folders in list Cancel 5 Modify the folder options as required and click OK 6 Select the Validate for Errors option for validating the folders files based on the folder traversal option selected before proceeding to report generation gt Generate report ignoring any errors found This option will validate the folders files path s and generate the report even if errors are encountered during the validation option gt Generate report only if no error were found Send error report through e mail This option will validate the folders files path s and skip the report generation if errors were encountered during the validation option It will then email the error s encountered during the validation process to users 7 You may select Include Error Details option for including the error information of folders files into report data 8 Click Next 140 Chapter 6 Power Export Step 4 Delivery Options a Power Export Standard Reports Step4of6 Delivery Options Select the report delivery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the
45. to enumerate its computers This option requires Domain Administrator credentials to connect to your domain controller CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE AREWE Confiquration Wizard Step 2 of 3 Computer Enumeration Select an option for enumerating computers in your domain In order to automatically enumerate computers in your network the application may be configured to use either the Computer Browser Service uses Windows Network APIs or your Active Directory queries your AD for Computer Accounts Use Computer Browser Service Uses Windows Network API to enumerate computers in a domain This displays all the computers that are currently active in your Network This option may be used if you have a small network for faster enumeration of computers Use Active Directory Services Queres your Directory Server to enumerate its computers This option requires Domain Administrator privilege to connect to your domain controller Show at startup Click Next to Proceed Step 3 of 3 Domain Credentials Manage alternate credentials for Domain Directory Servers The application by default uses the currently logged on user context to enumerate computers shares and to collect report data If you want to specify alternate Domain Administrator credentials you may do so by clicking on the Add button below Click Add domains from forest option to enumerate domains from a different forest and t
46. version s Import list of computers From text File Import list of IP addresses From text File File Moke CiUsers Administrator Desktop WworkStationsList tet The file should contain computer names in the Format Bomain Computer with each entry Click here to view a sample iV NOTE O O Import OK Cancel Select Import list of computers from text file option Click browse button to select a file that contains the list of computers to be imported In the Select File dialog that shows up select a text txt file and then click Open Click Import button to import the list of computers from the selected file The text file should contain computer names in the format Domain Name Computer Name both Domain and Computer name should be a NETBIOS name with each entry in a separate line as shown below sample Computer List researchirdt research rd pathfinder rd4s Only valid entries of the form Domain Name Computer Name will be imported and invalid entries will be ignored Please note that the domain specified will be matched with the domain name to which the computer belongs The computer entry will be ignored either if the domain name 182 Chapter 7 Scan Profiles Manager does not match or if an error occurs retrieving the domain name To view the list of entries imported click Verify Imported List button The list of computer names importe
47. 09 Microsoft Windows Network 1 Operating System 84 Permissions Reports 51 52 123 124 Power Export 109 Power Export tool 79 108 Scan Profile 107 108 114 117 180 181 183 184 185 186 187 188 189 193 194 195 Scan Profiles 179 180 185 186 187 188 189 190 193 194 195 196 214 Scan Profiles Manager 179 Schedule Built in Reports 123 Schedule Standard Reports 112 Server based Reports 187 188 Server based Reports 187 Shares and Resources 33 51 67 123 150 SMTP server 100 SMTP Server 100 SOX 1 Standard Reports Working with Reports 30 System Administrators 1 3 System Information 79 System requirements 2 Systems Audit personnel 1 Systems management personnel 3 Task Manager Scheduled Tasks Manager 110 Technical Support 6 TIFF 109 Troubleshooting 208 uninstall 209 211 uninstall wizard 209 Users and Groups 37 51 71 74 123 160 195 WAN 3 Windows network product developers 3 Windows Servers 3 78 215
48. 187 8 5 About Scan Profiles Users Groups csscssccsscssccsccsscssccecccssseccescessceccesssccescessssceecs 189 8 6 Howto Create Scan Profiles Users Groups cssccsscssccsscsscssccescsssseccescsccescessesseess 189 8 7 Howto Manage Scan Profiles Users Groups ccsscssccsccsscssccescsscescesccsccescessssceess 193 8 8 Howto Apply Scan Profiles USers Groups ccsccsscssccsscsssssccescssscescesccsscescesensssess 195 8 9 About Scan Profiles Shares sessesssesesssssosossssssssosososessosssososossssosoeossssssosososessssssses 199 8 10 How to Create Scan Profiles Shares cceccscsssscsssccsceccscecsscsscccsccccscescscescccssecees 199 8 11 How to Manage Scan Profiles Shares cccsscscsscsssccssecsscecsscsccccsccccscescscesescssecees 202 8 12 How to Apply Scan Profiles Shares ccscscsscsssscscsccsccccsceccscsscccsccccscesscesescssecces 204 Referentes sninen ea A E Ea 208 8 13 MFOUDICSMOOUING nadaa a cncenevncsuonawacndesees co dwsavecneee 208 8 14 How to Uninstall ARKW Eo soisissa aaa a aaa a 209 E i A E EEE A EPA EEA E A TAE A 213 Chapter 1 General Information 1 1 About Admin Report Kit for Windows Enterprise ARKWE Admin Report Kit for Windows Enterprise ARKWE is a powerful reporting solution for the Microsoft Windows Network ARKWE collects configuration information about Windows domains amp servers users groups policies events services installed appli
49. 5 How to E mail Data ARKWE provides the option to e mail the reports generated Click button in the toolbar to e mail the report to e mail recipients E mail dialog will be displayed as shown below E mail Report Specify SMTP Server name From Address To address Subject Body of the e mail message attachment format and option to attach the report as zip file Format SMTP Server rd45 From Eringst pathfinder local OryvRecker Pathfinder local By Check Subject Domains Shares Attachment Format HTML Compress the attachment For e mailing reports ARKWE requires SMTP Server From E mail Address To E mail Addresses recipients separated by semicolon and the report attachment format Specify SMTP server name from Address To address mail subject mail content attachment format and option to compress the attachment button to send the report by e mail to the selected recipients 100 Chapter 5 Additional Features Check names ARKWE provides check name feature to check the existence of corresponding mail G enabled recipient object in Active Directory To check name click Ps button If the entered name matches with a mail object in the Active directory its trusted domain name entered in From Address textbox will be replaced by the corresponding active directory recipient object If there is more than one match a dialog which contains matching Active Directory recipients wi
50. CAL SERVICE Replace a process level token Servers NT AUTHORITY NETWORK SERVICE Generate security audits fi RD41 NT AUTHORITY LOCAL SERVICE Generate security audits i RDG BUILTIN Backup Operators Back up files and directories j m Workstations BUILTIN Server Operators Back up files and directories E R71 BUILTIN Administrators Back up files and directories E RD72 R073 Rost E RD84 BUILTIN Performance Log Users Log on as a batch job BUILTIN Backup Operators Log on as a batch job BUILTIN Administrators Log on as a batch job Window Manager Window Manager Group Bypass traverse checking BUILTIN Pre Windows 2000 Compatible Access Bypass traverse checking BUILTIN Administrators Bypass traverse checking NT AUTHORITY NETWORK SERVICE Bypass traverse checking NT AUTHORITY LOCAL SERVICE Bypass traverse checking NT AUTHORITY Authenticated Users Bypass traverse checking Everyone Bypass traverse checking BUILTIN Administrators Create a pagefile Debug programs Standard Reports Domains Shares and Resources d Status Policies t Logon Events t Ef Privileges Services Click on 82 Group Members to view the following information Displays group lists on a per user and per group basis 39 CHAPTER 2 Standard Reports F Filte Administrators Administrators have complete and unrestricted access to the computer dom
51. Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths trom a text file Select a folder in the list below and Click Edit Folder Options to modify the detant properties for scanning each folder Report List of permissions for folders UNC Path Scan Profile Shares Select a Frotile amp Folder Path Include sub Fold Folder level Add From gt In this step the list of shares present in Scan Profile Shares will be loaded to the selected account list as shown below A Power Export Built in Reports Step 2 of 5 Shared Folder Selection Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths trom a text file Select a folder in the list below and Click Edit Folder Options to modify the default properties for scanning each folder Report List of permissions for folders UNC Path Scan Profile Shares Frequent Scans oe Folder Path Include sub Fold Folder level Add From WAD4S Address True All WRD4S NTFS Bulk Share True All WROFSINTFS BulkTest Share True All eo WADASATES Security Manager True All WRD49 Test share Folder True All 4 Import e display Folders that hawe the same permissions as the parent Se E Include group membership information C Include SID In the succeed
52. Frequent Scans Account Type Remove Reset gt Enter the name of User Group in domain account name format and click Add to List to add the name to selected accounts list gt Use Select a Scan Profile Users Groups option to use the users and groups added in the profile gt Use Browse and Select option to retrieve users and groups from servers or Scan Profile Computers Select Accounts View and Select Accounts UsersGroups available from computers displayed below ones Scan Profiles Computers i PATHFINDER H m Domain Controllers a ma Servers Workstations E E ROS Find Guest Use the Find option to search desired user group accounts Click Next to Proceed 61 CHAPTER 3 Built in Reports Step 3 Select Shared Folders Select one or more servers to retrieve available shares r Built in Reports Ba Shares Step 3 of 3 Enter the Full p Folder paths F properties For i Scan Profiles Computers lt No Profile Found Configure using Scan Profiles Manager gt Share Folder El ES Domains S E ADVENTURE E Domain Controllers Folder Fath 6 RO49 Scan Profile WRD49 Addre J MRDA Address a I WRD49 ADMINS WADAS ADM WROCE E MRD4910 o E wrvasics WRD4SE WRD49 Exche WRD4SFS WRD4S H 9 View and select Shares and Folders available From computers displayed below z Add From Import Remove Built in Re
53. LEIS Pt Gs Ott U4 2ebw F edd P B P F Zum U Jp Ee dig PhTgv C Op 990 1A9 F Exit Yuh Ron Od HewhikKm A END LICENSE KEY COPY ABODE THIS LINE Image 2 How to copy license key screen CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 1 5 Technical Support ARKWE Frequently Asked Questions FAQ section is available online at our website http www vyapin com Please direct all technical support questions to support vyapin com Include the following information to expedite a response a Include the version of the product you are using b If the problem is associated with installation include the steps that led to the problem c If the problem is associated with usage please state the series of steps you performed d Include the version of the OS info about any service packs or hot fixes and local language of the OS installed e Attach the Error Log File available in the common application data path of ARKWE e g lt Application Data Folder gt ARKWE 8x ARKWEErrorLog log NOTE lt Application Data Folder gt is the common area where ARKWE settings will be stored in the machine running ARKWE The lt Application Data Folder gt can be found from the Help gt About screen The default path of lt Application Data Folder gt is as follows a Windows XP Windows 2003 C Documents and Settings All Users Documents b Windows Vista Windows 7 Windows 8 Windows 2008 Windows Server 2012
54. List of Reports Report Name List of Shares List of Shares with Permissions Reports all the shares and their properties excluding the permission information Reports all the shares and their properties including the permission information 70 CHAPTER 3 Built in Reports 4 4 How to View Built in Reports for Users and Groups Users and Groups Reports The Users and Groups reports contains reports that can be generated against domain s and specific sever s as well c Built in Reports w Permissions ml Shares and Resources a Users and Groups da Domains Click on toolbar button under Built in Reports in button in the The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time Click Next to proceed to the next step Built in Reports List of User accounts Step 1of3 Select Report This report lists all Builtin and Custom User accounts in a machine ka A Users and Groups ae List of Users and Groups ao E List of User accounts pois List of Local and Global groups List of disabled user accounts List of locked out user accounts se B Password settings of all user accounts Password never expires etc oa E Members of Local Administrators group 3 ne E Log on rights assigned for all accounts Log on locally etc oe
55. Manager 8 12 How to Apply Scan Profiles Shares You can apply Scan Profile Shares to permissions reports This is especially useful if you want to generate permissions reports for certain Shares frequently The following shows permissions reports that involves shares profile List of Permissions Reports Report Name Description List of permissions for specific users and Reports the folder permissions assigned groups on folders to specific users and or groups on a selected set of folders List of permissions for folders Reports the permissions associated with a selected set of folders List of permissions for specific users and Reports the files permissions assigned to groups on files specific users and or groups under a selected set of folders List of permissions for files Reports the permissions associated with files under a selected set of folders Scan Profiles Shares and Permission Reports You can apply a Scan Profile Shares to permissions reports either using Power Export Tool for off line generation or Interactive Report Generation This option will useful if permissions for certain shares need to be monitored frequently Rather than searching for shares adding them to list and viewing their permissions You can create a subset of shares save them as a profile generating permissions reports for them The following Shows how Scan Profiles Shares can be applied to permission reports in Interactiv
56. Policy Creator Ow CN Domain Admins CN Enterprise Admins CN Schema Admins CN Remote Desktop Users CN Administrators BUILTIN Administrata RD49 Exchal ExchangeO4B BUILTIN Administra S 1 5 32 544 Full Control This Folder subf 02b2e76b 66c8 BUILTIN Administra 5 1 5 32 544 Full Control This folder subf WRD49 Group GroupMetrics BUILTIN Administra 5 1 5 32 544 Full Control This folder subf WRD49 NETLC NETLOGON BUILTIN Administra S 1 5 32 544 Write Attributes This folder only Take Ownership This Folder only Change Permissions This Folder only b 56 CHAPTER 3 Built in Reports How to view Built in Permissions Reports List of Permissions for Folders Built in Reports gal Shares and Resources Rg Users and Groups an Domains Click on button under Built in Reports button in the toolbar The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time Built in Reports List of permissions for folders Step 1of2 Select Report Select a report from the available Built in Reports Dezcrintion This report lists the permissions assigned to a List of permissions for folders specific folder S Permissions List of permissions for specific users and groups on folders 5 List of permissions for specific users and groups on files ome List of permissions for
57. Power Export 7 5 Schedule Shares and Resources Built in Reports Power Export epi Permissions 4 Standard Reports Shares and Resources Scheduled Tasks Users and Groups Domains Click This will bring up the Power Export Wizard option under Power Export Step 1 Report Selection iq Power Export Built in Reports Step 1of7 Report Selection Select the desired reports using the checkboxes given below More than one report may be selected in this category eed Shares and Resources List of Shares List of Shares with permissions 1 Select the report s using the checkboxes to the left of the reports You may select any number of reports to run in a single task 2 The above reports collect data on a server basis 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 150 Chapter 6 Power Export Step 2 Server Selection A Power Export Built in Reports Step 2 of6 Server Selection For each of the following reports please select the list of servers for which you would like to generate the report Double click on a Report or click Add Servers The report for each of the selected servers will be exported as a separate Tile cae Rees Server Mame ve List of Shares with permissions Add Servers __ lt Back Next gt Close 1 Click Add Servers button to select the servers for which you wish to run the serve
58. Set Password ah Schedule Task Daily Start time M25 PM Advanced Schedule Task Daily Every 1 lt Back Mesck gt Close 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step 157 Chapter 6 Power Export Step 6 Summary Stepbof6 Summary Click Finish to save the task details Task Name Builtin Report Task Report Built in Report Run As PATHFINDER adminuser Schedule t 01 25 PM every day starting 3 22 2013 Report Pe ee aes Export Export Folder Mame AS Export Pathilask Mame ise E Fz Mi List of Shares Click here to view HTML i ae a ae Report Task pr List of Shares Z Users PubliciDocuments ARKWE Click here to view alis 8 x Export Builtin Report Task 1 This step displays the summary information of the task 2 Click Finish to save the task details 158 Chapter 6 Power Export 3 The task will be added to Windows Schedule Tasks and will be displayed in the Scheduled Tasks Manager Window as shown below Os Task Hame Buitin Report Task one Buittin Report Ta Run As PATHFINDER adminuser Report Type Built in Report Exported Files Click here to view Schedule At 1 25 PM every day starting 3 22 2013 Report Servers Domains ee Export Folder Mame Export PathiTask Na
59. User Manual ARK for Windows Enterprise ARKWE ES Admin Report Kit for Windows Enterprise ARK WE Eaa 1999 2014 Vyapin Software Systems Private Limited All Rights Reserved Oyyapin com Web www vyapin com Last Updated January 2015 Copyright 2015 Vyapin Software Systems Private Ltd All rights reserved This document is being furnished by Vyapin Software Systems Private Ltd for information purposes only to licensed users of the ARKWE software product and is furnished on an AS IS basis that is without any warranties whatsoever express or implied ARKWE is a trademark of Vyapin Software Systems Private Ltd Information in this document is subject to change without notice and does not represent any commitment on the part of Vyapin Software Systems Private Ltd The software described in this document is furnished under a license agreement The software may be used only in accordance with the terms of that license agreement It is against the law to copy or use the software except as specifically allowed in that license No part of this document may be reproduced or retransmitted in any form or by any means whether electronically or mechanically including but not limited to the way of photocopying recording or information recording and retrieval systems without the express written permission of Vyapin Software Systems Private Ltd i in s WAVYAPIN Vyapin Software Systems Private Limited Website htto Awww vyapin
60. aa C _ cose 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path gt Click Additional E mail Settings button to specify optional e mail settings as shown below 119 Chapter 6 Power Export Additional E mail settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From jarmiepathtinder local To Tom Fordiapathfinder local subject Reports generated by ARKWE Please find the attached report generated by Admin Report Kit For windows Enterprise Step 5 Schedule Settings tep5of6 Schedule Settings Enter a unique task name and specify its schedule settings Task Name Standard Reports Task Specdfy an account that has sufficient privileges to retrieve report information from the selected Run As PATHFINDER adminuser sce Tak Sar tine 9500 Schedule Task Daily ever T 120 Chapter 6 Power Export 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step Step 6 Summary 2X Power Export Standard Reports Step6of6 Summary Click Finish to save the task details Task Name Standard Reports Task Run As Schedule t05 00 PM every day starting 3 21 2013 Export Exp
61. achines that run TCPIP services FTP telnet List of machines that have auditing enabled or disabl Edit Criteria o sak cese 6 Click Next to proceed to the Next step 173 Chapter 6 Power Export Step 4 Delivery Options A Power Export Standard Reports mi Step 4of6 Delivery Options Select the report delwery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mm dd hh mm ss under the task name folder Export Type HTML Export Export Path Wsers Public Documents ARKWE 8 xExport E E mail ay Note This evaluation version exports e mails only the first 10 records 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path 174 Chapter 6 Power Export gt Click Additional E mail Settings button to specify optional e mail settings as shown below Additional E mail Settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From jamepathtinder local To Tom Fordi pathfinder local subject Reports generated by AAKWE Please find the attached report generated by Admin Report Kit For windows Enterprise Cancel 175 Chap
62. achines that run TEPIP services FTP telnet etc MJ List of machines that have auditing enabled for disabled 1 Select the report s using the checkboxes to the left of the reports You may select any number of reports to run in a single task 2 The above reports collect data for the entire domain 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 169 Chapter 6 Power Export Step 2 Domain Selection 2 Power Export Built in Reports Step of6 Domain Selection For each of the folowing reports select the list of domains for which you would like ta generate the report Double click on a report or click Add Domains The report for each of the selected domains weil be exported as a separate Tile E List of machines with their OS and service pack Rota imselecred E List of Windows Servers E List of Domain Controllers B List of Application Serwers 115 Exchange Server SOL Serve B List of machines thak run TCPIP services FTP telnet etc B List of machines that hawe auditing enabled for disabled Add Domains 1 Click Add Domains button to select the domains for which you wish to run the domain reports selected in Step 1 This will display a window where you can select the domains you want to add 2 Click OK to apply the selected domains to the current report or click Apply to Reports to apply the domains to the rest of the select
