NetWrix Inactive Users Tracker Quick Start Guide Contents Introduction......................................................................................................................................................3 Product Features...............................................................................................................................................3 Licensing..........................................................................................................................................................3 Getting Started.................................................................................................................................................5 Syste !e"uireents..................................................................................................................................5 Setu#............................................................................................................................................................5 Next Ste#s........................................................................................................................................................$ Fi%tering &ccounts.......................................................................................................................................$ !unning an 'n()eand !e#ort..................................................................................................................$ *diting t+e Sc+edu%ed Task )irect%y...........................................................................................................$ *diting Noti,ication Te#%ates.................................................................................................................-. 2 NetWrix Inactive Users Tracker Quick Start Guide Introduction /any cor#orate security #o%icies and co#%iance regu%ations re"uire t+at &ctive )irectory user and co#uter accounts ust 0e disa0%ed a,ter certain #eriod o, inactivity. T+is is a good #ractice1 doing so kee#s &ctive )irectory secure and c%ean. For exa#%e2 soeone can create a user account2 %eave it untouc+ed ,or any days2 and t+en use it to #er,or a%icious activity against an organi3ation. ¬+er exa#%e is e#%oyee retireent4 User accounts ust 0e disa0%ed 5+en an e#%oyee "uits an organi3ation2 0ut in #ractice2 IT de#artents are usua%%y t+e %ast to kno5 5+en soe0ody %eaves. &%so2 ost 6! data0ases on%y kee# in,oration a0out t+e 7#riary7 user account and kno5 not+ing a0out additiona% user accounts. Inactive Users Tracker autoates t+e anageent o, inactive user and computer accounts. T+e #rogra #eriodica%%y c+ecks a%% user and co#uter accounts in s#eci,ied doains and re#orts a%% accounts inactive ,or ore t+an s#eci,ied nu0er o, days. Product Features 8+ecks a%% user accounts and re#orts t+ose t+at +ave 0een inactive ,or a s#eci,ied nu0er o, days. &utoatica%%y deactivates inactive user accounts2 eit+er 0y disa0%ing2 or setting a rando #ass5ord2 oving to a s#eci,ic organi3ationa% unit or ,ina%%y de%eting suc+ accounts. )etects and re#orts on inactive co#uter accounts and a##%y t+e sae set o, deactivation actions as ,or user accounts. Sends noti,ications to anagers a0out t+eir inactive accounts. *(ai% noti,ication te#%ates can 0e custoi3ed according to s#eci,ic re"uireents. Licensing Inactive Users Tracker coes in t5o variants4 ,ree and coercia%. T+e coercia% version is avai%a0%e 5it+ t+e ,o%%o5ing ,eatures4 noti,ications to anagers2 re#ort custoi3ation2 autoatic account deactivation2 oving accounts to a s#eci,ied 'U or account de%etion2 accounts ,i%tering and ,u%% tec+nica% su##ort. We a%so #rovide ,ree o, c+arge tec+nica% su##ort ,or t+e ,ree5are version on t+e Support Forum. 3 NetWrix Inactive Users Tracker Quick Start Guide T+e ta0%e 0e%o5 out%ines t+e di,,erences 0et5een ,ree and coercia% versions4 Feature Freeware Version Commercial Version &ctions No Noti,y anager Set rando #ass5ord )isa0%e account /ove to a s#eci,ic organi3ationa% unit )e%ete account Process co#uter accounts No 9es Fi%tering ca#a0i%ities No :y account nae :y &ctive )irectory organi3ationa% unit Tec+nica% Su##ort Su##ort ,oru P+one2 eai% Licensing Free o, c+arge Per anaged &) doain or site %icense2 #%ease re"uest a "uot T+e ,ree version can 0e used 0y 0usinesses and individua%s ,or an unlimited tie2 at no c+arge. T+e coercia% version can 0e eva%uated ,ree o, c+arge ,or 20 days. 4 NetWrix Inactive Users Tracker Quick Start Guide Getting Started Fo%%o5 t+e instructions 0e%o5 to insta%% and con,igure Inactive Users Tracker. System Requirements 'ne o, t+e ,o%%o5ing o#erating systes4 Windo5s ;P Service Pack < =3<(0it or >?(0it@ Windo5s Server <..3 =3<(0it or >?(0it@ Windo5s Aista =3<(0it or >?(0it@ Windo5s Server <..B =3<(0it or >?(0it@ /eory4 - G: o, !&/ i, you +ave u# to <... users < G: o, !&/ i, you +ave ore t+an <... users 6ard disk s#ace4 -. /: ,ree disk s#ace &dditiona% so,t5are4 .Net Frae5ork <.. or %ater Windo5s Insta%%er 3.