63. ain Designated administrators of the schema Enterprise Admins Designated administrators of the enterprise Group Policy Creator Owners Members in this group can modify group policy for the domain Organization Management Members of this management role group have permissions to manage Exchange objects and their properties in Domain Users All domain users Domain Admins Designated administrators of the domain Guest Domain Guests All domain quests Guests Guests have the same access as members of the Users group by default except for the Guest account which is krbtgt Domain Users All domain users Denied RODC Password R Members in this group cannot have their passwords replicated to any read only domain controllers in the domain adminuserl Administrators Administrators have complete and unrestricted access to the computer domain Domain Users All domain users Designated administrators of the schema Designated administrators of the enterprise Designated administrators of the domain DNS Administrators Group Members of this management role group have permissions to manage Exchange objects and their properties in adfssvcacc i All domain users Standard Reports a Domains Users and Groups General Shares and Resources Status Policies d Logon Events d Privileges H 2 e ia Services User Groups om tiny Oot g Click on to view the fol
64. ains 1 Click on 2 Select any one of the permissions reports listed above and click Next to proceed under Built in Reports in the tool bar 3 In the next step select the option Select a Scan Profiles Users Groups as shown below Built in Reports List of permissions for specific users and groups on folders Step 2 of 3 Select User Group Account s Select user and or group accounts For which you would like bo view the permissions on files folders Enter account name ea Add to list oe Accounts fram domainierver Browse and Select Accounts from Scan Profiles Users sroupe Select a Protile Selected Accounts Account Mame Account Type gt In this step the list of users and or groups present in Scan Profile Users Groups will be loaded to the selected Account list as shown below 196 Chapter 7 Scan Profiles Manager Built in Reports List of permissions for specific users and groups on folders Step 2 of 3 Select User Group Account s Select user and or group accounts For which you would like bo view the permissions on files folders Enter account name Ma Add to list oe Accounts fram domainierver Browse and Select Accounts from Scan Profiles Usersisroups Frequent Scans Selected Accounts Account Mame Account Type Adventure adminuser Reset Adventure alan Adventure alex Adventure Michael Builtin 4drninistr ators gt In the Succeeding steps select needed d
65. ally contains a list of computers that ARKWE can read and generate the report only for computers in the selected profile Click button to create a new Scan Profile Click Profile button to edit an existing Scan 107 Chapter 5 Additional Features However please be aware that the report will be generated only for computers in the applied profile belonging to the currently selected domain This restriction does not apply if the report is being generated off line using Power Export tool Click OK in the Scan Option for dialog to generate the report If ARKWE could not find any computers belonging to the currently selected domain in the applied Scan Profile you may see the following message show up on screen i No computers were found in the VOYAGER domain for the test profile NOTE Clicking Cancel in Scan option for dialog will display previously collected report data if any for the domain 108 Chapter 7 Power Export 7 1 About Power Export ARKWE provides a powerful offline report generation tool called Power Export Power Export allows the user to select multiple reports to be run for several domains and servers across the enterprise at scheduled intervals The Power Export tool has the ability to export the reports in different file formats Please note the following while using the Power Export Wizard a Scheduled reports will be created as a task in Windows Task Schedule
66. an restrict the domain scope and scan and collect data only for a specific set of computers by either selecting specific computers under a domain or by selecting a Scan Profile 3 Click OK to apply the selected servers or a Scan Profile to the current report or click Apply to Reports to apply the selection to the rest of the selected server reports The selected servers will be added to the wizard as shown below 117 Chapter 6 Power Export Stepi3of6 Server Selection For each of the following reports Select the list of servers for which you would like to generate the report Double click on a report or click Add Servers The report for each of the selected servers will be exported as a separate file TREELAB RDS50 4 Click Next to proceed to the Next step 118 Chapter 6 Power Export Step 4 Delivery Options 4 Power Export Standard Reports Step 4of6 Delivery Options Select the report delivery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mm dd hh mm ss under the task name folder boot Te Fi Export Export Path Users Public Documents ARKWE 8 x Export _ C E mail iy Note This evaluation version exports e mails only the first 10 records C
67. anager in order to store the domain user context for enumerating servers using ADSI The stored user profile will be useful for generating reports using ARKWE under the following scenarios gt Using an alternate user account to connect to the domain to retrieve servers using ADSI gt Providing credentials that have sufficient rights to enumerate shares present in computers within a domain The stored user profile persists for all subsequent logon sessions on the same computer where ARKWE is installed The stored user profiles are visible to the application under other logon sessions on the same computer The stored user profile created by ARKWE is restricted to the Windows User Profile context If the Windows User Profile is maintained locally ARKWE stored user profile is accessible only by the same user in the same computer If the user who creates ARKWE stored user profile has a Roaming user account in the enterprise the ARKWE stored user profile can be accessed by the same user in any computer in the Windows enterprise The stored user profile is a generic credential of Windows Stored User Names and Passwords applet Credential Manager and can be used by the application only The credential information is stored securely in a 256 bit encrypted format in Windows Stored User Names and Passwords applet Credential Manager The stored user profile corresponding to the user account will be used by the application in order
68. and select Shares and Folders available From computers displayed below t a list of UNC Scan Profiles Computers lt No Profile Found Configure using Scan Profiles Manager gt Domains ADVENTURE Sa Domain Controllers 5 e WRD49 Address import oo WRD49 ADMING Cancel HES onare Ea Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UN folder paths from a test file Protile Name Sample Frofile Share Folder UMC Path Folder Path Add From WADA Address WROD Exchangecae Import WRO49NTFS Security Manager WROAS Test share Folder Remove TROSS Testlocagroups Cancel 5 Click Finish to save the Shares profile for future use 201 Chapter 7 Scan Profiles Manager 8 11 How to Manage Scan Profiles Shares FQ bh Users and Groups F10 va Shares F11 Click Scan Profiles Manager Shares shows the list of available profiles to launch the Scan Profiles Manager Shares The EJ scan Profile Manager Shares ES fou can setup Scan Frofiles Shares to scan a subset of shares in servers and save these profiles for repeated use This window lists available profiles Click New to create a new profile Click Edit to modify selected profile Click Delete to delete a profile Click Preview to view the contents of a profile Frequent Scans Sample Profile Delete Preview T
69. ared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths trom a text file Select a folder in the list below and Click Edit Folder Options to modity the default properties for scanning each folder Report List of permissions for specific users and groups on folders UNC Path Scan Profile Shares Se m ao Folder Path Include sub fold Folder level Add From ROS ADMINE True all Hl Import HRDSOARKWE True all cis WRDSOWCS True All Remove WADSOVES True All WRDSO Mew True All Eil Do not display Folders that hawe the same permissions as the parent Sea Include group membership information Include SID E Validate For Errors tect Ce See 1 Select the desired folder s for which you wish to run the permissions report 2 You may also click Import button to import a list of UNC folder paths from a text file 3 Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want folders with identical permissions as the parent folder reported then select Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder 127 Chapter 6 Power Export 4 ARKWE defaults to scanning all the sub folders for a given folder If you want to modify the Include sub folde
70. ays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Schedule Tasks 136 Chapter 6 Power Export Schedule Permissions Built in Reports List of Permissions for Specific Users and Groups on Files This report allows you to view file permissions for specific users and groups X Power Export 4 Standard Reports ml Shares and Resources Scheduled Tasks 2 Users and Groups in Domains Select option under Power Export This will bring up the Power Export Wizard Step 1 Report Selection Ea Fower Export Built in Reports Step 1of6 Report Selection Select the desired report to proceed Only one report can be selected in this category ai List of permissions for specific users and groups on folders nes List of permissions For Folders 2 arenen E List of permissions For specific users and groups on Files Tn E List of permissions For Files 1 Select Permissions Reports from the select report category drop down list 2 Select the desired report Only one report may be selected to run in a single task 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 137 Chapter 6 Power Export Step 2 User and or Group Selection Step 2 of6 User Group Selection Select a server or a Scan Profile Computers or a Scan Profile UsersAsroups to retrie
71. bled user accounts List of locked ouk user accounts Password settings of all user accounts Password nev Members of Local Administrators group Log on rights assigned For all accounts Log on locally J Privileges assigned For all accounts Group membership with nested groups Edit Criteria lt Back Close 6 Click Next to proceed to the Next step 164 Chapter 6 Power Export Step 4 Delivery Options A Power Export Standard Reports mi Step 4of6 Delivery Options Select the report delwery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mm dd hh mm ss under the task name folder Export Type HTML Export Export Path Wsers Public Documents ARKWE 8 xExport E E mail ay Note This evaluation version exports e mails only the first 10 records 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path 165 Chapter 6 Power Export gt Click Additional E mail Settings button to specify optional e mail settings as shown below Additional E mail Settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From jamepathtinde
72. cations shares permissions printers data sources etc The reports are presented in a variety of formats that are simple elegant and highly customizable for System Administrators IT infrastructure Managers and Systems Audit personnel to use and act on ARKWE s basket of Built in reports provides powerful ready to use reports that assist in both Management reporting and Compliance reporting requirements such as SOX and HIPPA A single solution that serves your everyday needs of administrative tasks as well as complex data preparation tasks for assisting in compliance ARKWE has been architected using the latest Microsoft NET technology bringing you the best in breed reporting solution for your entire Windows Network ARKWE is highly optimized for performance using native Windows API calls wherever appropriate resulting in fast data collection of deeply embedded configuration data Imagine scanning your vast network of workstations and servers without having to wait forever to see your reports You can create data subsets for your network using our powerful scan options and meaningfully segment your entire network for data collection and reporting ARKWE supports current versions of Microsoft Windows Server 2000 2003 2008 2012 and localized versions of Windows Server including German Spanish and French CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 1 2 System Requirements For the computer running ARKWE Proc
73. com Sales Contact sales vyapin com Technical Support support vyapin com Table of Contents 1 SGCNEMGlINFOVIMGUON coieie isch a a aa 1 1 1 About Admin Report Kit for Windows Enterprise ARKWE ccsccscsscsssscscessscessscscecees 1 LZ SVStemi REGUINGIMEINS asine iren na a A a S 2 1 3 Who Can Use ARK WE sossisccscsicsdasiesctcieds iaaa E a a a a Ea 3 1 4 How to Activate the Software cccsccscscecsecscscsccccccscsccccccscscescccecscsseccecscsceseccecscesessees 4 L5 Technical SUDDO onioni a a aa a a a a 6 2 Getting SCOMLCG onn nan E E EA E EN OTE O aeuae reed 7 21 C nhge raton Wizard susanne anD EOE iai 7 Configuration Settings oa a a A a a a Aa 13 2 1 1 Datapase seNe A A A E moniee eae 13 2 1 2 COMPUTE EM UTNE FALION coreeana ennidtansnaveuneinamacaesndiniaaimnnscanseameune ntetaasaauaeinasenanamian 15 2 1 3 Configuring Domain Credentials ccccccsssscccccssscccceeesccccceeeecceseesecesssensecessaeasecessuaneeeessaaaeses 16 2 1 4 a fee IDL 01 0012 LAP bs cl Gxt 2 EEE ren er ee re de N Se eS ree 19 2 1 5 Edita DOMAIN SCIVER eceran aa A a E e a E e E aN aait 21 2 1 6 D leteda Domain Server sadon a a a a a a 23 2 1 7 POG Domans TO IF ON CSc anan a eu seaman Italia tee a a a N 24 2 1 8 COIS UI SITS Ct Ol ete acc sac cea a oa ae cae date acess T nena nee dadeudceawins 27 2 1 9 User Connection PROT CS sansasaeinas suns iosmsucnunsessts E anew ane bus snaite sonnma he boaanwhs mnamnnobaisaenimmnnieee wane
74. cted domains will be added to the wizard as shown below 114 Chapter 6 Power Export a Step 2 of6 Domain Selection For each of the following reports select the list of domains for which you would like to generate the report Double click on a report or click Add Domains The report for each of the selected domains will be exported TREELAB Full Scan 4 Click Next to proceed to the next Step Step 3 Server Selection for Server Reports NOTE This step is applicable only if a Server Report is selected in step 1 115 Chapter 6 Power Export Stepi3of6 Server Selection For each of the following reports select the list of servers for which you would like to generate the report Double click on a report or click Add Servers The report for each of the selected servers will be exported as a Separate file Users and Groups Seneral 1 Click Add Servers button to select the servers for which you wish to run the server reports selected in Step 1 This will display a window where you can select the servers you want to add Selecting a domain will add all the servers in that domain to the report 116 Chapter 6 Power Export Select Domain s Server s Select one or more domains Click on the Apply To button in order apply the same list of domains for all the selected Reports Select Domain Server m E RESEARCHLAB mm TREELAB Select Scan Profile Select a Profile 2 You c
75. d enabled Click here for more information Status Success Fitter Not Applied Host Name Adapter Name Adapter Type Adapter ID Description Physical Address ia WANMiniport Net RSSBOFENT ABEE 4 WANMiniport Ne Intel R S2579 M G Ethernet 802 3 CEIC DCEB DE CT WAN Miniport P 66513FCE F1B9 4 WAN Miniport P D E E E 82 CHAPTER 4 System Information Click Network Protocols Name Description and Installed Date SVEN WEE Q Refresh Export Ff Filter GE Custom ize 5 E mail Note All System Info reports require WMI to be installed and enabled Click here for more information 4 IP Configuration 4 Login Profiles HM Network Adapters Network Protocols Generated on 20 Mar 2013 03 30 45 PM Host Name Protocol Name Status Success Description Filter Not Applied Installed Date RD30 MSAFD Tcpip TCP IP SystemRoot system32itcf 3 30 2012 10 29 18 PM MSAFD Tcpip UDP IP SystemRoot systems2itcy 3 30 2012 10 29 18 PM MSAFD Tcpip TCP IPv6 ASystemRoot system32 tci 3 30 2012 10 29 18 PM MSAFD Tcpip UDP IPv6 SystemRoot systemS2 tcy 3730 2012 10 29 18 PM RSVP TCPv6 Service Provider RSVP TCPv6 Service Provider RSVP TCP Service Provider RSVP TCP Service Provider RSVP UDPv6 Service Provider RSVP UDPv6 Service Provider RSVP UDP Service Provider RSVP UDP Service Provider MSAFD Tcpip TCP
76. d to the user context currently logged on user account in which the profile is created Click OK to add the domain server to the Domain Credentials list ARKWE will connect to the domain server with the newly provided connection parameters and add it to the list upon successful connection to the domain server a Manage altemate credentials for Domain Directory Servers Specify an account name that has admin privileges to the selected domain The specified credentials will be used to connect to all computers in the domain to retrieve report infomation f you want to specify altemate Domain Administrator credentials you may do so by clicking on the Add button below Click Add domains from forest option to enumerate domains from a diferent forest and then supply necessary credentials for the selected domain FA Add Ar Edit S Delete 4 Connect 4 Add domains from forest D User Connection Profil A Ee E Voyager local voyager adminusers Connected Click Cancel to abort the add process of the domain server to the Domain Credentials list 20 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 5 Edit a Domain Server To Edit a domain server in the Domain Credentials follow the steps given below 1 Launch Domain Credentials window 2 In the Domain Credentials window select any row domain Click Edit button to Edit an existing domain server in the list as shown below credential
77. d will be displayed as shown below Entries Imported This window shows the lisk of entries imported Host Mame Domain Mame RD45 PATHFINDER RO49 40VENTURE ROSS 40VENTURE o Changes to the external text file will not automatically be reflected in the Scan Profile You need to edit the Scan Profile and re import the updated computer list from the file D Importing list of IP addresses from a text file scan Profile Computers x You can specify 4 computer list by using either the Import option or by selecting computers from the network Or you may select specific versions of Windows Profile Name Research Computers Profile Select computers from network Select specific Windows version s Import list of computers From text File Import list of IP addresses From text File File CiUsersVAdministratorDesktopVvorkStationsList txt Mote The file should contain valid IP addresses wih each entry in a separate Click here to views a sample Import Verity Imported OK Cancel i Select Import list of IP addresses from text file option il Click browse button to select a file that contains the list of IP addresses to be imported 183 Chapter 7 Scan Profiles Manager iil In the Select File dialog that shows up select a text txt file and then click Open iv Click Import button to import the list of IP addresses from the selected file NOTE o The text file
78. dd From to load the list of shares Import bo import a list of UNC Folder paths From a text File Select a Folder in the list below and Click Edit Folder Options to modify the default properties For scanning each Folder Share Folder UNC Path Scan Profile Shares Frequent Scans ri Folder Path Include sub folders Folder level Add From WRD49 address True All WRD4SINTFS Bulk Share True al susie WED4S NTFS BulkTest Share True All WAD4FS NTFS Security Manager True All WRD49 Test share Folder True All Remove Do nok display Folders thak have the same permissions as the parent Folder Edit Folder Options E Include group membership information Include SIC gt In the succeeding steps select needed details for generating reports for selected shares Scan Profiles Users Groups and Power Export Tool Off line Report Generation You can apply a Scan Profiles Shares to permissions reports using Power Export Tool for off line generation X Power Export Standard Reports a Shares and Resources Scheduled Tasks amp Users and Groups iin Domains gt Click on toolbar button in the gt Select any one of the permissions reports listed above and click Next to proceed gt In the next step select the option Select a Scan Profiles Shares as shown below 206 Chapter 7 Scan Profiles Manager A Power Export Built in Reports Step 2 of5 Shared Folder Selection
79. ders files path s and skip the report generation if errors were encountered during the validation option It will then email the error s encountered during the validation process to users 7 You may select Include Error Details for including the error information of folders files into report data 8 Click Next to proceed to the Next step 146 Chapter 6 Power Export Step 3 Delivery Options oR Power Export lt Standard Reports Step 4of6 Delivery Options Select the report delwery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mn dd hh mm ss under the task name folder Export Type HTML Export Export Path C Users Public Documents ARKWE 8 x Export C E mail ay Note This evaluation version exports e mails only the first 10 records 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path 147 Chapter 6 Power Export Click Additional E mail Settings button to specify optional e mail settings as shown below Additional E mail Settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From amempathfinder local Io Tom Fordtpathtinder local
80. dministrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators BUILTIN Administrators Allow Allow Allow Allow Allow Allow Full Control Full Control N Full Control Full Control Full Control Full Control Full Control Full Control Full Control Change Create Fi Create F Full Control List Folde Read Att Read Ext Read Per This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder subfolders and files This folder only This folder only This folder only Subfolders and files only This folder only This folder only This folder only This folder only 36 CHAPTER 2 Standard Reports 3 3 How to View Users and Groups Information A Standard Reports ga Domains l Shares and Resources Policies gt ja Events t Ef Privileges a Services t 2 User Groups Click on g Group Members d Status a Logon to view the following information User Name Full Name Description Home Path Logon Script and User Profile Path 48 Users and Groups General RD40 Se Q Refresh P Filter Export GE Customize
81. do RD40 Voyager l Warning 7 a kaa 08 22 30 PM The winlogon notification subscriber widintFy RD40 Voyager l information S we 08 22 31 PM The winlogon notification subscriber Widntfy RD40 Voyager I Information G amp Workstations 08 26 12 PM The Desktop Window Manager has e Desktop Window RD40 Voyager l Information fl RD71 08 26 11 PM Windows detected your registry file i Microsoft Windo RD40 Voyager Warning S RD72 10 10 38 PM svchost 2788 The database engine ESENT RD40 Voyager I Information S rp73 10 10 39 PM svchost 2788 The database engine ESENT RD40 Voyager I Information S RD83 10 10 39 PM svchost 2788 The database engine ESENT RD40 Voyager I Information S RD84 10 10 39 PM svchost 2788 The database engine ESENT RD40 Voyager Information ross 10 10 39 PM svchost 2788 The database engine ESENT RD40 Voyager l Information 10 10 39 PM svchost 2788 The database engine ESENT RD40 Voyager I Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyager I Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyager I Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyager I Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyager l Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyage
82. dows Profile Mame Profile E Select computers From network Select specific Windows version s Import list of computers From text File C Import list of IP addresses From text File Window s Versions Select specific domains Windows Server 2008 ADVENTURE F Windows Wista E DISCOVERY Windows 2003 Server PATHFINDER F Windows XP Professional E SSPRO F Windows 2000 Professional J E VYASPINLAB F Windows 2000 Server F Windows NT Workstation I lance ot KIT Mm Cancel I Choose Select specific Windows version s option II Select one or more Windows versions Only computers running the selected Windows version will be included in the computer list II You may optionally select specific domains from the list of domains to include computers only from the selected domains If you choose not to select any domains then the Scan Profile includes all domains in the network NOTE o This type of profile is dynamic in nature in that the list of computers are prepared at run time that is at report generation time 181 Chapter 7 Scan Profiles Manager C Importing list of computers from a text file scan Profile Computers You can specify a computer list by using either the Import option or by selecting computers from the network Or you may select specific versions of Windows Profile Marne Profile Select computers From network 0 Select specific Windows
83. dventure scholes 5 Click Finish to save the Users Groups profile for future use 192 Chapter 7 Scan Profiles Manager 8 7 How to Manage Scan Profiles Users Groups View Window Help Customize Filter Export E mail g Te acan Profiles Manager Computers Fg YEO Configuration Settings e Usersand Groups Fil Click Profiles Manager Users Groups The Scan Profiles Manager Users Groups shows to launch the Scan the list of available profiles ES scan Frofile Manager Users Graups Pmi fou can setup Scan Frofiles Users Groups to scan a subset of users in servers and save these profiles for repeated use This window lists available profiles Click New to create a new profile Click Edit to modify selected profile Click Delete to delete a profile Click Preview to view the contents of a profile Frequent Checks Restricted sers Roaming Users Delete Preview The Scan Profiles Manager allows you to perform the following operations Create a new Scan Profile Users Groups Edit an existing Scan Profile Users Groups Delete a Scan Profile Users Groups Yv V V WV Preview the list of users and groups in a Scan Profile Users Groups 193 Chapter 7 Scan Profiles Manager Create a new Scan Profile Users Groups 1 To create a new Scan Profile Users Groups click New 2 Follow the steps as outlined in How to create Scan Profiles Edit an existing Scan Profile Users Groups
84. e report generation and Power export tool Scan Profiles Users Groups and Interactive Report Generation Perform the following steps for applying Scan Profiles Shares to permission reports in Interactive report generation 204 Chapter 7 Scan Profiles Manager Built in Reports a Shares and Resources R Users and Groups an Domains gt Click on Select any one of the permissions reports listed above and click next to proceed under Built in Reports in the tool bar V gt In the next step select the option Select a Scan Profiles Shares as shown below Built in Reports List of permissions for folders Step 7 of Select server s for Shared Folders list Enter the Full path of a Share or Shared Folder Click Add From to load the list of shares Import bo import a list of UNC Folder paths From a text File Select a Folder in the list below and Click Edit Folder Options to modify the default properties For scanning each Folder Share Folder UNC Path Scan Profile Sharesi Select a Profile Folder Path Include sub folders Folder level Add From gt In this step the list of shares present in Scan Profile Shares will be loaded to the selected account list as shown below 205 Chapter 7 Scan Profiles Manager Built in Reports List of permissions for folders Step 7 of Select server s for Shared Folders list Enter the Full path of a Share or Shared Folder Click A
85. e available users and groups from Report Name List of permissions For specific users and groups on Folders Enter account name Kb addtolist Accounts fram domainiserver Browse and Select Selected Accounts Account Mame Account Type A m ar maaa rm a ee EET a A Power Export Built in Reports step 2 of6 User Group Selection Select a server or a Scan Profile Computers or a Scan Profile UsersiGroups to retrieve available users and groups from Report Mame List of permissions for specific users and groups on Folders Enter account name HLaddtotist Accounts from domainiserver Browse and Select Accounts from Scan Profiles UserssGroups Frequent scans oe Selected Accounts TREELAB Administrator User TREELAB adminuser 1 User TREELAB adminuserz User TREELAB adminusers User TREELAB alberto User TREELAB barton User TREELAB shane User paton User 4 126 Chapter 6 Power Export gt Use Select a Scan Profile Users Groups option to use the users and groups added in the profile For more information on Scan Profiles click About Scan Profiles Users Groups 1 Select the user or group for which you wish to run the permissions report 2 The selected users will be added to the wizard as shown above 3 Click Next to proceed to the Next step Step 3 Shared Folder Selection rs Power Export Built in Reports Step 3of6 Shared Folder Selection Enter the full path of a Share or Sh
86. e generated The name of the XLSX file will be the name of the report and is stored in the specified destination path if Export to time stamped folder option is cleared The XLSX file will be stored under a sub folder of the form YYYY MM DD HH MM SS under the specified export path if Export to time stamped folder option is set In CSV file format the information is stored as comma separated values For each report a CSV file will be generated The name of the CSV file will be the name of the report and is stored in the specified destination path if Export to time stamped folder option is cleared or under a sub folder of the form YYYY MM DD HH MM SS under the specified export path if Export to time stamped folder option is set In SQL table format the information is stored as SQL tables in the application database in the specified SQL server based on the selected SQL database option For each report a separate table will be created The name of the table will be the name of the report In HTML file format the information is stored as an html file For each report a HTML file will be generated The name of the HTML file will be the name of the report and is stored in the specified destination path if Export to time stamped folder option is cleared or under a sub folder of the form YYYY MM DD HH MM SS under the specified export path if Export to time stamped folder option is set 99 Chapter 5 Additional Features 6
87. e logon Number of previous logons to cache in case domain controlleris not available Not Defined 10 logons Interactive logon Require Domain Controller authentication to unlock workstation Disabled Interactive logon Prompt user to change password before expiration Interactive logon Smart card removal behavior 5 days No Action User Account Control Behavior of the elevation prompt for administrators in Admin Approval Mode Prompt for consent for non Windows binaries User Account Control Behavior of the elevation prompt for standard users Interactive logon Do not require CTRL ALT DELETE i Prompt for credentials Interactive logon Do not display last user name Interactive Logon Display user information when the sessionis locked User Account Control Detect application installations and prompt for elevation User Account Control Run all administrators in Admin Approval Mode User Account Control Only elevate UIAccess applications that are installed in secure locations User Account Control Allow UIAccess applications to prompt for elevation without using the secure desktop User Account Control Virtualize file and registry write failures to per user locations Standard Reports 4 Domains rg Users and Groups wml Shares and Resources id aF Services Click TII Password Events Account Lockout d Audit User Rights Assignment Security Options t
88. ection process is complete the report would be generated in a report window as shown below a Built in Reports List of permissions for folders lo fo i Refresh Data 3 Export Egy E mail Find E Report Details Report Name List of permissions for folders Generated on 20 Jul 2011 05 14 53 Phi Status Canceled Folder Path Sub Folders Owner User Mame SID Account Type Access Type Inherte Security Apply To WRD Address Address NT AUTHORITY BUILTIN Administrat 5 1 5 32 54 Group Allow YES Full Control This Folder subFolder F NT AUTHORITY SYS 5 1 5 18 Well Known Sid Allow Full Control This Folder subfolder NT AUTHORITY Aut S 1 5 11 0 Well Known Sid Alloy Read This Folder subFolder TRDA 40MIN ADMINS NT SERVICES Tr BUILTIN Users 5 1 5 32 5 Group Allow Fead and Execul This Folder only NT SERYICE Trusked 5 1 5 80 99 Well Known Sid Alloy Full Contral Subfolders only This Folder only NT AUTHORITY SYS 5 1 5 18 Well Known Sid Allow Full Contral SubFalders and Files t BUILTIN Administra S 1 5 32 54 Group Alloy Modify This Folder only Full Control SubFolders and Files t NT SUTHORITY SYS 5 1 5 18 Well Known Sid Allow Modify This Folder only Aii 59 CHAPTER 3 Built in Reports How to view Built in Permissions Reports List of Permissions for Specific Users and Groups on Files This report allows you to view file permissions for specific users and groups Built in Reports a Shares and Resources R Users and Groups
89. ed domain reports The selected domains will be added to the wizard as shown below 170 Chapter 6 Power Export Step 7 of6 Domain Selection For each of the following reports select the list of domains for which you would like to generate the report Double click on a report or click 4dd Domains The report for each of the selected domains will be exported as a separate file List of trusted and trusting domains Domain Mame List of machines with their O5 and service pack RESEARCHLAE TREELAB SSLAB List of Windows Servers List of Domain Controllers List of Application Servers 115 Exchange Server SQL Serve List of machines that run TOPIP services FTP telnet etc List of machines that have auditing enabled for disabled Add Domains 3 Click Next to proceed to the next Step 171 Chapter 6 Power Export Step 3 Report Criteria Optional A Fower Export Built in Reports Step 3 of 6 Report Criteria Optional You may specify a criteria for each of the follaying reports to fitter data Click Next to keep the current criteria as described under Criteria Description or click Edit Criteria to modity it X A ay Domain Reports Criteria Description svete List of trusted and trusting domains Domains Trusted sesennenes List of machines with their 05 and service pack arenaene List of Windows Servers e E List of Domain Controllers seeeetnee B List of Application
90. er SOL Server etc List of machines that run TCPIP services FTP telnet etc E List of machines that have auditing enabled or disabled 75 CHAPTER 3 Built in Reports Step 2 Select Domain s Server s Select the server s Domain s or Select a Scan Profile for which the report needs to be generated The default option selected is All Domains for all the reports Built in Reports List of trusted and trusting domains Step2Zof3 Select Domain s Server s You can either generate the report across domains by selecting All Domains or for a specific domain by selecting the Select Domain option E Select Scan Profile Select a Profile Click Next to proceed to the next step 76 CHAPTER 3 Built in Reports Step 3 Select Report Criteria To view the part of the report that is of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report Step 3of3 Select Report Criteria To view the part of the report that is of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below Qj Refresh Data p Export 5 E mail Report Details Report Name List of tru
91. er Window Manager Group BUILTIN Pre Windows 2000 Compatible Access BUILTIN Administrators NT AUTHORITY NETWORK SERVICE NT AUTHORITY LOCAL SERVICE NT AUTHORITY Authenticated Users Everyone Create a pagefile BUILTIN Administrators Debug programs BUILTIN Administrators 43 CHAPTER 2 Standard Reports Standa 4 a Users and Groups Domains rd Reports lt a Shares and Resources a aF Services Click information rl o Password Events amp Account Lockout t S Audit rg User Rights Assignment IP Security Policy Name Value Q Refresh 36 Export 7 Fi ter HE Customize Scan Profiles Computers Eg E mail GA Password Account Lockout ZF Audit 2 User Rights Assignment A Securty Options M IP Securty Enterprise POLICIE c RD83 4a RESEARCHLAB S E VOYAGER a a Domain Controlle to view the following Generated on 29 Dec 2014 06 41 37 PM Status Success Filter Not Applied Policy Name Recovery onsale Allow automaticadministrative igon Value Disabled Recovery console Allow floppy copy and access to all drives and all folders Devices Restrict CD ROM access to locally logged on user only Disabled Not Defined Devices Allowed to format and eject removable media Not Defined Devices Restrictfloppy access to locally logged onuser only Interactiv
92. er subfolders and files RD40 NETLOGONNETLOGON BUILTIN Administrators BUILTIN Administrators Allow Change This folder only NETLOGON BUILTIN Administrators BUILTIN Administrators Allow Create Fi This folder only NETLOGON BUILTIN Administrators BUILTIN Administrators Allow Create F This folder only NETLOGON BUILTIN Administretors BUILTIN Administrators Allow Full Control Subfolders and files only NETLOGON BUILTIN Administrators BUILTIN Administrators _ Allow List Folde This folder only NETLOGON BUILTIN Administrators BUILTIN Administrators Allow Read Att This folder only NETLOGON BUILTIN Administrators BUILTIN Administrators Allow Read Ext This folder only NETLOGON BUILTIN Administrators BUILTIN Administrators Allow Read Per This folder only How to view permissions of files in a share Standard Reports Domains a Users and Groups gal Shares and Resources E Shares Policies t Folders Click a Services i tab The Files and Permissions dialog appears eSources Files RUGL Export F Filter Customize Scan Profiles Computers 54 E mail All shares Select share s 1 Do not display files that have the same permissions as the parent folder You can view permissions of files in a share or for all the shar
93. ercentage Currently Logged on User User Logged on Since Time Elapsed since Logon and Status Recorded as on NOTE The Current Local Time field displays the local time of the target computer reported in Host Name field The Status Recorded as on field displays the time at which report data was collected for the respective target computer om Current Status Summary RESEARCHLAB Refresh p Export F Filter Customize ah E mail Note All System Info reports require WMI to be installed and enabled Click here for more information Status Success Filter Not Applied Percentage CPU Busy Currently of Memory in 3 Used percentage Logged on User Log User on Since Current Local Last Boot Up System Time Time Uptime W202013 4 22 04 PM 3720 2013 11 28 21 ODay s 4Hr s 5 75 T No user has logged in W202013 4 22 05 PM 3 20 2013 10 22 16 0 Day s SHr s 62 38 0 RESEARCHLAB ad minuser2 3202013 RESEARCHLAB ad minusers 20 2013 da Add Domains 93 CHAPTER 4 System Information 5 9 How to View Environment Info Reports ah Network Configuration amp Operating System amp Hot Fixes a Printer Info Hardware Info E Display Configuration Internet Explorer Configuration Current Status Click on Environment Information available under each tab as listed below under System Info button to view NOTE For information on restricting the domain scan for generating Environment Inf
94. es in the selected server by selecting All shares option or Select share s option respectively 35 CHAPTER 2 Standard Reports You can also optionally include the sub folder s information by selecting the Include sub folders option The files having permissions identical to the parent folder would show up with Same as parent in both User Name and Security fields in the report If you do not want files with identical permissions as the parent folder reported then select the Do not display files that have same permissions as the parent folder option This option will not report files with identical permissions as the parent folder To view up to a certain level of sub folders and files select the Traverse only n level s of sub folder in the share option and specify a sub folder level where the levels are numbered as follows server sharename Level 1 Level 2 Level 3 NOTE The Include sub folders option defaults to enumerating all the sub folders unless you specify a sub folder level in Traverse only n level s of sub folder in the Share option NOTE The Do not display files that have same permissions as the parent folder option would be enabled by default The report would be displayed as shown below wt Shares and Resources Files RD40 Qj Refresh Export Y Filter Customize Scan Profiles Computers E E mail 3 Enterprise SHARES AN akd Shares 1 Foiers L Fies g
95. essor Intel Pentium Processor Disk Space amp Memory 512 MB RAM and minimum of 20 MB of free disk space Operating System Windows 8 Windows 7 Windows Vista Windows XP Windows Server 2012 Windows Server 2008 R2 Windows Server 2008 Windows Server 2003 Windows Server 2000 with NET Framework 4 0 or higher with the latest service packs Database Microsoft SQL Server 2008 Enterprise Standard Developer Express edition or Microsoft SQL Server 2005 Enterprise Standard Developer Express edition running in local remote computer with latest Service Pack Software MDAC v2 5 2 6 2 8 For the Computers Reported by ARKWE Windows 8 Windows 7 Windows Vista Windows XP Windows Server 2012 Windows Server 2008 R2 Windows Server 2008 Windows 2003 Windows 2000 with Microsoft Remote Registry Service enabled CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 1 3 Who Can Use ARKWE Organizations running Microsoft Windows Servers can greatly benefit from ARKWE It is a powerful reporting tool for Windows Server Administrators System Administrators can monitor and manage Microsoft Windows Servers across the enterprise network in any location You can connect to a Windows Server if you are part of global administrator s group Typical Users Systems management personnel System Administrators Other Windows network product developers Trainers and educators VV V V WV Enterpri
96. etails for generating reports for selected Users and Groups Scan Profiles Users Groups and Power Export Tool Off line Report Generation You can apply a Scan Profile Users Groups to permissions reports using Power Export Tool for off line generation X Power Export 4 Standard Reports yal Shares and Resources Scheduled Tasks amp Users and Groups 1 Click on i Domains button in the toolbar 2 Select any one of the permissions reports listed above and click Next to proceed 3 In the next step select the option Select a Scan Profiles Users Groups as shown below 197 Chapter 7 Scan Profiles Manager om Power Export Built in Reports Step 7 of6 User Group Selection Select a server or a Scan Profile Computers or a Scan Profile UsersAsroups to retrieve available users and groups from Report Name List of permissions For specific users and groups on Folders Enter account name 2S Add to list ri Accounts fram domainiserver Browse and Select Accounts from Scan Profiles Users Groups Select a Protile amp Selected Accounts Account Mame Account Type gt In this step the list of users and groups present in Scan Profile Users Groups will be loaded to the selected account list as shown below 4 Power Export Built in Reports Step 2 of6 User Group Selection CX Select a server or a Scan Profile Computers or a Scan Profile UsersAsroups to retrieve a
97. ete to delete a profile Click Preview to view the contents of a profile Database Servers e Resource Serve Winzkill Workstations Edit Delete Preview About Scan Profiles w The Scan Profiles Manager allows you to perform the following operations Create a new Scan Profile Edit an existing Scan Profile Delete a Scan Profile VV V WV Preview the list of computers in a Scan Profile Create a new Scan Profile 1 To create a new Scan Profile click New 2 Follow the steps as outlined in How to create Scan Profiles 185 Chapter 7 Scan Profiles Manager Edit an existing Scan Profile 1 To edit a Scan Profile click Edit button in the Scan Profiles Manager The Scan Profile Dialog will appear on the screen which will allow you to edit the selected Scan Profile 2 During edit operation you can modify the computer list however you cannot modify the type of the Scan Profile Delete a Scan Profile To delete a Scan Profile select the profile you want to delete and then click Delete button The selected Scan Profile will be deleted permanently Please note that reports associated with the Scan Profile deleted may fail to run when generated Preview the List of Computers in a Scan Profile To preview the list of computers in a Scan Profile select a Scan Profile and then click Preview button The computer list will be displayed in a tree view as s
98. feature provides reports on the following resource categories Y VV VV V V V Network Configuration Operating System amp Hot Fixes Printer Info Hardware Info Display Configuration Internet Explorer Configuration Current Status Environment Info 80 CHAPTER 4 System Information 5 2 How to View Network Configuration Reports System Info Network Configuration Operating System amp Hot Fixes Printer Info Hardware Info Display Configuration Internet Explorer Configuration Current Status Ee ee ee Environment Info Click on Configuration information available under each tab as listed below under System Info button to view Network NOTE For information on restricting the domain scan for generating Network Configuration reports please see How to scan specific servers in a domain Click F Configuration tab to view the following information Network Adapter Name IP Address Subnet Mask DHCP Enabled Default Gateway DHCP Server DNS Servers DNS Domain DHCP Lease Obtained and DHCP Lease Expires i anmas i 2l Network Configuration IP Configuration RESEARCHLAB o Q Refresh p3 Export Filter GE Customize 5 E mail Find Note All System Info reports require WMI to be installed and enabled Click here for more information aE Enterprise NETWORKC amp IP Configuration y Login Profiles Hl NetworkAdapters Network Protocols Generated on 20 Mar