- or %ater 9ou can insta%% t+e #rogra on any co#uter t+at is a e0er o, t+e doain you 5ant to anage2 not necessari%y a doain contro%%er. Setup To insta%% Inactive Users Tracker2 run t+e setu# #rogra on any co#uter in t+e anaged doain =not necessari%y a doain contro%%er@. 'n t+e %ast ste# o, t+e insta%%ation 5i3ard2 t+e con,iguration dia%og 0ox o#ens. 5 NetWrix Inactive Users Tracker Quick Start Guide In t+is dia%og 0ox2 s#eci,y t+e ,o%%o5ing4 T+e nae o, t+e anaged doain in t+e Net:I'S =,or exa#%e2 netwricorp@ or FQ)N = ,or exa#%e2 netwricorp!local@ ,orat =IP addresses are not su##orted@. 6 NetWrix Inactive Users Tracker Quick Start Guide T+e t+res+o%d a,ter 5+ic+ a%% accounts t+at are not on%ine ,or ore t+an s#eci,ied #eriod 5i%% 0e considered inactive and re#orted to adinistrator. /ake sure you s#eci,ied a reasona0%e inactivity #eriod =not %ess t+an 3. days@2 ot+er5ise you ay get 5rong users re#orted2 deactivated or de%eted. Se%ect t+e "oti#y manager a#ter o#tion2 to noti,y an account anager t+at t+e account considered inactive. :y de,au%t2 t+e account anager 5i%% receive a essage %ike t+e ,o%%o5ing4 T+e Set random password a#ter o#tion can 0e use,u% i, you donCt 5ant to disa0%e accounts2 0ut sti%% 5ant to ake t+e inaccessi0%e ,or %ogon. Set t+e $isa%le accounts a#ter o#tion to disa0%e inactive accounts a,ter a #eriod o, inactivity you +ave s#eci,ied. Se%ect t+e &ove to a speci#ic '( a#ter o#tion to ove inactive accounts to t+e s#eci,ic organi3ationa% unit. To de%ete inactive accounts a,ter a s#eci,ied #eriod2 use t+e $elete accounts a#ter o#tion. Set t+e Process computer accounts o#tion to inc%ude sta%e co#uter accounts in #rocessing. *nter coa(se#arated %ist o, e(ai% addresses in t+e "oti#y administrators ,ie%d in t+e "oti#ication settings section2 at %east one e(ai% address is re"uired. :y de,au%t2 t+e adinistrators 5i%% receive a essage %ike t+e ,o%%o5ing4 7 NetWrix Inactive Users Tracker Quick Start Guide S#eci,y S/TP server settings =S/TP server nae2 #ort2 ,ro address@. Inactive Users Tracker ski#s a%% autoated actions 5+en one o, t+e doain contro%%ers is not avai%a0%e. 9ou can exc%ude doain contro%%ers ,ro #rocessing 0y adding t+e to t+e omitdclist!tt ,i%e ,ro t+e #rogra insta%%ation ,o%der. W+en you +ave ,inis+ed con,iguration2 c%ick '). 9ou 5i%% 0e #ro#ted ,or t+e credentia%s to run t+e sc+edu%ed task ca%%ed NetWrix Inactive Users Tracker t+at #er,ors t+e &ctive )irectory c+ecks and sends noti,ications. T+e account ust +ave su,,icient rig+ts to read your &ctive )irectory doain2 as ,o%%o5s4 &ccess to t+e )oain 8ontro%%ers organi3ationa% unit =s*&*ccount"ame2 lastLogon and lastLogon+imestamp attri0utes are re"uired@. !ig+ts to disa0%e2 ove2 and de%ete accounts2 i, necessary. T+e de,au%t sc+edu%e ,or t+is task is 3 &/ dai%y2 0ut you can c+ange t+e sc+edu%e 0y c%icking t+e Sc,edule 0utton. 9ou can a%so run t+is sc+edu%ed task anua%%y. 8 NetWrix Inactive Users Tracker Quick Start Guide "et Steps T+is section te%%s you +o5 to contro% t+e o#eration o, Inactive Users Tracker 0eyond t+e initia% con,iguration. For ore detai%s2 see t+e Inactive Users Tracker on%ine +e%#. Filtering *ccounts 8on,igure ,i%tering 0y organi3ationa% units i, you donCt 5ant to #rocess t+e entire doain. =on%y se%ected 'Us 5i%% 0e #rocessed@. &vai%a0%e on%y in t+e coercia% version. ¬+er use,u% o#tions is Filter %y account name2 5+ic+ a%%o5s you to s#eci,y an inc%usion ,i%ter2 e.g. i, you enter CsvcDC t+ere2 on%y accounts 5+ose naes 0egin 5it+ CsvcC 5i%% 0e re#orted. &dditiona% ,i%tering can 0e s#eci,ied using t+e #ilter!tt ,i%e =t+is ,i%e %ocated toget+er 5it+ t+e iut!ee@. List account naes t+ere =5it+out doain naes@ to exc%ude ,ro tracking and #revent t+eir autoatic disa0%ing. Wi%dcards can 0e used in t+is ,i%e. &vai%a0%e on%y in t+e coercia% version. Running an 'n-$emand Report To get a re#ort on 5+et+er any accounts are inactive2 c%ick S,ow Report. 9ou 5i%% 0e #ro#ted ,or t+e nae o, t+e 6T/L ,i%e you 5ant to store t+e re#ort in2 and con,ir t+e nae. T+e #rogra 5i%% #er,or t+e c+eck using t+e current con,iguration and o#en t+e re#ort ,i%e autoatica%%y. .diting t,e Sc,eduled +as/ $irectly Inactive Users Tracker uses a standard Windo5s sc+edu%ed task ca%%ed NetWrix Inactive Users Tracker to 9 NetWrix Inactive Users Tracker Quick Start Guide sc+edu%e its o#eration. In addition to using t+e Sc,edule 0utton in t+e NetWrix Inactive Users Tracker con,iguration dia%og 0ox2 you can edit t+e sc+edu%e and ot+er #araeters o, t+is task direct%y in its #ro#erties. .diting "oti#ication +emplates 9ou can edit t+e te#%ate ,or t+e noti,ication e(ai% essages. For t+at2 c%ick t+e .dit 0utton in t+e "oti#ication settings section. Noti,ication te#%ate editing is avai%a0%e on%y in t+e coercia% version o, Inactive Users Tracker E<..B NetWrix 8or#oration. &%% rig+ts reserved. NetWrix2 Inactive Users Tracker is a tradeark o, NetWrix 8or#oration andFor one or ore o, its su0sidiaries2 and ay 0e registered in t+e U.S. Patent and Tradeark ',,ice and in ot+er countries. &%% ot+er tradearks and registered tradearks are t+e #ro#erty o, t+eir res#ective o5ners. 10