99. figuration Internet Explorer Configuration Current Status Environment Info Click on Configuration information available under each tab as listed below under System Info button to view Printer NOTE For information on restricting the domain scan for generating Printer Configuration reports please see How to scan specific servers in a domain Ge Printers PF Click biua tab to view the following information Host Name Printer Name Description Location Share Name Port Name and Driver Name Generated on 20 Mar 2013 03 55 34 PM 86 CHAPTER 4 System Information 5 5 How to View Hardware Configuration Reports System Info ah Network Configuration amp Operating System amp Hot Fixes a Printer Info Hardware Info Display Configuration Internet Explorer Configuration Current Status Click on Configuration information available under each tab as listed Environment Into under System Info button to view Hardware NOTE For information on restricting the domain scan for generating Hardware Configuration reports please see How to scan specific servers in a domain Click Summar tab to view the following information Host Name Number of Processor s System Model System Manufacturer System type Total Physical Memory MB BIOS Version Boot Device Windows Directory System Directory System Locale Processor s Network Adapter s
100. files Click Next to the Proceed to the Next Step 57 CHAPTER 3 Built in Reports Step 2 Select shared folders Select one or more servers to retrieve available shares Built in Reports List of permissions for folders Select Shares View and select Shares and Folders available From computers displayed below Step 2of2 Selec Enter the Full path Folder paths From a properties For scan share Folder UNC P EJ Scan Profiles Computers Folder Path ce Ci Sample Scans Add From rr Domains A B DISCOVERY l Import n a Domain Controllers a RD46 of WRD46 4RKAD Screen Shots A wrpseics Ly HRED Close Built in Reports List of permissions for folders Step 2 of 2 Select server s for Shared Folders list Enter the Full path of a Share or Shared Folder Click Add From to load the list of shares Import bo import a list of UNC 4 Folder paths From a text File Select a Folder in the list below and Click Edit Folder Options to modify the default FEE properties For scanning each Folder Share Folder UNC Path Scan Profile Shares Sample Scans ri Folder Path Include sub folders Folder level Add From WRD49 address True All WRO4S ADMINS True All WARDS CF True All WAD4FS DF True All WADE S True All WRO49 Exchangecagk True All WAD4S FS True All WADE True All 4 M Do not display folders that have the same permissions as the parent folde
101. fy a Domain name to retieve computers present in domain Clear the Log on using current user checkbox to specify altemate credentials for connecting to the domain or Server Domain or Server Name Log on using current user User Name phoente Administrator Password 254 Add domain server Specify a Domain name to retrieve computers present in 29 domain Clear the Log on using current user checkbox to specify altemate credentials for connecting to the domain or Server Domain or Server Name voyager Log on using current user User Name voyageradminuser3 Password eeseesea Store the above credentials in Microsoft windows O Stored User Name and Passwords applet 9K Cancel 4 Specify user name and the corresponding password to connect to the specified domain or server 19 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 5 6 7 Store the above user credential in Microsoft Windows Stored User Names and Passwords applet ARKWE allows the user to enter different user credentials to connect to the domain server Uncheck the checkbox Log on using current user if you like to connect to the domain server using a different user context ARKWE will store the user credential to connect to domain server in the Microsoft Windows Stored User Names and Passwords applet Credential Manager for security reasons The stored user profile is tie
102. guration Reports ccccscsscscssecsccscscecsccscsceccccscscsccccecsces 81 5 3 Howto View Operating System amp Hot Fixes Reports cccscscscscscscsccccccccccecececscececs 84 5 4 How to View Printer Configuration Reports sccscscsssccscscccsccscsccccccscsceccecscscsceccecnces 86 5 5 How to View Hardware Configuration Reports ccsccccccscsssssscscscccsccscsceccccscsceccecececes 87 5 6 How to View Display Configuration Reports sccscscsscccscsceccccscsccccccscsceccccscscecessecces 90 5 7 Howto View Internet Explorer Configuration Reports ccccccscscssscsscscecccscsceccccececes 92 5 8 How to View Current Status Reports ccscscccsccccccccccscscscscncscscscscsceccccccecececececececececs 93 5 9 How to View Environment Info Reports cccccccscscscsscscscsccccccscsccccccscsceccecscscsceccececes 94 6 PAGIMONG FEGUUles aiiisitenelsiticns te rancrataastiecnses a E 95 6 1 HOW TO CUSTOMIZE fields sssannsii send seven ueeciecwuniaecasuedetwebesdanunswoemeuteeveeacanrcdeteaes 95 6 2 How TO AODIV FILO So cccastncenscivenccusnnwhacueen satan sinvacewoneansucinnwhuesaen E en a e ia 96 6 3 H w to Refresh Data siiras toian saaa a aa Seven aa iaa araa aaa anana 98 6 4 HOW tO EXDOre Data aos a dei snateacasnelaiea ie iecdee i ciclanedn ape area oe 98 65 Howto E mail Data sionis cacendcvalussetcarcentietcunean 100 6 6 How to Find Data in a Report sessessesescescescesses
103. he Scan Profiles Manager allows you to perform the following operations Create a new Scan Profile Shares Edit an existing Scan Profile Shares Delete a Scan Profile Shares Y V V WV Preview the list of Shares in a Scan Profile Shares Create a new Scan Profile Shares 1 To create a new Scan Profile Shares click New 2 Follow the steps as outlined in How to create Scan Profiles 202 Chapter 7 Scan Profiles Manager Edit an existing Scan Profile Shares 1 To edit a Scan Profile Shares click Edit button in the Scan Profiles Manager The Scan Profile Shares wizard will appear on the screen which will allow you to edit the selected profile 2 During edit operation you can modify the Shares list Delete a Scan Profile Shares To delete a Scan Profile Shares select the profile you want to delete and then click Delete button The selected Scan Profile Shares will be deleted permanently Please note that reports associated with the Scan Profile Shares deleted may fail to run when generated Preview the List of Shares in a Scan Profile Shares To preview the list of shares in a profile select a profile and then click Preview button Profile Name See share Mame WEDS Address IRD4S NTFS Bulk Shares WADASINTES BulkTest Share WAD4ASATES Security Manager WAD4S Test share Folder The Preview window allows you to view what shares will be included in the profile 203 Chapter 7 Scan Profiles
104. he reports using the options below In case of export option for each task a sub folder with the task name will be created under the specified export path X All selected reports will be exported to a time stamped folder in the format yyyy mm dd hh mm ss under the task name folder W Export Export Path Users Public Documents ARKWE 8 x Export L E mail ay Note This evaluation version exports e mails only the first 10 records ces 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path 3 Click Next to proceed to the next step 155 Chapter 6 Power Export gt Click Additional E mail Settings button to specify optional e mail settings as shown below Additional E mail Settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From jamepathtinder local To Tom Fordi pathfinder local subject Reports generated by AAKWE Please find the attached report generated by Admin Report Kit For windows Enterprise Cancel 156 Chapter 6 Power Export Step 5 Schedule Settings ae Power Export Built in Reports Step 5 of 6 Schedule Settings Enter unique task name and specity ts schedule settings Task Name Builtin Report Task Specify an account that has sufficient privileges to retrieve report information From the selected Domains Servers Run 45 PATHFINDER adminuser
105. he task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yyyy mm dd hh mm ss under the task name folder Soar W Export Export Path Wsers Public Documents WREWE 8 x Export _ E mail ay Note This evaluation version exports e mails only the first 10 records aed 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path Click Additional E mail Settings button to specify optional e mail settings as shown below 129 Chapter 6 Power Export Additional E mail Settings Ab You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server rd44 From jarnie nathtinder local To Tom Fordtpathtinder local Subject Reports generated by ARK WE Please find the attached report generated by Admin Report Kit For Windows Enterprise Cancel Step 5 Schedule Settings x Fower Export Built in Reports StepSofo Schedule Settings Enter a unique task name and specity ts schedule settings Task Mame Folder Specific User Perm Specify an account that has sufficient privileges to retrieve report information From the selected Domains Servers Run As TREELAB adminusers Set Password Schedule Task Daily Start time g4 S PM Advanced Schedule Task Daily Every 1 davis Cea Gite ae 130 Chapter 6 Powe
106. hen supply necessary credentials for the selected domain 10 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Fi Add H Edit H Delete ty Connect Add domains from forest RD83 HULK RDJ Administrator acted For more information on Domain Credentials please refer Domain Credentials Click Finish to save the configuration details Using the Configuration Settings Dialog You may directly modify the configuration settings once you get familiar with the user interface You may access the Configuration Settings menu from the Tools menu in the application Once you open the Settings window you will see the different modules for configuration 11 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Fh Add A Edit GL Delete lt Connect A Add domains from forest Domain Server Name Forest Name User Name Status i O E ROS HULK RDJ Administrator Connected FA Domain Credentials 12 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Configuration Settings 2 1 1 Database Settings ARKWE may be configured to use either MS Access MDB or SQL Server database for its data storage to generate reports If you choose SQL server ARKWE requires an SQL Server running SQL Server 2005 2008 2012 Enterprise Standard Express editions to connect and create a new application database ARKWE will connect to the specified SQL Server based on authentication mode
107. hich the profile is created Click Show Domains button to add the domains in the specified forest to the list and select the desired domains in the list Click OK to add the selected domains to the Domain Credentials list as shown below 25 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Specify a Forest Hame The Forest Name will be used to retrieve domains present in the forest Clear the Log on using current user checkbox to specify alternate credentials for connecting to the forest Forest Mame pathfinder local Note The ONS name you specity here must be visible from this computer This computer must be able to resolve the specitted DNS name Log on Using curent User how Domas 2 User Name Pathfinder adminuser Domains in forest pathfinder lacal Password TTTTTTTT Store the above credentials in Microsoft windows 7 Stored User Hame and Passwords applet o Cancel ial for Domain Director Servers The application by default uses the curently logged on user rs and shares and to collect NTFS permissione data If you want to specify alternate ale you may do so by clicking on the Add button below Click Add domains from forest ee Settings A Add H Edit A Delete ty Connect A Add domains from forest i Domain Hame Forest Name User Hame Status adventure Adventure local adventureSadminuser Connected pathfinder local Pathfinderadrminuser 26 CHAPTER 1 About Admi
108. hown below Preview Test Servers ae fa PATHFINDER aps The Preview window shows the list of domains and computers selected in the Scan Profile if the computer list was either imported or selected from the network Whereas if specific Windows versions were selected then only the computers that match the selected Windows versions will show up Furthermore if specific domains were associated with the Scan Profile then only the selected domains will show up otherwise all the domains in the network will show up The Preview window allows you to view what computers in the network will be included in the profile 186 Chapter 7 Scan Profiles Manager 8 4 How to Apply Scan Profiles Computers You can apply a Scan Profile to one or more reports to restrict the list of computers during report generation This is especially useful if you want to generate reports for a subset of computers This page covers the following topics with regard to usage of Scan Profiles gt Scan Profiles and Power Export Tool off line report generation gt Scan Profiles and Interactive Report Generation Scan Profiles and Power Export Tool off line report generation You can apply a Scan Profile to one or more reports using the Power Export Tool for off line generation to restrict the domain scope and to scan and collect data for a subset of computers in the network The report data will be collected for all computers in the applied Scan Profi
109. id sys C Windows system32 drivers arc sys Microsoft ACPI Dri ACPI Microsoft ACPIEx D acpiex ACPI Process orAgg acpipagr ACPI Power Meter AcpiPmi ACPI Wake Alarm Dacpitime adp94xx adp94xx adpahci adpahci adpu320 adpu320 Ancillary Function AFD Intel AGP Bus aan a AMD K8 Processor AmdK8 AMD Processor Driy AmdPPM amdsata amdsata amdsbs amdsbs amdxata AppID Driver THEE Standard Reports Domains Users and Groups Shares and Resources WED BY le ea Policies b Events b Services t General Y Control pendent Click T O y to view the following information Display Name Dependencies Q Refresh X Y Filter EE customize G Scan Profiles Computers Ey E mail Generated on 29 Dec 2014 06 57 23 PM Status Success Display Name AppID Driver 3 VOYAGER Chafilt Cluster Client Failover Filter CSV Mini Filter Driver CSV NameSpace Filter Driver Datascrn DFS Namespace Client Driver DFS Replication ReadOnly Driver Windows All User Install Agent Application Identity Application Information Windows Audio Base Filtering Engine 50 Chapter 4 Built in Reports 4 1 About Built in Reports Built in reports are a set of predefined reports that are based on some of the common tasks in Systems manage
110. iin Domains Click on button under Built in Reports button in the toolbar The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time i Built in Reports List of permissions for specific users and groups on files Step 1of3 Select Report Select a report from the available Built in Reports E 4 Permissions This report lists the file permissions assigned to a i E List of permissions for folders specific usergroup account bee List of permissions for specific users and groups on folders sn List of permissions for specific users and groups on files i E List of permissions for files Click Next to Proceed to the Next step Step 2 Select User Group Accounts Select user and or group accounts for which you would like to view the permissions for folders files 60 CHAPTER 3 Built in Reports Built in Reports List of permissions for specific users and groups on files Step 7of 3 Select User Group 4ccount s Select user andor group accounts For which you would like bo view the permissions on files folders Enter account name Accounts from domainiserver Accounts from Scan Profiles UsersAsroups Selected Accounts Account Mame Adventure adminuser Adventure lan Adventure Ales Adventure Michael Builtin Administrators ALaddtolist Browse and Select
111. il 41 CHAPTER 2 Standard Reports gt User Rights Assignment A Security Options Click al IP Security information Account Lockout Duration Account Lockout Threshold and Reset tab to view the following Account Lockout Q Refresh 3 Export Y Fiter Customize Scan Profiles Computers 54 E mail ecount orkok thrnahold revel Reset Account Lockout Counter After minutes A Password O Security Options Click S IP Security to view the following information Policy Name Log Success and Log Failure 42 CHAPTER 2 Standard Reports IQ Refresh x Epor bien fl tesa Scan Profiles Computers Ea E mail Audit system events Audit logon events Audit object access Audit privilege use Audit process tracking Audit policy change Audit account management Audit directory service access Audit account logon events Password Account Lockout a r Click E IP Security information Privilege Account Name to view the following Replace a process level token NT AUTHORITY NETWORK SERVICE NT AUTHORITY LOCAL SERVICE Generate security audits NT AUTHORITY NETWORK SERVICE NT AUTHORITY LOCAL SERVICE Back up files and directories BUILTIN Backup Operators BUILTIN Server Operators BUILTIN Administrators Log on asa batch job BUILTIN Performance Log Users BUILTIN Backup Operators Bypass traverse checking Window Manag
112. in User Task C Users Publici Documents 4R EWE List of locked out user accounts Click here to view a xiExportiBuiltin User Task Report Mame Servers Domains Searing eee all user Click here to i CO Users Publici Documents 4R EWE accounts Password never expires ick here bo wiew 4 x4Export Builtin User Task etc 4 Log on rights assigned For all accounts Log on locally etc CWsers Publici Documents 4R EWE 8 xExport Builtin User Task C Users Publici Documents 4R EWE List of User accounts Click here to view 5 x Export Builtin User Task Privileges assigned For all accounts Click here to view ee eee eee a ii Click here to view Edit Task Delete Task 168 Chapter 6 Power Export 7 7 Schedule Domain Built in Reports X Power Export Permissions Standard Reports Shares and Resources Scheduled Tasks t Users and Groups Click option under Power Export This will bring up the Power Export Wizard Step 1 Report Selection 4 Power Export Built in Reports Step 1of7 Report Selection Select the desired report s using the checkboxes given below More than one report may be selected in this X category SFA Domains W List of trusted and trusting domains WW List of machines with their OS and service pack W List of Windows Servers MJ List of Domain Controllers M List of Application Servers IIS Exchange Server SQL Server etc IM List of m
113. ing steps select needed details for generating reports for selected shares 207 Chapter 7 Scan Profiles Manager References 8 13 Troubleshooting If and when a problem arises please forward the following information to Support vyapin com to revert back to you with a solution These files will be available where ARKWE is installed Error Log File E g lt Application Data Folder gt ARKWE 8 x ARKWEErrorLog log NOTE lt Application Data Folder gt is the common area where ARKWE settings will be stored in the machine running ARKWE The lt Application Data Folder gt can be found from the Help gt About screen The default path of lt Application Data Folder gt is as follows a Windows XP Windows 2003 C Documents and Settings All Users Documents b Windows Vista Windows 7 Windows 8 Windows 2008 Windows Server 2012 C Users Public Documents 208 Chapter 7 Scan Profiles Manager 8 14 How to Uninstall ARKWE When you uninstall ARKWE through Control Panel Add Remove Programs applet Windows Installer program will remove only the application files from your machine But the application related files created by ARKWE remain in the computer In order to remove ARKWE worker files completely the uninstall wizard provides a set of cleanup options to perform the cleanup operation based your selection Use this wizard to cleanup the files that are created by ARKWE application selectively and uninstall ARKWE comple
114. k Report Mame Servers Domains List of Windows Servers Click here to view HTML List of Domain Controllers Click here to view HTML List of Application Servers 115 Users Publici Documents ARE WE gs Server SOL Server Click here to view HTML 5 x Export Builtin Domain Task List of machines that run TEPIP Pie isin Ci Users Publici Documents ARE WE services FTP telnet etc A Ee Se Export Builtin Domain Task List of machines that have Hatin Ci Users Public Documents ARE WE auditing enabled for disabled ee 8 x1ExportiBuiltin Domain Task 4 p Edt Task Delete Task 178 Chapter 8 Scan Profiles Manager 8 1 About Scan Profiles Computers You can setup Scan Profiles to scan a subset of computers in the network and save these profiles for repeated use while generating reports useful for repeatedly scanning and reporting on different subsets of computers You can create Scan Profiles in one of the following ways Selecting specific computers in the network Selecting specific Windows versions Importing list of computers from a text file VV V WV Importing list of IP addresses from a text file 179 Chapter 7 Scan Profiles Manager 8 2 How to Create Scan Profiles Computers The Scan Profile Dialog allows you to create or edit a Scan Profile During edit operation the name of a Scan Profile and its type cannot be modified You can access the Scan Profile Dialog from the Scan Profiles Manager
115. kService Remote Desktop Services z INT Authority NetworkService Windows Event Collector NT AUTHORITY NetworkService Windows Remote Management WS Management NT AUTHORITY NetworkService u Application Layer Gateway Service NT AUTHORITY LocalService gp Add Domains Application Identity NT Authority LocalService Standard Reports Domains Users and Groups Shares and Resources b Policies Events b 2 Be de e i Ar General d Dependency Click to view the following information Display Name Service Name Error Control Group and Path 49 CHAPTER 2 Standard Reports rol CUERE y j Exp mo VOYAGER Domain Controllers oo i fm Normal C Windows system32 drivers 1394ohd sys C Windows system32 drivers 3ware sys C Windows system32 drivers ACPI sys C Windows system32 Drivers acpiex sys C Windows system32 drivers acpipagr sys C Windows system32 drivers acpipmi sys Gins eA C Windows system32 drivers adp94xx sys C Windows system32 drivers adpahci sys C Windows system32 drivers adpu320 sys C Windows system32 drivers afd sys C Windows system32 drivers agp440 sys Extended Base C Windows system32 drivers amdk8 sys Extended Base _ C Windows system32 rivers mdppm sys C Windows system32 drivers amdsata sys C Windows system32 drivers amdsbs sys C Windows system32 drivers amdxata sys C Windows system32 drivers app
116. l D AShare Everyone Everyone Allow Read Allow Full Control D AShare BUILTIN Administ Allow Full Control D share22 BUILTIN Administ Allow Full Control D share22 Everyone Allow Full Control SPListX Target D SPListX Target Everyone Allow Full Control D ASPListX Target BUILTIN Administ Allow Full Control SYSVOL C Windows SV Everyone Allow Read Logon server share C Windows SY NT AUTHORITY Allow Full Control Logon server share Domain Application Information Standard Reports Users and Groups Shares and Resources b Policies Ez Applications Events b Services to view the applications installed for a given domain NOTE For information on restricting the domain scan for generating this report please see How to scan specific servers in a domain Q Refresh 3 Export YP Filter Q Customize Sy E mail SF Summary 8 Trust vs Shares z Applications Generated on 30 Dec 2014 10 38 36 AM Status Success Host Name 10 10 10 31 1 0 62 7 3 6 2014 Microsoft Corporation 10 10 10 31 Admin Report Kit 40 10 10 31 AppFabric 11 fo 4 1 2106 32 10 10 10 31 AppFabric 1 1 fo 1 1 2106 32 C Program Files 10 10 10 31 DocKIT for Share 8 1 0 C Program Files 10 10 10 31 MicrosoftAcces 15 0
117. l instances of the application Use a separate database for each instance of the application ar Authentication Mode Windows Authentication Curent logged on user SQL Server Authentication User Name sqllogin3 Password seseesee8 cnca ARKWE may be configured to use either MS Access MDB or SQL Server database for its data storage to generate reports If you choose SQL server ARKWE requires an SQL Server running SQL Server 2012 2008 2005 Enterprise Standard Express editions to connect and create a database ARKWE will connect to the specified SQL Server based on the authentication mode and the user credentials to create and manage its own application databases Database will be created in the specified SQL server based on the following database options whichever is selected 1 Use a single central database for all instances of the application gt A new database will be created in the SQL server by the name ARKWE Inside the ARKWE database separate tables will be created for each installation of ARKWE The table names will be prefixed with the computer name that is running ARKWE application Thus each installation of ARKWE will deploy its own tables based on the computer where ARKWE is installed For example if you install the software on 3 different computers single database with 3 different tables will be created inside the single database and each installed application will generate reports separately inde
118. lable profiles Click New to create a new profile Click Edit to modify selected profile Click Delete to delete a profile Click Preview to view the contents of 4 profile Frequent Scans Sample Profile Delete Preview 199 Chapter 7 Scan Profiles Manager 2 Click New button in the Scan Profiles Manager Shares dialog This action will launch the Scan Profiles Shares dialog as shown below scan Profiles shares Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths from a test file Profile Name Sample Profile Share Folder UNC Path Folder Path Add From Import Remove 1 Enter a name for the profile 2 You may type the UNC path of a folder that is not in the list such as a folder that is not shared and then click Add to add it to the list as shown below scan Profiles Shares Se Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths from a test file Frofile Name Sample Profile Share Folder UNC Path WROSS TestLocagroups Folder Path Add From Import Remove Cancel 3 You may also import a list of UNC paths to shared and non shared folders from a text file by using the Import button 200 Chapter 7 Scan Profiles Manager 4 Click Add From to add list of share folders from computers as shown below View
119. layed below z Add From Import Remove Built in Reports List of permissions for specific users and groups on folders Step 3o0f 3 Select Shared Folder s Enter the Full path of a Share or Shared Folder Click Add From to load the list of shares Import bo import a list of UNC Folder paths From a text File Select a Folder in the list below and Click Edit Folder Options to modify the default properties For scanning each Folder Share Folder UNC Path Scan Profile Shares Sample Scans Y 0 Folder Path WRO49 Address WRD4S ADMIN WARDS C WARDS DF WADE S WRO49 Exchangeoab WARDS FS WADE 4 Include sub folders Folder level True True True True True True True True Do nok display Folders that have the same permissions as the parent Folder Include group membership information Include SID All All All All All All All All Edit Folder Options Add From Import Remove Close 55 CHAPTER 3 Built in Reports You may also type the UNC path of a folder that is not in the list such as a folder that is not shared and then click Add to add it to the list In addition you may also import a list of UNC paths to shared and non shared folders from a text file by using the Import button Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do
120. le However if the applied Scan Profile becomes unavailable during report generation likely to happen if the Scan Profile is accidentally deleted the report data will not be collected at all and will result in an error Furthermore if there are no computers to be found in the Scan Profile for a domain for which the report is being generated then the report generation will fail as well This is likely to happen if the domain is not included in the Scan Profile or none of the computers in the domain are running the Windows version setup in the Scan Profile Scan Profiles and Interactive Report Generation You may also apply a Scan Profile to reports and view the data in interactive mode The way in which a Scan Profile is applied and the data collection methodology adopted Slightly differs in interactive mode from off line report generation mode using Power Export Tool The data collection methodology adopted also depends on the type of Scan Profile applied static or dynamic to the report For instance if a Scan Profile is associated with multiple domains in interactive mode data will be collected only for computers that belong to the currently selected domain On the other hand if there are no computers to be found for the currently selected domain in the applied profile the report data will not be collected at all This is likely to happen if the currently selected domain was not included in Scan Profile if it is a static profile or
121. les Users Groups You can setup Scan Profiles Users Groups to scan a subset of users groups present in computers and save these profiles for repeated use useful for repeatedly scanning and reporting on different subsets of users and groups permissions on share folders gt How to create Scan Profiles Users Groups gt How to manage Scan Profiles Users Groups gt How to apply Scan Profiles Users Groups 8 6 How to Create Scan Profiles Users Groups Perform the following steps to create a Scan Profile Users Groups scan Profiles Manager Computers d Users and Groups Fo 1 Select from the application toolbar This action will launch the Scan Profiles Manager Users Groups dialog as shown below ES scan Frofile Manager Users Graups fou can setup Scan Profiles Users Groups to scan a subset of users in servers and save these profiles for repeated use This window lists available profiles Click New to create a new profile Click Edit to modify selected profile Click Delete to delete a profile Click Preview to view the contents of a profile Frequent Checks Restricted sers Roaming Users Delete Preview 189 Chapter 7 Scan Profiles Manager 2 Click new button in the Scan Profiles Manager Users Groups dialog This action will launch the Scan Profiles Users Groups Wizard as shown below A Scan Profile Users Groupsi Select User Group Account s Select the User andor G
122. lication by default uses the currently logged on user context to enumerate computers shares and to collect report data If you want to specify alternate Domain Administrator credentials you may use this option Configuring Domain Credentials You can access the Domain Credentials settings by selecting the Domain Credentials option in the Configuration Settings window lt 4 Connect 4 Add domains from forest Forest Name User Name Status If you have chosen Active Directory Services under the Computer Enumeration settings you can launch the ARKWE Domain Credentials window within a report window by doing the following 1 Select any one of the reports from the ARKWE main application window For example Standard Reports gt Domains Shares option 2 The action will launch the Domains Shares report window 16 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 3 In the report window at the bottom of the treeview click Add Domains button This action will launch the Domain Credentials window as shown below 4 Domains Shares Enterprise DOMAINS iy Refresh Export F Filter FE Customize 54 E mail Find f Summary 3 Domains Shares Enterprise DOMAINS Q Refresh Export F Filter He Customize 5 E mail 4 Domain Credentials Manage altemate credentials for Domain Directory Servers Specify an account name that has admin privileges to the selected domain
123. list of servers for which you vould like ta generate the report Double click on a report or click Add Servers The report for each of the selected servers will hbe exported as a separate file List of Users and Groups Server Mame 3 List of User accounts TREELABIRDOSO 7 List of Local and Global groups TREELABIRD 1 List of disabled user accounts VSSLABIROOS 7 List of locked out user accounts VSSLABIRDZO Password settings of all user accounts Password never exp yoo ABYRDZ1 J Members of Local Administrators group YSSLABIRDZZ Log on rights assigned For all accounts Log on locally ete yss ABLRDIZE Privileges assigned For all accounts Group membership with nested groups 3 Click Next to proceed to the next Step 162 Chapter 6 Power Export Step 3 Report Criteria Optional x Fower Export Built in Reports Step 3of6 Report Criteria Optional You may specify a criteria for each of the folloving reports to filter data Click Next ta keep the current criteria as described under Criteria Description or click Edit Criteria to modity it ine B Server Reports Criteria Description 2 wer Ep List of Users and Groups Account Type Built in User List of User accounts List of Local and Global groups E List of disabled user accounts List of locked out user accounts Password settings of all user accounts Password ney B Membe
124. ll appear as shown below You can select one or more recipient and click OK s Check Mames Admin Report Kit for Windows Enterpise Founds more than one de Do you want to j Ok 0 Delete this Recipients from the list Change to Lancel z Deco D Canayaro decottpathtinder local Properties Re Design D esign pathtinder local z DE HASHA kB use EveaedPAsseuseripathtinder local Ra Development D evelopmentipathtinder local 2 dethotah rogogggg pathfinder local gt To get more information about the listed recipients under Change to select the a Properties name and then click 101 Chapter 5 Additional Features First Name Deco Initials Last Name Canavaro Display Name Deco D Canavaro Title Department Company Alias deco Mobile number E mail deco pathfinder local Webpage Co If there is no match for the name entered by the user in Active Directory a dialog will appear as shown below a Chec Wa Mes Admin Report Kit for Windows Enterprise does not recognize tz Do you want to Delete this Recipients fram the list womens 1 Beet Mo suggestions lz Properties Select Delete option in the above dialog to remove the recipient name from to address text box Click Cancel button to close this dialog and the unresolved recipient s will appear in red color 102 Chapter 5 Additional Features Address Book ARKWE provides Address B
125. ll connections with a script see http www microsoft com technet community columns scripts sg1104 mspx EJAA WMI is installed and the Startup Type for WMI service is set to Automatic and the service is running under Local System Account DCOM is enabled and ensure that security settings for DCOM allow remote connections 1 Run the DCOM Configuration Utility dcomcnfg exe 2 In the Component Services dialog box expand Component Services expand Computers and then right click My Computer and click Properties 3 In the My Computer Properties dialog box click the Default Properties tab 4 Select Enable Distributed COM on this computer 5 The Default Authentication Level is set to Connect and the Default Impersonation Level is set to Identify in Windows XP and later operating systems For Windows NT however the Default Authentication Level is set to Connect and Default Impersonation Level is set to Impersonate 6 The default DCOM security settings for Access Permissions and Launch and Activation Permissions in the COM Security tab in the My Computer Properties dialog includes at least INTERACTIVE SYSTEM and Administrators In Windows XP SP2 and later operating systems the SERVICE account is granted Impersonate a client after authentication right under User Rights Assignment under Local Policies The Data Execution Prevention in Windows XP SP2 and Windows 2003 SP1 is enabled for essential windows programs only System Info Reports The System Info
126. llowing steps to activate the software 1 Download evaluation trial copy of software from the respective product page available in our website at http www vyapin com 2 Install the software on the desired computer 3 You will receive a license key through e mail as soon as the purchase process is complete 4 Click Activate in Help gt About gt Activate menu to see the Activate dialog as shown in Image 1 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 5 Copy the license key sent to you through email and pastes it in the License Key textbox For help on how to copy the license key click Click here to see how to copy and paste the license key link in the Activate dialog as shown in Image 2 How to copy license key BEGIN LICENSE KEY COPY BELOW THIS LINE 4Select and then Copy the a selected text cigs Saslqyql gz H G Yngtgb And333 PIB Orebhspas CV VA mes G Onwr Os HSH GL Fi Wwetp Aghikibs bn Bles lz9s Qg 0 Oaz Coty HOw N SAr4a LF OU Yx trr sk UUs Re Agbu C Howat piog3 H Grb Gyk S4U 149123900 P20 HF Bimxt Og 1d Lk J9 PgTtuSb Ht PW SA0 Ol ALS EE gt ett E3 Frl STA Eeie RSfman MS igh TWR 22 tg0b AN OOTEO Y30F Grd bf OHpt2 hiske RlyihRwpPA s Leo kawe Tdr Gyk A4 httgr Dx l i rsamtg Tonto EjHbzns 001 Ap 1S AluF Plo2y Hi igoomTg 8G Tage SphiBd C tkn 0 Tn THS Me Soh Wid AS CuT Y REM Nosky LOSs2bk Yet P C Pegiy Amdi Ig VOque e rsi Nw i J bbGm O02 PR9rn Lytlah Guetptdp Egalt
127. lowing information Displays group member s lists on a per group basis Qj Refresh F Filter s ort fE Customize J Scan Profiles Computers Sy E mail s Enterprise USERS AN P General status amp Logon Privileges 2 User Groups 82 Group Members ce ROSS Generated on 30 Dec 2014 10 29 45 AM Status Success Filter Not Applied Group Name Description Account Name Domain users A domain users Yuvan R Lee ygorben wsssearch_sp10 1 wsssearch_sp07 2 wsssearch_sp07 1 Williams T Wiliam K Tunner Marketing Region 5 Wiliam Joseph wiliam B Davis VC 5th Div Wesley L Snipes Support VSSLABS Vincent L George VENUSS Totti J Lawrence Thomas Luis SystemMailbox e0dc1c29 89c3 4034 b678 e6c29d823ed9 SystemMailbox bb558c35 97f1 4cb9 8ff7 d5374 1dc928c SystemMailbox 1f05a927 07b0 4a24 a6 1b a42150f649 16 40 CHAPTER 2 Standard Reports 3 4 How to View Policies Information Audit User Rights Assignment Security Options Click mj Secumty to view the following information Enforce Password History Maximum Password Age Minimum Password Age Minimum Password Length Password must meet complexity requirements Store password using reversible encryption for all domain users Q Refresh 35 Export Y Fiter Customize J Scan Profiles Computers 5a E ma
128. me a nier CiUsers Public Documents ARE WE List of Shares Click here to view HTML 5 x Export Builtin Report Task List of Shares Te eee eee T Tee Fublic Documents ARE WE with permissions Click here to view HTML 5 x ExportiBuiltin Report Task a 4 p Edit Task Delete Task 159 Chapter 6 Power Export 7 6 Schedule Users and Groups Built in Reports X Power Export EA Built in Reports a Permissions in Standard Reports wal Shares and Resources Scheduled Tasks 82 Users and Groups in Domains Click option under Power Export Step 1 Report Selection 4 Power Export Built in Reports Step lof Report Selection Select the desired reportis using the checkboxes given below kore than one report may be selected in this category gid Users and Groups List of Users and Groups 3 MW List of User accounts _ W List of Local and Global groups 3 M List of disabled user accounts 3 W List of locked out user accounts i VW Password settings of all user accounts Password never expires etc 3 W Members of Local Administrators group 3 Log on rights assigned for all accounts Log on locally etc 3 W Privileges assigned for all accounts Group membership with nested groups 1 Select the report s using the checkboxes to the left of the reports You may select any number of reports to run in a single task 2 The above reports collect data on a server basis
129. ment reporting Built in reports are easy to use and speeds up the report generation process Built in reports encompass some of the significant standard resource reports and added to that additional reports all of which could be generated across domains The built in reports feature provides reports on the following resource categories Permissions Reports Shares and Resources Users and Groups VV V WV Domains 4 2 How to View Built in Permissions Reports Permissions Reports Permissions Reports includes reports that focus solely on reporting the access permissions assigned to users and groups on objects such as folders etcetera c Built in Reports Shares and Resources Users and Groups Domai Click on oan toolbar button under Built in Reports in button in the 51 CHAPTER 3 Built in Reports List of Permissions Reports List of permissions for specific Reports the folder permissions assigned users and groups on folders to specific users and or groups on a selected set of folders List of permissions for folders Reports the permissions associated with a selected set of folders List of permissions for specific Reports the files permissions assigned to users and groups on files specific users and or groups under a selected set of folders List of permissions for files Reports the permissions associated with files under a selected set of folders How to View Built in Permissions Rep
130. n Report Kit for Windows Enterprise ARKWE 2 1 8 Configure SMTP Server ARKWE provides the option to e mail the reports generated For e mailing reports ARKWE requires SMTP Server From E mail Address To E mail Addresses recipients separated by semicolon and the e mail report format ARKWE maintains a single SMTP Server and a From E mail Address for use by all reports You can specify a separate set of To e mail addresses recipients e mail report format subject and body of the message for each report You can set SMTP Server and From Address by clicking Tools gt Configuration Settings menu in the ARKWE main application window as shown below Configuration settings E mail Settings Specify the SMTP Server name and Sender From e maill address to send the generated reports through e mail lig Settings Ij Database Settings An SMTP server is the server that is used for your outgoing e mail ven ai Computer E numeratior SMTP Serwer rd45 2 z Fy Domain Credentials T E mail Settings When you send e mail your name will appear in the from of the outgoing message Type your name as you would like it to appear User Connection Profil From Address Ales E Fringt pathtinder local E someonetexanmple com 27 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 9 User Connection Profiles ARKWE creates a user profile in Windows Stored User Names and Passwords applet Credential M
131. nfiguration information available under each tab as listed below under System Info button to view Internet NOTE For information on restricting the domain scan for generating Internet Explorer configuration reports please see How to scan specific servers in a domain Click tab to view the following information Host Name Version Cipher Strength Product ID Build Number Content Advisor Location and Language Qj Refresh 3 Export Y Filter Customize 54 E mail Find Ha Note All System Info reports uire WMI to be installed and enabled Click here for more information Generated on 20 Mar 2013 04 16 17 PM Version Strength 8 0 7601 17514 55041 6 8 0 7601 17514 256 bit 92 CHAPTER 4 System Information 5 8 How to View Current Status Reports E ey I te System Info Network Configuration Operating System amp Hot Fixes Printer Info Hardware Info Display Configuration th 4 i y Ee Internet Explorer Configuration Current Status 5 Environment Info Click on under System Info button to view Current Status information available under each tab as listed below NOTE For information on restricting the domain scan for generating Current Status reports please see How to scan specific servers in a domain Click Time Last Boot up Time System Uptime Percentage of Memory Used CPU summary tab to view the following information Host Name Current Local Busy in p
132. nfo feature uses WMI Windows Management Instrumentation to collect report data Hence all System Info reports require WMI to be installed and enabled on the source computer and target computers For more information refer to Prerequisites and Initial Configuration section Prerequisites and Initial Configuration The System Info feature uses WMI to collect report data WMI uses DCOM protocol and is affected by Windows Firewall and DCOM security settings In order to generate System Info reports both Windows Firewall and DCOM must be properly configured Windows Firewall and DCOM when not properly configured on your remote computers can cause errors such as an RPC Server Unavailable error or an Access is denied error Also ensure that the current user context or specified user context under which the application runs is a local administrator on target computers In order to generate System Info reports ensure the following settings are set appropriately gt Remote Administration setting is enabled on Windows Firewall By default Windows Firewall blocks all unsolicited incoming traffic except for Group Policy This is a 79 CHAPTER 4 System Information gt common issue you might encounter while generating System Info reports To resolve this issue you need to enable the remote administration setting on the Firewall For more information see Technical FAQ 19 For more information about configuring the Windows Firewa
133. not want folders with identical permissions as the parent folder reported then select Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder NOTE The Do not display folders that have same permissions as the parent folder option would be enabled by default ARKWE defaults to scanning all the sub folders under a given shared folder If you want to change the Include sub folders and Folder level options click Edit Folder Options Folder Options Folder Path Mea Include sub folders E Traverse only l level s of sub Folder in the share a F Apply this setting to all folders in list Click OK to Proceed Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below a Built in Reports List of permissions for specific users and groups on folders ones Q Refresh Data Export Sy E mail Find ra Report Details Report Name List of permissions for specific users and groups on folders Generated on 20 Jul 2011 11 02 39 AM Status Success Folder Account ACCES R User Name Path Sub Folders Owner SID Type Member of Type Inheritet Security Apply To ADVENTURE Administ RD49 Test s Test share Folder BUILTINS Administra 5 1 5 21 3221 User CN Organization Managemet Allow No Full Control This Folder subf CN Group
134. nts t Ef Privileges af Services d amp User Groups Click on 2 Group Members to view the following information User Name Full Name Description Account Expiry Password Editable Password Age Account Locked and Account Disabled 37 CHAPTER 2 Standard Reports Q Refresh P Filter Export A Customize Scan Profiles Computers Ea E mail ay Enterprise USERS AM 6 Status Logon Privileges User Groups 2 Group Members a RD83 Generated on 30 Dec 2014 10 15 16 AM Status Success Filter Not Applied H B RESEARCHLAB 95 gt tat Account Account 3 VOYAGER User Name ipti Locked Dinabled aij Domain Contr Administrator Built in account for admi Never expires Yes 96 Day s 15 Hr s 15 Min amp Guest Built in account for guest Never expires krbtgt Key Distribution Center S Never expires 356 Day s 3 Hr s 53 Min 355 Day s 7 Hr s 40 Min 355 Day s 6 Hr s 38 Min 355 Day s 6 Hr s 31 Min 355 Day s 6 Hr s 30 Min 355 Day s 6 Hr s 29 Min 355 Day s 6 Hr s 28 Min 355 Day s 6 Hr s 27 Min 355 Day s 6 Hr s 26 Min 355 Day s 6 Hr s 26 Min 355 Day s 6 Hr s 25 Min 355 Day s 6 Hr s 24 Min 355 Day s 6 Hr s 24 Min 355 Day s 6 Hr s 22 Min 355 Day s 6 Hr s 22 Min 355 Day s 6 Hr s 21 Min adminuser1 i Never expires adfssvcacc Never ex
135. o reports please see How to scan specific servers in a domain Click Summa Drive System Root Temp System Tmp System Path extension Path tab to view the following information Host Name OS System Default User Domain User DNS Domain Common Program Files Program Files All Users APP Data All User Profile and Command Prompt Location Status Success Path System System e 2 2 Temp System Tmp System aaa Drive Root PMP CAWindows T EVP COM EXE BATO CAWindows s i EMP C Windows TOMP COM EXE BAT 0 C AWindows s 94 Chapter 6 Additional Features 6 1 How to customize fields Customize F Filter Export Scan Profiles Manager Configuration Settings Configuration Wizard Click on New Domatrs Shares Customization PATHFINDER Share Name Path Security Maximum Uses E Comment Click 25st Ml for selecting all the check boxes F Clear All Click for clearing all the check boxes Click button for confirming the changes Click button for cancelling the operation 95 Chapter 5 Additional Features 6 2 How to Apply Filters Customize F Filter Export Te Scan Profiles Manager it Configuration Settings Configuration Wizard Click for setting filter options The ARKWE Filter window will be displayed Af Filter Domains Shares Field Operator Valles Host Mame I RO45 Add to Filter To set a filter
136. o view the following information Policy Name Description Policy Assigned and Last Modified 44 CHAPTER 2 Standard Reports Generated on 29 Dec 2014 06 41 37 PM Policy Name Server Request Security For all IP traffic always r sec erberos trust Alow unse C cation with dients that do Te 8 2 2012 6 46 12 PM not respond to request No 3 2 20 5 6 12 Client Respond Only c e 8 2 2012 6 46 12 PM is secured unsecured 6 46 12 PM 45 CHAPTER 2 Standard Reports 3 5 How to View Events Information Standard Reports a Domains 4 Users and Groups ml Shares and Resources Policies P aF Services A Security E System la Saved Logs Click Event Date Event Time Description Source Name Event End Computer Name to view the following information User Name Event Type and Category a Events Application RD40 Q Refresh Export Y Filter fE Customize Scan Profiles Computers E E mail S Enterprise EVENTS 3 Application E Security Mii system J Saved Logs AB RD83 Generated on 29 Dec 2014 06 49 21 PM Status Success 8 4 RESEARCHLAB aan Computer cN VOYAGER Date Event Time Event id EEE User Name Event Type 5 m Domain Controller 12 24 2014 WAEA The Desktop Window Manager has e Desktop Window 9009 RD40 Voyager Information i a RD40 06 13 48 PM Windows detected your registry file i Microsoft Win
137. of permissions for specific users and groups on folders 2 sete List of permissions for specific users and groups on files eg E List of permissions for files Click Next to Proceed to the Next step 64 CHAPTER 3 Built in Reports Step 2 Select Shared Folders Select one or more servers to retrieve available shares Built in Reports List of permissions for files z Step 2Zof2 Selec Enter the tul path o Select folder paths from 44 view and select Shares and Folders available from computers displayed below properties For scann Share Folder UNC Pa ae Scan Profiles Computers lt No Profile Found Configure using Scan Profiles Manager gt Scan Profile Sharey ee Domains Folder Path 28 ADVENTURE WRO4S address Ta Domain Controllers ee WRD4S ADMINS ra RD43 Import AD4S C i A MRD Address Remove WRDIS D s wapasiapming NRDASIES RDA Exchange 0d 0O WRDASICE TRDO WROASES WRD4S H o OQ WADASIES g _ RY WRD49Exchange 0AB 0 WWRD4S1ES 7 l Do not display file O iama M Include group me Include SID oO x Cancel Back Finish Close Built in Reports List of permissions for files Step 7 of Select server s for Shared Folders list Enter the Full path of a Share or Shared Folder Click Add From to load the list of shares Import bo import a list of UNC 4 Folder paths From a text File Select a Folder in
138. ol This Folder subfolders anc BUILTIN Adminis WROFS NTFS Securil NTFS Secu Folder ADVENTURE a 5 1 5 32 Alias Allow Moa Full Control This Folder subfolders anc WRD49 SS OL SyYS OL Folder BUILTIN Admin 5 1 5 32 Alias Allow Mo Create Folders Apti This Folder only E write Attributes This Folder only Write Extended Atti This Folder only Read Permissions This folder only Change Permissions This Folder only Read Extended attr This folder only Read Attributes This Folder only Take Ownership This Folder only Create Files f Write This folder only Channe Permiccione SobFaldere and Files ane F 63 CHAPTER 3 Built in Reports How to View Built in Permissions Reports List of Permissions for Files This report allows you to view the associated permissions for specific files Built in Reports a Shares and Resources R Users and Groups my Domains Click on button under Built in Reports button in the toolbar The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time Built in Reports List of permissions for files Step lof 2 Select Report Select a report from the available Built4n Reports H Description This report lists the permissions assigned to sen E List of permissions for folders files under a specific folder 4 Permissions sn B List
139. ook feature to search for any mail enabled recipient object say person distribution list contact public folder you want to send a message to Click button and then use the Find Names dialog box to search for the recipient object you want to send a message to Note that you can t use the Find Names dialog box to search for distribution lists in your Contacts folder Select the object s name in the list and then click Add recipient to To Find Warnes Find Hames in All Global Address List z Display Name de Last Name First name Title Alias Company Department Office City Office EF DE Ha tAth contact DE Wake DE Uakokne user Deuaaes AAG A Deco D Canavaro deco ia Design Design amp dethatgh 9999999 ia Development Development gt To get more information about one of the names in the list such as department or phone number select the name and then click 103 Chapter 5 Additional Features 6 6 How to Find Data in a Report You can use the find feature in ARKWE to search for specific data in a report To search for data in a report just type the characters or words you want to find in the 1 ARKWE performs a case insensitive search of the specified search criteria in the report 2 The search criteria should not be enclosed within quotation marks 3 You can use the wildcard character in the search criteria The wildcard character act as a place holder for zero or more characte
140. ort Folder AS Export Path Task Name C Users Public Documents ARKWE A y LAEE Aa ere kaii Reports Task NetworkConfigurations Login Profiles Click here to view c Wess bl Pocumen SAE Report Name ervers Domains 1 This step displays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Schedule Tasks and will be displayed in the Scheduled Tasks Manager Window as shown below 121 Chapter 6 Power Export a E a aa eT Export Export Folder atch dices As Export Path Task Name 7 C Users Public Documents ARKWE i terStatusInfos Summary i i g en A eee eee 8 x i SN Reports Task eater ne a no C Users Public Documents ARKWE Click here to view 8 x Export Standard Reports Task Users Public Documents ARKWE Gckheetovew pm Segonsa Reports Tesk C Users Public Documents ARKWE Gases ome Sse 122 Chapter 6 Power Export 7 4 Schedule Built in Reports The built in reports have been categorized to the following gt Permissions Reports gt Shares and Resources reports gt Users and Groups reports gt Domains reports 123 Chapter 6 Power Export Schedule Permissions Built in Reports Permissions Reports Permissions Reports includes reports that focus solely on reporting the access permissions assigned to users and groups on objects such as folders etcetera gt List of permissions for specific users and groups on folders
141. orts List of Permissions for Specific Users and Groups on Folders This report allows you to view folder permissions for specific users and groups Built in Reports Shares and Resources Users and Groups TI Domains Click on button under Built in Reports button in the toolbar The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time 52 CHAPTER 3 Built in Reports a Me eae i SUIT REDO a gii iea ewes pind si Da mA iiaii zT pa yine a g a cox a saeere ort ron Step 1of3 Select Report Select a report from the available Builtin Reports Description This report lists the folder permissions assigned to a specific usergroup account Click Next to proceed to the next step Step 2 Select User Group Accounts Select user and or group accounts for which you would like to view the permissions for folders files List of permissions for specific users and groups on folders Step 2 of 3 Select User Group Account s Select user and or group accounts For which you would like bo view the permissions on files folders Enter account name es Add to list 0 Accounts fram domainierver Browse and Select Accounts from Scan Profiles Usersisroups Frequent Scans Selected Accounts Account Mame Account Type Adventure admin
142. orts selected export settings To view the selected servers domains for a report in the task click on the hyperlink in the Servers Domains column in the right pane The Selected Servers Domains window will be displayed as shown below 110 Chapter 6 Power Export lected Servers Domains Shares and Resources Shares Domain Mame Server Hame PATHFINDER RDO45 PATHFINDER RDS2 View Exported Files To view the reports generated and exported by the task perform either one of the following steps gt Select Scheduled Tasks node on the left pane and then click on the hyperlink in the Exported Files column in the right pane for the desired task OR gt Select the desired task on the left pane and then click on the hyperlink next to Exported Files Edit Task 1 Select a task from the Scheduled Tasks Manager Window and Click Edit Task 2 Perform the steps as in Schedule Standard Report or Schedule Built in Report based on the scheduled report type While proceeding through the wizard you may change the settings add a new report delete a report edit a report change the export path etc 3 The new settings will be used when the task runs the next time Delete Task To delete a task from the Power Reports Task Manager Window select the task and Click Delete Task The deleted task will be removed permanently from the Windows Task Scheduler Chapter 6 Power Export 7 3 Schedule Standard Reports
143. ow to View Display Configuration Reports Network Configuration Operating System amp Hot Fixes Printer Info Hardware Info Internet Explorer Configuration Current Status Environment Info Click on configuration information available under each tab as listed below under System Info button to view Display NOTE For information on restricting the domain scan for generating Display configuration reports please see How to scan specific servers in a domain Click tab to view the following information Host Name Monitor Name DPI Setting Screen Refresh Rate Screen Resolution and Manufacturer m O Refresh Export Y Filter E Customize Ef E mail Note All System Info reports uire WAI to be installed and enabled Click here for more information Host Name Monitor Name Refresh Fat ister Manufacturer Setting GenericPnPMonitor 98DPI Standard monitor types GeneicNon nPMontr 960 Standard mentorbpes 90 CHAPTER 4 System Information Click EI Video Adapter Info tab to view the following information Host Name Adapter Name Video Mode Color Quality Memory Size MB Driver Date Driver Version and DAC Type 91 CHAPTER 4 System Information 5 7 How to View Internet Explorer Configuration Reports da Network Configuration amp Operating System amp Hot Fixes s Printer Info Hardware Info Display Configuration F e a e a E Click on Explorer co
144. pendent of each other CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 Use a separate database for each instance of the application gt A new database will be created in the SQL server by the name ARKWE lt COMPUTERNAME gt where COMPUTERNAME stands for the computer name that is running ARKWE application Thus each installation of ARKWE will deploy its own database based on the computer where ARKWE is installed For example if you install the software on 3 different computers 3 different databases will be created and each installed application will generate reports separately independent of each other Specify the SQL Server name authentication mode user name and password in the above screen Click Next to proceed Step 2 of 3 Computer Enumeration ARKWE uses Computer Browser Services or Active Directory services for enumerating computers in your domain In order to automatically enumerate computers in your network the application may be configured to use either the Computer Browser Service uses Windows Network APIs or your Active Directory queries your AD for Computer Accounts 1 Use Computer Browser Service gt Uses Windows Network API to enumerate computers in a domain This displays all the computers that are currently active in your Network This option may be used if you have a small network for faster enumeration of computers 2 Use Active Directory Services gt Queries your Directory Server
145. permissions For specific users and groups on Folders ps E List of permissions For Folders 2 ee List of permissions for specific users and groups on files ae List of permissions For Files 1 Select Permissions Reports from the select report category drop down list 2 Select the desired report Only one report may be selected to run in a single task 144 Chapter 6 Power Export 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step Step 2 Shared Folder Selection A Fower Export Built in Reports Step 2 0of5 Shared Folder Selection Enter the full path of a Share or Shared Folder Click 4dd From to load the list of shares Import to import a list of UNC folder paths from a text tile Select a folder in the list below and Click Edit Folder Options to modity the defaut properties for scanning each folder Report List of permissions for files UNC Path Scan Profile Shares No Profile found Folder Path Include sub fold Folder level Add From WRDSOLADMINE True All WROSOLARKWE True All IR WROSO Ct True All Remove WRDSOVE True all True All Do not display Files that have the same permissions as the parent folder Sean E Include group membership information Include SID E validate for Errors W Include Error Details Import 1 Select the desired folder s for which you wish to run the permissions report 2 You may
146. pires adminuser2 i Never expires adminuser3 i Never expires configdbadmin_sp03 aa Never expires defconaccessacc_sp03 ee Never expires portsiteapppool_sp03 on Never expires spapppooll sp03 aes Never expires spapppool2 sp03 poe Never expires spapppool3_sp03 Never expires spsitecoladmi_sp03 i Never expires spsitecoladm2_sp03 i ten Never expires farmadmin_sp07 1 iN_S Never expires farmadmin_sp07 2 iN_S Never expires elelelelelelelelelelelalalels elelelelelelelelelelelelelelele elelelelelelelelelelelelelele searchdefacc_sp07 1 wie Never expires m Standard Reports 4 Domains Users and Groups j General ml Shares and Resources t df Status Policies fa Events t Ef Privileges g Services t User Groups Click on rg Group Members information User Name Logon Machines Last Logon to view the following PN 95 Logon RD4U Q Refresh P Filter 3 Export PE Customize Scan Profiles Computers yy E mail a Enterprise USERS AN 7 General status Logon Privileges 2 User Groups 2 Group Members a RD83 Generated on 30 Dec 2014 10 15 16 AM 4 Gil RESEARCHLAB User Name Administrator Any Workstation Guest Any Workstation krbtgt Any Workstation adminuser1 Any Workstation 12 29 2014 7 49 42 PM adfssvcacc Any Workstation adminuser2
147. ports List of permissions for specific users and groups on files Step 3o0f 3 Select Shared Folder s Enter the Full path of a Share or Shared Folder Click Add From to load the list of shares Import bo import a list of UNC Folder paths From a text File Select a Folder in the list below and Click Edit Folder Options to modify the default properties For scanning each Folder Share Folder UNC Path Scan Profile Shares Sample Scans Y 0 Folder Path WRO49 Address WRD4S ADMIN WARDS C WARDS DF WADE S WRO49 Exchangeoab WARDS FS WADE 4 Do nok display Files that hawe the same permissions as the parent folder Include group membership information Include SID Include sub folders Folder level True True True True True True True True All All All All All All All All Edit Folder Options Add From Import Remove Close 62 CHAPTER 3 Built in Reports You may also type the UNC path of a folder that is not in the list such as a folder that is not shared and then click Add to add it to the list In addition you may also import a list of UNC paths to shared and non shared folders from a text file by using the Import button Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want folders with identical permissions as the parent folder reported then select Do no
148. previous step Step 2 Domain Selection for Domain Reports NOTE This step is applicable only if a Domain Report is selected in step 1 Step Zof6 Domain Selection For each of the following reports select the list of domains for which you would like to generate the report Double click on a report or click Add Domains The report for each of the selected domains will be exported Mo Domain Selected 1 Click Add Domains button to select the domains for which you wish to run the domain reports selected in Step 1 This will display a window where you can select the domains you want to add 113 Chapter 6 Power Export Select one or more domains Click on the Apply To button in order to apply the same list of domains for all the selected Reports To generate the report for all servers in a domain select the domain or select a set of servers to restrict the domain scan Or you may select a Scan Profile Select Domain Server m Eie RESEAR CHLAB H P TREELAB a Sal VSSLAB Select Scan Profile Select a Profile 2 You can restrict the domain scope and scan and collect data only for a specific set of computers by either selecting specific computers under a domain or by selecting a Scan Profile 3 Click OK to apply the selected domains or a Scan Profile to the current report or click Apply to Reports to apply the selection to the rest of the selected domain reports The sele
149. proceed Only one report can be selected in this category aa List of permissions for specific users and groups on folders ee E List of permissions For Folders morse List of permissions for specific users and groups on files T E List of permissions For Files 1 Select Permissions Reports from the select report category drop down list 2 Select the desired report Only one report may be selected to run in a single task 3 Click Next to proceed to the next step You may Click Back button anytime to come back to a previous step 132 Chapter 6 Power Export Step 2 Shared Folder Selection E4 Fower Export Built in Reports Step 2 0of5 Shared Folder Selection Enter the full path of a Share or Shared Folder Click Add From to load the list of shares Import to import a list of UNC folder paths from a text file Select a folder in the list below and Click Edit Folder Options to modify the defaut properties for scanning each folder Report List of permissions for folders UNC Path Scan Profile Shares lt No Profile found Folder Path Include sub fold Folder level 4dd From WROSO AMIN True All WROSOV ARK WE True All i WRESOICE True All Remove WADSOVES True All URDSONEw _ True All 4 a ae display Folders that have the same permissions as the parent Edit Folder Options dit Folder Options E Include group membership information Include SID E validate for Errors Include Error De
150. r Information 10 10 40 PM svchost 2788 The database engine ESENT RD40 Voyager Information m Standard Reports Domains g Users and Groups ml Shares and Resources Policies Application g Services LX System Click bel Saved Logs Event Date Event Time Description Source Name Event End Computer Name to view the following information User Name Event Type and Category 46 CHAPTER 2 Standard Reports Q Refresh D B a Enterprise EVENTS RD83 Gi RESEARCHLAB Gi VOYAGER Domain Controle i RD40 e a g 3 4 tt Export Ff Filter Customize Scan Profiles Computers Sy E mail J Application A Security G system iq Saved Logs presen Find Cli Generated on 29 Dec 2014 07 13 30 PM 12 29 2014 BER P 01 48 36 PM Status Canceled The Windows Filtering Platform has per The Windows Filtering Platform has per Filter Not Applied Microsoft Windows Securi Microsoft Windows Securi RD40 Voyager local RD40 Voyager local 01 48 36 PM The Windows Filtering Platform has per Microsoft Windows Securi RD40 Voyager local 01 48 36 PM l Special privileges assigned to new logon Microsoft Windows Securi RD40 Voyager local 01 48 36 PM An account was successfully logged on
151. r b The scheduled job will generate and export the reports in different file formats HTML MDB CSV PDF XLSX and TIFF to the desired folder path printer c By default for each task a sub folder with the task name will be created under the specified export path All selected Reports will be exported to a time stamped sub folder in the format yyyy mm dd hh mm ss under the task name folder Therefore the full folder path for all the exported reports refers to the following directory lt Export path gt lt Task name gt lt Time stamp gt d A separate file will be created for each report in the desired file format For example in the HTML file format each report will be created as an html file NOTE ARKWE Power Export Wizard will help you create and store the settings for a task which you may view or modify later using the Scheduled Tasks Manager The task will be created with the settings Schedule Type and Run As parameter provided using the Power Export Wizard A valid password must be specified for the Run As parameter of the task You can schedule the two types of reports Standard report and Built in report available in ARKWE 109 Chapter 6 Power Export 7 2 Task Manager Scheduled Tasks Manager The Scheduled Tasks Manager allows you to perform the following operations View summary information for the tasks created View exported files of the task Edit an existing task VV V V Delete a task View S
152. r Edit Folder Options W Include group membership information Import Remove W Include SIC Back Emish Finish Close Chose You may also type the UNC path of a folder that is not in the list such as a folder that is not shared and then click Add to add it to the list In addition you may also import a 58 CHAPTER 3 Built in Reports list of UNC paths to shared and non shared folders from a text file by using the Import button Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want folders with identical permissions as the parent folder reported then select Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder NOTE The Do not display folders that have same permissions as the parent folder option would be enabled by default ARKWE defaults to scanning all the sub folders under a given shared folder If you want to change the Include sub folders and Folder level options click Edit Folder Options Folder Options Folder Path YAE 4 Include sub folders E Traverse only 1 level s of sub Folder in the share h E Apply this setting to all folders in list Cancel Click OK to Proceed Click Finish to generate the selected report After the data coll
153. r local To Tom Fordi pathfinder local subject Reports generated by AAKWE Please find the attached report generated by Admin Report Kit For windows Enterprise Cancel 166 Chapter 6 Power Export Step 5 Schedule Settings A Power Export Built in Reports Step5of6 Schedule Settings Enter a unique task name and specify ts schedule settings Task Name Builtin User Task Specify an account that has sufficient privileges bo retrieve report information From the selected Domains Servers Run 4s TREELAB adminusers Set Password Schedule Task Daily Start time 04 30 PM advanced Schedule Task Daily Every 1 EE Tae 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step 167 Chapter 6 Power Export Step 6 Summary A Power Export Built in Reports Step of Summary Click Finish to save the task details X Task Name Builtin User Task Report Built in Report Run As TREELAB adminusers Schedule BE O4 30 PM every day starting 3 22 2013 Export Export Folder AS Export PathiTask Mame a C Users Public Documents ARE w List of Users and Groups Click here to view HTML 5 Ea j C Users Publici Documents ARKE 5 x ExportiBuiltin User Task C Users Publici Documents ARKE Li
154. r Export 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step Step 6 Summary step of Summary Click Finish ta save the task details Task Name Folder Specific User Perm Run As TREELABadminusers Schedule ob 04 30 PM every day starting 32212013 User sroup Shared Export Report Name Accounts Folders AS List of permissions For specific users and groups on Folders WIE Click here to view HTML Report Built in Report Export Folder Export PathiTask Mame CUsersPublici Documents ARE Wye 5 x Export Folder Specific User Pet 1 This step displays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Schedule Tasks 131 Chapter 6 Power Export Schedule Permissions Built in Reports List of Permissions for Folders This report allows you to view the associated folder permissions for a set of folders X Power Export aE ini A Standard Reports a Shares and Resources Scheduled Tasks H2 Users and Groups aiy Domains Select option under Power Export This will bring up the Power Export Wizard Step 1 Report Selection OR Power Export Built in Reports Step 1of5 Report Selection Select the desired report to
155. r reports selected in Step 1 This will display a window where you can select the servers you want to add Selecting a domain will add all the servers in that domain to the report 2 Click OK to apply the selected servers to the current report or click Apply to Reports to apply the servers to the rest of the selected server reports The selected servers will be added to the wizard as shown below 151 Chapter 6 Power Export A Fower Export Built in Reports Step 2 of 6 Server Selection For each of the folowing reports please select the list of servers for which you would like to generate the report Double click on a Report or click Add Servers The report for each of the selected servers will be exported as a separate Tile aa List of Shares server Mame T List of Shares with permissions PATHFINDER RO4S PATHFINDER RDS PATHFINDER RDA PATHFINDER RD49 PATHFINDER RDS4 PATHFINDER RDS Add Servers lt Back Mesck gt Close 3 Click Next to proceed to the next step 152 Chapter 6 Power Export Step 3 Report Criteria Optional A Fower Export Built in Reports step 3 of6 Report Criteria Optional You may specity a criteria for each of the following reports to fitter data Click Mest to keep the current criteria as described under Criteria Description or click Edit Criteria to modity i ee mE Server Reports Criteria Description E List of Shares Share Type Folder Share cain
156. rameter if necessary and set the password for the specified user 142 Chapter 6 Power Export 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step Step 6 Summary step h of6 Summary Click Finish ta save the task details Task Name Specific User File Perm Built in Report Run As TREELAB adminusers Schedule Bb O4 30 PM every day starting 3 22 Wsersroup Shared Export Export Folder Report Mame Ansans Folders As Export PathiTask Mame CH Users Publici Documents AREE 6 x Export Specific User File Perm List of permissions For specific Click here to users and groups on Files wie Click here to view HTML 1 This step displays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Scheduled Tasks folder 143 Chapter 6 Power Export Schedule Permissions Built in Reports List of Permissions for Files This report allows you to view the associated file permissions under a specific set of folders Power Export Standard Reports wal Shares and Resources Saeed do 2 Users and Groups Select fa Domains option under Power Export This will bring up the Power Export Wizard Step 1 Report Selection Ea Power Export Built in Reports EX Step 1of5 Report Selection Select the desired report to proceed Only one report can be selected in this category X a E List of
157. rocess Cleaning up the information based on your selection Click Finish button to proceed with the cleanup process or click Cancel button to terminate the uninstall wizard lt Back Finish Cancel Click Finish to run cleanup and or uninstall process Click Cancel to close the wizard 4 Once the file cleanup process is complete the uninstall wizard will automatically run Windows Installer program to remove ARKWE application from the machine 211 9 Index ARKWE 1 About Built in Reports 51 About Power Export 109 About Scan Profiles Computers 179 About Scan Profiles Users Groups 189 About System Info 79 Active Directory 101 102 Additional E mail Settings 119 156 166 175 Additional Features 95 Admin Report Kit for Windows Enterprise 1 209 applet 209 Application Data 208 ARKWE 1 2 3 6 96 100 101 103 104 107 108 109 110 208 209 211 Built in Reports 51 67 71 75 123 124 150 160 169 196 Create Task 79 CSV 109 data warehousing 3 Domain 30 169 170 Domain Admins 104 Domain Controllers 104 Domains 51 170 Edit Task 193 Enterprise network planning personnel 3 Error Control 49 Error Log File 6 208 evaluation trial 4 Hardware 87 HIPPA 1 How to activate the software 4 How to Apply Filters 96 How to apply Scan Profiles Computers 187 How to apply Scan Profiles Users Groups 195 How to crea
158. roup accounts for which wou would like to create a profile Profile Mame Account Hame Add Accounts from domainserver Browse and Select Selected Accounts Account Name Account Type 1 Enter a name for the profile 2 Use the Browse and Select button to enumerate users groups from servers or Scan Profiles Computers as shown below 190 Chapter 7 Scan Profiles Manager Ex Wiew and Select Accounts UsersGroups available from computers displayed below 3 You can enter users groups name and add to the selected account list for creating a profile Enter the users groups name in Domain User Name format and click the Add button to add the entered account to the list as shown below Select User Group Account s Select the User andor Group accounts for which wou would like to create a profile Profile Name Sample Profile Add Accounts Account Name ADVENTURE Adminuser Accounts From domainjserver Browse and Select Selected Accounts Account Mame Account Type 191 Chapter 7 Scan Profiles Manager de Scan Profile Users Groups Select User Group Account s Select the User andor Group accounts for which wou would like to create a profile Profile Name Sample Profile Add Accounts Account Mame Accounts From domainiserwer Browse and 5 elect Selected Accounts Account Marne Account Type 4ACVEN TURE Adminuser a
159. rs However note that you cannot use the wildcard character in the search criteria For instance if you want to search for Domain in a report Type Domain without quotations in the edit box and then clicks on Find Button By default ARKWE adds an asterisk as a suffix to the specified search criteria if no wildcard character is present in it In this case ARKWE finds a match in the report for all fields that have the text Domain followed by zero or more characters that is Domain Domain Controllers Domain Admins etc For all the matches found ARKWE highlights the corresponding columns in the grid and scrolls the grid automatically to the first occurrence 4 ARKWE finds additional occurrences of the specified search criteria instantaneously To locate other occurrences of the same search criteria in a report you need to scroll the report grid downwards 104 Chapter 5 Additional Features 0 Refresh Fy Prind Preview Export Y Filter AB Customize Egy E mail Find everyone ed m Eg Enterprise DOMAINS amp Shares ADVENTURE i 5 Fath User Mame Security Menim ll DISCOVERY Uses PATHFINDER Everyone Allow Full Control Unlimited WOSPRO Address C Program Files Ext ACCE METLOGON C WINDOYYSiS YS Logon Allow Read Unlimited Logon RD45 LOG CoProgram Files Esi BUILTIN S dminist Allow Full Control Unlimited Exchal Share Mame T 105 Chapter 5 Additional Features
160. rs and Files Allow Special Acces Mo This Folder and subfolders Application Data Foli Folder BUILTIN Administrat Unknown Account Allow Special Acces Yes This folder subfolders and files BUILTIN Administrat Allow Special Acces ves This Folder subfolders and Files 66 CHAPTER 3 Built in Reports 4 3 How to View Built in Reports for Shares and Resources Shares and Resources Reports The Shares and Resources reports can be generated against domain s and specific server s as well Built in Reports Permissions Users and Groups Domains Click on toolbar button under Built in Reports in button in the The Built in Reports window with the list of reports will be displayed as shown below Step 1 Report Selection Select the report to be generated Only one report can be generated at a time Click Next to proceed to the next step Built in Reports Step 1 of 3 Select Report This window shows the list of Built in reports available For the selected Built in report category Select any Report to proceed E S Shares and Resources 2 sone List of Shares Bs E List of Shares with permissions 67 CHAPTER 3 Built in Reports Step 2 Select Domain s Server s Select the server s Domain s for which the report needs to be generated The default option selected is All Domains for all the reports Built in Reports List of Shares with permissions Step 2of3 Selec
161. rs and groups Report Name Description List of permissions for specific users and Reports the folder permissions assigned groups on folders to specific users and or groups on a selected set of folders List of permissions for specific users and Reports the files permissions assigned groups on files to specific users and or groups under a selected set of folders Scan Profiles Users and Groups and Permission Reports for Specific Users and Groups You can apply a Scan Profile Users Groups to permissions reports either using Power Export Tool for off line generation or Interactive Report Generation This option will useful if permissions for certain Users and Groups need to be monitored frequently Rather than searching for Users and Groups adding then to account list and viewing their permissions You can use create a subset of Users and Groups save them as a profile generating permissions reports for subset that of users and groups The following shows how Scan Profiles Users Groups can be applied to permission reports for specific users and groups in Interactive report generation and Power export tool Scan Profiles Users Groups and Interactive Report Generation Perform the following steps for applying Scan Profiles Users Groups to permission reports in Interactive report generation 195 Chapter 7 Scan Profiles Manager Et Built in Reports a Shares and Resources R Users and Groups iin Dom
162. rs and sub folder level options click Edit Folder Options button That will show up a window as shown below Folder Options Folder Path PREE WY Include sub folders E Traverse only l level s of sub folder in the share Ta F Apply this setting to all folders in list Cancel 5 Modify the folder options as required and click OK 6 Select the Validate for Errors option for validating the folders files based on the folder traversal option selected before proceeding to report generation gt Generate report ignoring any errors found This option will validate the folders files path s and generate the report even if errors are encountered during the validation option gt Generate report only if no error were found Send error report through e mail This option will validate the folders files path s and skip the report generation if errors were encountered during the validation option It will then email the error s encountered during the validation process to users 7 You may select Include Error Details option for including the error information of folders files into report data 8 Click Next to proceed to the Next step 128 Chapter 6 Power Export Step 4 Delivery Options Ea Power Export Standard Reports Step 4dof6 Delivery Options Select the report delwery options You can Export and E mail the reports using the options below In case of export option for each task a sub folder with t
163. rs of Local Administrators group E Log on rights assigned For all accounts Log on locally Privileges assigned for all accounts B Group membership with nested groups Edit Criteria F lt Back Mext gt Clase This step allows you to apply specific conditions for filtering report data 1 To set criteria for a report select a report and Click Edit Criteria or Double Click the report 2 The Criteria Settings window will be displayed as shown below Criteria settings Report List of Users and Groups Account Type oll Custom User Local Group ol Wf Global Group 163 Chapter 6 Power Export 3 Specify the criteria to filter the report data using the checkboxes 4 Click OK in Criteria Settings window to go back to the wizard 5 A description of the selected criteria will be displayed under Criteria Description as shown below K Power Export Built in Reports step 3of6 Report Criteria Optional You may specify a criteria for each of the tollowing reporta to fiter data Click Next to keep the current criteria as described under Criteria Description or click Edit Criteria to modify it ee m SEFYEF Reports Criteria Description EW List of Users and Groups Account Type Built in User OR Account Pi Type Custom User OR Account Type List of User accounts Local Group OR Account Type Global List of Local and Global groups Group List of disa
164. s 28 3 Slandard RODOITS eisenii erreen NEENA ORENA NAAR 30 3 1 HOw to View Domain Information ssesessssessssessssesssoecssssecsssecssoeossseossseossseossesossseoeeee 30 3 2 Howto View Shares and Resources Information sesessssesessesessesessesssseossseoessecssseoeese 33 3 3 Howto View Users and Groups Information cscscscsccscsccccccscsccccccscececcccscscececcececes 37 3 4 HOw to View Policies INFOrMatiON cccceccscscecsccscscsccccccsceccccccscsceccccscsceccececsceseesecces 41 3 5 How to View Events Information ccccsccscscescccscsceccccccscsccccccscsccccccscsceccccecscsseccecces 46 3 6 HOw to View Service Information cccecsccscsceccccscsceccccccsceccecccscsceccccscsceccecscscecescecces 49 4 BUREN RODOVES roont a aan ev ened eta tv data a 51 41L About BUIIt I REDO Senn E E 51 4 2 How to View Built in Permissions Reports cscscsccscscscsccscscsccccccscsccscccscsceceeccscesess 51 Table of Contents 4 3 Howto View Built in Reports for Shares and Resources cccscecsccscsceccccscscececcecscscees 67 4 4 How to View Built in Reports for Users and Groups ccccsccscscecsccscsceccccscsceccccecscssees 71 4 5 How to View Built in Reports for DOMAINS ccccccccscscscsccccscsccccccscsceccccscsceseeecscesens 75 5 Systemin OF IN GUION ees er E E 79 SL About SVSCOIIUINTO wsceciccaesiie icici rae vcareea aeeesncaw se vedas ae ee eee 79 5 2 How to View Network Confi
165. s will be used to connect to all computers in the domain to retrieve report Domain Administrator credentials you may do so by clicking on the Add button E Edit S Delete 4 Connect A Add domains from forest ia Computer Enumeration Name aan E Domain Credentials a ee er local voyageradminusers Connected 3 The domain server name cannot be modified during the edit operation 4 Specify user name and the corresponding password to connect to the specified domain server 5 Click OK to save and connect to the domain server with the newly provided connection parameters and update the domain server in the Domain Credentials list 6 ARKWE will connect to the domain server with the newly provided connection parameters and modify it in the list upon successful connection to the domain server 21 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Voyager local voyageradminusers Connected 7 Click Cancel to retain the existing connection parameters of the domain server in the Domain Credentials list 22 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 6 Delete a Domain Server Perform the following steps to delete a domain server 1 Launch Domain Credentials window 2 In the Domain Credentials window select any row domain click Delete button to delete the forest from the Domain Enumeration Manager list d credentials wil be used to connect to al
166. se network planning personnel Typical Organizations that would benefit from this Product Companies having their LAN WAN based Windows Enterprise Networks Windows based data warehousing companies Windows Server based Internet Service Providers Companies having Windows based Intranets VV V V WV Any company having Windows Servers and planning to manage their systems CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 1 4 How to Activate the Software Once you purchase the software online or through any one of our resellers you will receive a sale notification through e mail from our sales department We will send you an e mail with the necessary instructions to activate the software In case you do not receive an e mail from our sales team after you purchase the software please send the following information to our sales department at sales vyapin com with the sales order number gt Company Name End user Company Name gt Location City amp Country for the Company Name given above Please allow 12 to 24 hours from the time of purchase for our sales department to process your orders a Activate Admin Report Kit for Windows Enterprise License Type 15 day Evaluation Copy To activate the software copy and paste the license key in the textbox below eit m r ari r Lif Tarara GE EFI n ar k ml a el a ar N License Key Image 1 Activate screen Perform the fo
167. secoecoeceecescesoesoesoecoecesosscesoecsesoeseessese 104 6 7 How to Scan Specific Servers in a Domain s ssessssesesoesessecesseoesssoesosoecsssoecsssessssesseseo 106 Z POWE EXPO eonen eE E E a 109 FA PDOUUPOWEF EXDOUt saia a a a ONS 109 7 2 Task Manager Scheduled Tasks Manager cccccsccscscecsecscsceccccscsceccccscsceccccecscsscccccsces 110 7 3 Schedule Standard Reports sessssessssessssessssesesssossseossssoessecesssoesssoesssoesssoessssessssesseseo 112 7 4 Schedule Built in Reports sssssssesssssssssssssocsssosassosssscsscosssososssssssesssssssssossssossssessssssssses 123 Table of Contents 7 5 Schedule Shares and Resources Built in Reports csccscscecsccscsceccccscsceccccecscsseccccnces 150 7 6 Schedule Users and Groups Built in Reports ccscscsccscscecsccscsceccccscscescccscscsceccccnces 160 7 7 Schedule Domain Built in Reports ccsccscscccsccscsccccccscsccccccscsceccccscsceccececscsceccececes 169 8 Scan Profiles Manager rensie E EE 179 8 1 About Scan Profiles COMputers ccccccccccccsccscsccccsccccaccccarsccecsccecsccccsccccassscessccscecs 179 8 2 Howto Create Scan Profiles COMPUTES ccceccscscsscscsccsccccsceccsceccscescccsceccssescsceces 180 8 3 Howto Manage Scan Profiles Computers cccscscsscsssccscsccsccccsceccscecsccsceccsceccsceces 185 8 4 Howto Apply Scan Profiles COMputers ccsceccscscsscscsccsccccsceccsceccscescccsseccsceccsceses
168. ser name and password as a user profile in Stored User Names and Passwords applet for its usage Note ARKWE expects the user account to have sufficient privileges to create add to and delete database in the SQL server Database Creation ARKWE creates databases in SQL Server based on the following database options whichever is selected as outlined below 1 Use a single central database for all instances of the application gt A new database will be created in the SQL server by the name ARKWE Inside the ARKWE database separate tables will be created for each installation of ARKWE The table names will be prefixed with the computer name that is running ARKWE application Thus each installation of ARKWE will deploy its own tables based on the computer where ARKWE is installed For example if you install the software on 3 different computers single database with 3 different tables will be created inside the single database and each installed application will generate reports separately independent of each other 2 Use a separate database for each instance of the application gt ARKWE creates a single application database in the default data storage location used by the SQL Server during application launch ARKWE uses the following naming convention ARKWE lt COMPUTERNAME gt where COMPUTERNAME is the name of the computer running ARKWE For example if the computer running ARKWE is CLIENTO1 ARKWE creates
169. st of Local and Global groups Click here to view HTML 5 x Export Builtin User Task l C Users Public Documents ARKE List of disabled user accounts Click here to view HTML 3 Export Builtin User Task Ci Users Public Documents ARKE List of locked ouk user accounts Click here to view HTML 5 x Export Builtin User Task Report Mame Servers Domains List of User accounts Click here to view HTML Password settings of all user accounts Password never expires Click here to view HTML Ci Users PublicDocuments ARK WE d IT aiai cse 1 This step displays the summary information of the task 2 Click Finish to save the task details 3 The task will be added to Windows Schedule Tasks and will be displayed in the Scheduled Tasks Manager Window as shown below CO Scheduled Tasks Em Scheduled Tasks Task Hame Builtin User Task 1 Buitin Report Ta Run As TREELAB adminuser3 1 Buittin Domain Ts Report Type Built in Report Exported Files Click here to views i Pee Be BUU EAEE schedule At 4 30 PM every day starting 322 201 3 Export Folder Export PathiTask Mame CWsers Publici Documents 4R EWE List of Local and Global groups Click here to view S xiExportiBuiltin User Task C Usersi Publici Documents 4R EWE List of disabled user accounts Click here to view a x Export Builtin User Task Members of Local Administrators tela ET OE C Users Publici Documents 4R EWE group 8 x Export Built
170. sted and trusting domains 77 CHAPTER 3 Built in Reports List of Reports Report Name List of trusted and trusting domains List of machines with their OS and service pack List of Windows Servers List of Domain Controllers List of Application servers IIS Exchange Server SQL Server etc List of machines that run TCPIP services FTP telnet etc List of machines that have auditing enabled or disabled Description Reports the trusted and or trusting domains Reports the configuration information of all the servers in the domain s Reports the OS installed in all the servers in the domain s Reports the Primary and or Backup Domain Controllers in the domain s Reports servers running IIS and or Exchange Server and or SQL Server in the domain s Reports Servers running network services viz TCP IP FTP and Telnet in the domain Reports the Auditing status of servers in the domain s 78 Chapter 5 System Information 5 1 About System Info This page covers the following topics gt Introduction gt Prerequisites and Initial Configuration gt System Info reports Introduction The System Info feature provides significant hardware and software inventory based reports that can be generated across domains Further all the System Info reports can also be scheduled for off line generation using the Power Export tool Please be aware that the System I
171. t display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder NOTE The Do not display folders that have same permissions as the parent folder option would be enabled by default ARKWE defaults to scanning all the sub folders under a given shared folder If you want to change the Include sub folders and Folder level options click Edit Folder Options Folder Options Folder Path Maa 3 Include sub folders ry E Apply this setting to all folders in list Cancel Click OK to Proceed Traverse only 1 level s of sub folder in the share Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below oH Built in Reports List of permissions for specific users and groups on files a a aE i Refresh Data z Export Ea E miail Find Ea Report Details Report Name List of permissions for specific users and groups on files Generated on 21 Jul 2011 03 58 04 Phi Status Canceled User Folder File Folder Fik Folder F n sD Account ACCeSS Mwembe Mame Path Mame Type Type Type of Inherite Security Apply To BUILTIN Adminis WRO4FS Address Address Folder NT AUTHORIT 5 1 5 32 Alias Allow Yes Full Control This Folder subfolders anc 4O0VENTURE adn WROFS NTFS Securil NTFS Secu Folder ADVENTURE a 5 1 5 21 User Allow Moa Full Contr
172. t Domain s Server s You can either generate the report across domains by selecting All Domains or for a specific domain server by selecting the Select Domain Server option This report can also be generated specifically for a single server by selecting the Server option Select Domain Server oF Domains a E VOYAGER a vee via Domain Controllers Select Scan Profile Select a Profile Click Next to proceed to the next step 68 CHAPTER 3 Built in Reports Step 3 Select Report Criteria To view the part of the report that is of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report Built in Reports List of Shares with permissions Step 3of3 Select Report Criteria To view the park of the report that is of more significance change the report criteria settings Only the data that matches the specified criteria will be displayed in the generated report Share Type Folder share Admin share Click Finish to generate the selected report After the data collection process is complete the report would be generated in a report window as shown below a Built in Reports List of Shares with permissions Col e fmt Q Refresh Data Export Ea E mail Find Ha Report Details Report Name List of Shares with permissions Generated on 30 Dec 2014 11 04 16 AM Status Success Maximum Share Name
173. t pane of the report window and then select Refresh Data from the context menu The existing data will be cleared and latest data will be loaded in the report window 6 4 How to Export Data The Export feature helps the user to export report data generated by ARKWE to a file using various formats namely HTML CSV XLSX SQL Customize F2 oF Filter F3 Te Scan Profiles Manager ag Configuration Settings Configuration Wizard Click select Export option under Tools menu to export report data to a file in the desired for exporting the information in the desired format or format Export Select the export path format file name and table name for the report to be exported Export Path File Format HTML File Name Domains Share Export to time stamped subfolder 98 Chapter 5 Additional Features Specify a file name to export report data to or accept the default file name Specify the export path and select a desired file format The path refers to the destination location where the output file generated should be stored It can be given using the Browse button To avoid overwrite existing files if any in the specified export path By default the report will be exported to a time stamped sub folder in the format YYYY MM DD HH MM SS under the specified export path In XLSX file format the information is stored as sheets in Excel file For each report a XLSX file will b
174. tails Import 1 Select the desired folder s for which you wish to run the permissions report 2 You may also click Import button to import a list of UNC folder paths from a text file 3 Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want folders with identical permissions as the parent folder reported then select Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder 4 ARKWE defaults to scanning all the sub folders for a given folder If you want to modify the Include sub folders and sub folder level options click Edit Folder Options button That will show up a window as shown below Folder Options Folder Path PEE Include sub folders E Traverse only l level s of sub folder in the share F Apply this setting to all folders in list Cancel 133 Chapter 6 Power Export 5 Modify the folder options as required and click OK 6 Select the Validate for Errors option for validating the folders files based on the folder traversal option selected before proceeding to report generation gt Generate report ignoring any errors found This option will validate the folders files path s and generate the report even if errors are encountered during the validation option
175. task name will be created under the specified export path All selected reports will be exported to a time stamped folder in the format yywyy mo dd hh mm ss under the task name folder Export Export Path C Users Public Documents ARKWE 8 x Export mm E mail o B Note This evaluation version exports e mails only the first 10 records cack 1 Change the Export or E mail settings as necessary 2 Use Browse button to change the export path Click Additional E mail Settings button to specify optional e mail settings as shown below 141 Chapter 6 Power Export Additional E mail settings You can customize the SMTP Server From and To address Subject and body of the e mail message SMTP Server d4 From jarmiepathtinder local To Tom Fordiapathfinder local subject Reports generated by ARKWE Please find the attached report generated by Admin Report Kit For windows Enterprise Step 5 Schedule Settings EA Fower Export Built in Reports stepi ofe Schedule Settings Enter a unique task name and specify ts schedule settings Task Mame Specific User File Perm Specify an account thak has sufficient privileges to retrieve report information From the selected Domains Servers Run 45 TREELGB adminusers Set Password Schedule Task Daily z Start time 04 30 PM Adwanced Schedule Task Daily e Every 1 gt dayis 1 Enter a unique name for the task 2 Change the Run as pa
176. te Scan Profiles Computers 180 How to create Scan Profiles Users Groups 189 How to customize fields 95 How to E mail data 100 How to Export data 98 How to find data in a report 104 213 How to manage Scan Profiles Computers 185 How to manage Scan Profiles Users Groups 193 How to Refresh data 98 How to scan specific servers ina domain 106 How to Uninstall ARKWE 209 How to view Built in Permissions Reports 51 How to view Built in Reports for Domains 75 How to view Built in Reports for Shares and Resources 67 How to view Built in Reports for Users and Groups 71 How to view Current Status reports 93 How to view Display Configuration reports 90 How to view Domain information 30 How to view Environment Info reports 94 How to view Events information 46 How to view Hardware Configuration reports 87 How to view Internet Explorer Configuration reports 92 How to view Network Configuration reports 81 How to view Operating System and Hot Fixes reports 84 How to view Policies information 41 How to view Printer Configuration reports 86 How to view Service information 49 How to view Shares and Resources information 33 How to view Users and Groups information 37 Interactive Report 187 195 Internet Service Providers 3 Intranets 3 IP address 184 IT infrastructure Managers 1 LAN 3 license key 4 5 MDB 1
177. tely from the machine 1 Launch the uninstall wizard by clicking Start gt Programs gt Admin Report Kit for Windows Enterprise v8 x gt Uninstall ARKWE The ARKWE Uninstall Wizard dialog will be shown as below AREMVE Uninstall Wizard Welcome to ARK WE Uninstall Wizard This wizard helps you to cleanup and uninstall AREWE completely This wizard will guide you through the steps to cleanup the files that are created by 4REWE application Using this wizard you can Cleanup scheduled tasks Cleanup 4REWE application settings Cleanup log Files Cleanup Scan Profiles created by 4REWE Scan Profile Manager Uninstall 4REWE application lt Click Next to Proceed 209 Chapter 7 Scan Profiles Manager 2 Select required Cleanup Options as shown below AREMWE Uninstall Wizard Step 1 of 2 Cleanup Options Cleaning up the information based on your selection Uninstall ARE WE application Remove all application Files and uninstall SAKWE application From the machine Uninstall ARK WE application and cleanup application settings Remove all application Files and uninstall GREWE application From the machine Also cleanup all scheduled tasks log File exported files and other reports settings lt Back next gt Cancel Click Next to Proceed 210 Chapter 7 Scan Profiles Manager 3 Confirm the Cleanup and or Uninstall Process ARKWE Uninstall Wizard Step 2 of 2 Cleanup P
178. ter 6 Power Export Step 5 Schedule Settings A Power Export Built in Reports StepSoft Schedule Settings Enter a unique task name and specify ts schedule settings Task Mame Builtin Domain Task Specify an account that has sufficient privileges to retrieve report information From the selected Domains Servers Run As TREELAB adminusers Set Password a Schedule Task Daily Start time gz 19 pm Advanced Schedule Task Daily Every 1 gt days lt Back Next gt Close 1 Enter a unique name for the task 2 Change the Run as parameter if necessary and set the password for the specified user 3 Change the task schedule settings as required 4 Click Next to proceed to the next and final step 176 Chapter 6 Power Export Step 6 Summary x Fower Export Built in Reports Stepbof6h Summary Click Finish to save the task details X Task Name Builtin Domain Task Report Built in Report Run As TREELAB adminusers Schedule every day starting 3 22 Export Export Folder Report Name Eeer Eomans As Export PathiTask Name List of trusted and trusting See ee ee F C Users Publici Documents tA RKE domains Click here to view AE a Export Builtin Domain Task List of machines with their 05 CiUsers Public Documents tA RKW E Click here to view HTML 5 x Export Builtin Domain Task C Users Publici Documents tA RKW E 5 x Export iBuiltin Domain Task C Users
179. the Scan Profile includes a Windows version filter say Windows Computers only and the domain does not have any computers running Windows XP In addition in interactive mode there are differences on how Scan Profiles are applied to Domain based Reports and Server based Reports 187 Chapter 7 Scan Profiles Manager Scan Profiles and Domain based Reports In interactive mode for domain based reports you can apply a Scan Profile by using the Scan Option Dialog The report will be generated for the list of computers in the applied Scan Profile for the currently selected domain as mentioned earlier Scan Profiles and Server based Reports For server based reports you can apply a Scan Profile by clicking the G4 Scan Profiles Cormputers Apply Profile Clear Profile button in the report window The Scan Profiles Manager will show up on screen select a Scan Profile and then click Apply button to apply the selected profile For server based reports however a Scan Profile when applied reloads the tree view in the left pane in the report window with the list of computers in the selected Scan Profile After a Scan Profile is applied you can select the desired computer in the tree view in the report window to generate the report Click the Clear button to clear the applied profile This will reload tree view with the list of all domains in the network 188 Chapter 7 Scan Profiles Manager 8 5 About Scan Profi
180. the list below and Click Edit Folder Options to modify the default 4 properties For scanning each Folder Share Folder UNC Path Scan Profile Shares Sample Scans ri Folder Path Include sub folders Folder level Add From WRO4 S address True All WRO4S ADMINS True All WADI C True All WAD4FS DF True All WADE FS True All WRO49 Exchangeoagk True All WAD4S FS True All WADE True All 4 Do not display Files that hawe the same permissions as the parent Folder Edit Folder Options Include group membership information Import Remove Include SID Back Finish o Einish Close O qose 65 CHAPTER 3 Built in Reports You may also type the UNC path of a folder that is not in the list such as a folder that is not shared and then click Add to add it to the list In addition you may also import a list of UNC paths to shared and non shared folders from a text file by using the Import button Folders that have identical permissions as the parent folder would show up with Same as parent in User Name and or Security fields in the report However if you do not want folders with identical permissions as the parent folder reported then select Do not display folders that have same permissions as the parent folder option This option will not report folders with identical permissions as the parent folder NOTE The Do not display folders that have same permissions as the parent folder option would be enabled
181. to connect to the domain if Use ADSI is selected in ARKWE Enumeration Settings Using the Connection Profile dialog shown below new profile can be created and available profiles can be removed from the profiles list 28 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE Configuration Settings ARKWE can store user credential information as user profiles for Directory Servers using Windows Stored User Name and rar Passwords applet To add a user profile click Add To delete a user profile click Remove Settings dh Add 2 Edit X Remove Profile Name A Treelab adminuser Sample f researchlab adminuser Click Add button to add a new profile and a dialog will appear as shown below l Mew User Profile Create a new user profile and shore it in windows stored usernames and passwords applet UserName Pathtinder S choles e g domansusename Password TTTTTTT Confirm Password TO pbtooost Description mandatory fields Click Edit button in the Connection Profile dialog to edit available profiles Click Remove button in the Connection Profile dialog to remove available profiles 29 Chapter 3 Standard Reports 3 1 How to View Domain Information Domain Summary Information Standard Reports E Domai E smes a Users and Groups g Trust E Shares and Resources t El Shares Policies Applications i Events Click Services
182. to view domain summary information for a domain The summary report lists information like computer s operating system browsing capability participation in LanMan networks membership in Windows workgroups etc for the server s in the domain NOTE For information on restricting the domain scan for generating this report please see How to scan specific servers in a domain The output would be displayed as shown below 34 Domains Summary VOYAGER Q Refresh Export Y Filter fe Customize Ey E mail B E Enterprise DOMAI SF summary 6 Trust i Shares ion Applications oc RD83 Generated on 30 Dec 2014 10 35 28 AM Status Success Filter Not Applied QE RESEARCHLAB Host Name Attribute B RD40 IP Address 10 10 10 39 OS Install Date 1 8 2014 10 19 50 AM OS Microsoft Windows Server 2012 Standard Build 9200 Role DFS 7 Role LM Server Role LM Workstation Role Master Browser Role NT Role Primary Domain Controller Role Timesource Server Type Primary Domain Controller System Type x64 based PC Windows Directory C Windows IP Address 10 10 10 78 OS Install Date 1 8 2014 11 32 46 AM OS Microsoft Windows Server 2012 Standard Build 9200 Role Backup Browser Role LM Server Role LM Workstation Role NT Role Potential Browser Role Server NT 30 CHAPTER 2 Standard Reports Domain Trust Information Click domains for
183. ummary Information of a Task The pane on the left hand side in the Scheduled Tasks Manager window lists the tasks maintained in ARKWE To view summary information of a task select the desired task on the left pane The summary information of the selected task will be displayed in the right pane as shown below H Scheduled Tasks rey gt cheduled Tasks Task Name Run as Schedule Report Type Exported Files 2 Buitin Report Ta At 1 25 PM every Builtin Domain Te Builtin Report Task TREELSB adminusers day starting Built in Report Click here to wiew Gai Ga ban Fean oa Aledo Buitin User Task Ge 2 45 PM every Standard Domair Guiltin Domain Task TREELAB adminuser3 day starting Built in Report Click here to view 3 22 2013 Standard Server Ab 4 50 PM every Current Status R Builtin User Task TREELAB adminuser3 day starting Built in Report Click here to view ee af22 2013 ma Standard Domain ee i i e TREELAB adminusers day starting Standard Report Click here to view F azziz0l3 Ht Aza PM every T aoter TREELAB adminusers day starting Standard Report Click here to view P 32212013 Ab 25 PM every Current Status Report TREELABadminuser3 day starting Standard Report Click here to view 3 22 2013 Ab A27 PM every Operating aparan TREELABadminusers day starting Standard Report Click here to wiew Information 22 2013 p Edt Task Delete Task The task summary includes information about the task information rep
184. ure that NETBIOS over TCP IP is enabled in both the client and the computers that need to be reported on The Browser service must also be running You can access the Computer Enumeration settings by clicking Tools gt Configuration Settings menu in the ARKWE main application window and selecting Computer Enumeration node as shown below Configuration settings Computer Enumeration Select an option for enumerating computers in your domain In order to automatically enumerate computers in your network the application may be configured to use either the Computer Browser Service uses Windows Network APIs or pour Active Directory queres your AD for Computer Accounts E Settings Hf Database Settings sia Computer Enumeratior Use Computer Browser Service Uses Windows Network API to enumerate computers ina domain This displays all the computers that are currently active in your Network This option may be used if 2 ain Domain Credentials you have a small network for faster enumeration of computers ov E mail Settings User Connection Profil C Use Active Directory Services Queres your Director Server to enumerate its computers This option requires Domain Administrator privilege toa connect to your domain controller 15 CHAPTER 1 About Admin Report Kit for Windows Enterprise ARKWE 2 1 3 Configuring Domain Credentials Domain Credentials Manage alternate credentials for Domain Directory Servers The app
185. user Reset Reset Adventure alan Adventure alex Adventure Michael Builtin4drninistrators 53 CHAPTER 3 Built in Reports gt Enter the name of User Group in domain account name format and click Add to List to add the name to selected accounts list gt Use Select a Scan Profile Users Groups option to use the users and groups added in the profile gt Use Browse and Select option to retrieve users and groups from servers or Scan Profile Computers Select Accounts So Wiew and Select Accounts UsersGroups available from computers displayed below e Scan Profiles Computers Gil PATHFINDER H m Domain Controllers ma Servers Workstations oa ROS Use the Find option to search desired user group accounts Click Next to Proceed 54 CHAPTER 3 Built in Reports Step 3 Select shared folders Select one or more servers to retrieve available shares r Built in Reports Ba Shares Step 3 of 3 Enter the Full p Folder paths F properties For i Scan Profiles Computers lt No Profile Found Configure using Scan Profiles Manager gt Share Folder El ES Domains S E ADVENTURE E Domain Controllers Folder Fath 6 RO49 Scan Profile WRD49 Addre J MRDA Address a I WRD49 ADMINS WADAS ADM WROCE E MRD4910 o E wrvasics WRD4SE WRD49 Exche WRD4SFS WRD4S H 9 View and select Shares and Folders available From computers disp
186. vailable users and groups from Report Name List of permissions For specific users and groups on Folders Enter account name FG Addtolist Gb Accounts fram domainiserver Browse and Select Accounts from Scan Profiles Users Groups Frequent scans Selected Accounts Adventure adminuser Adventure 4lan Adventure Alex Adventure Michael Builtin Adrninistrators 4 In the succeeding steps select needed details for generating reports for selected Scan Profile Users Groups 198 Chapter 7 Scan Profiles Manager 8 9 About Scan Profiles Shares You can setup Scan Profiles Shares to scan a subset of shares present in computers and save these profiles for repeated use useful for repeatedly scanning and reporting on different subsets of share folders permissions gt How to create Scan Profiles Shares gt How to manage Scan Profiles Shares gt How to apply Scan Profiles Shares 8 10 How to Create Scan Profiles Shares Perform the following steps to create a Scan Profiles Shares Scan Profiles Manager Computers F9 del Users and Groups F10 ja Shares F11 1 Select from the application toolbar This action will launch the Scan Profiles Manager Shares dialog as shown below E S scan Profile Manager Shares fou can setup Scan Profiles Shares to scan a subset of shares in servers and save these profiles for repeated use This window lists avai
187. ve available users and groups from Report Name List of permissions For specific users and groups on Files Enter account name MS Addtolist GP Accounts trom damainiserver Browse and Select Accounts fram Scan Profiles Users Groups Select a Protile Selected Accounts Account Mame Account Type tt Built in Reports Step 2 of6 User Group Selection Select a server or a Scan Profile Computers or a Scan Frofile Userssroups to retrieve available users and groups from Report Mame List of permissions for specific users and groups on Folders Enter account name MLaddtotist Accounts from domainiserver Browse and Select Accounts from Scan Profiles UserssGroups Frequent scans oe Selected Accounts TREELABY Administrator User TREELAB adminuser 1 User TREELAB adminuserz User TREELAB adminusers User TREELAB alberto User TREELAB barton User TREELAB shane User eae User d 138 Chapter 6 Power Export gt Use Select a Scan Profile Users Groups option to use the users and groups added in the profile For more information on Scan Profiles Please refer About Scan Profiles Users Groups 1 Select the user or group for which you wish to run the permissions report 2 The selected users will be added to the wizard as shown above 3 Click Next to proceed to the Next step Step 3 Shared Folder Selection rs Power Export Built in Reports Step 3of6 Shared Folder Selection

User Manual - Vyapin Software Systems

Contents

Download Pdf Manuals

Related Search

Related Contents