Microsoft MAP Quick start

System requirements
Hardware Requirements
A computer with at least the following minimum configuration:
A dual-core 1.5GHz processor
2.0 GB of RAM
1 GB of available disk space

Network adapter card

Software Requirements (minimum)
Operating system. Any of the following:
o Windows 8 (Professional and Enterprise editions only)
o Windows 7 with Service Pack 1 (Professional, Enterprise, and Ultimate editions only)
o Windows Vista with Service Pack 2 (Business, Enterprise, and Ultimate editions only)
o Windows Server 2012
o Windows Server 2008 R2 with Service Pack 1
o Windows Server 2008 with Service Pack 2
.NET Framework 3.5 SP1 (3.5.30729.01) (download from http://go.microsoft.com/fwlink/?LinkId=129686)
.NET Framework 4.0 (Full) (download from http://go.microsoft.com/fwlink/?LinkId=186913)
Update 2 for Microsoft.NET Framework 4.0 (download from http://support.microsoft.com/kb/2544514)
Notes and Considerations
Machine must be joined to the Active Directory domain if discovering domain machines
Some of these prerequisites require restarting your computer. You may have to restart multiple times if all
the prerequisites are not met prior to running Microsoft Assessment and Planning Toolkit setup.
Installing the MAP Toolkit on a domain controller is not supported.
It is recommended to install on a stand-alone machine which is not used for production purposes
The Microsoft Assessment and Planning Toolkit must be installed separately on any domain

which cannot be reached from a single machine

Permission / Network Preparation

In order to mitigate errors and issues during the MAP discovery and inventory, it is recommended to review
Phase 3: Prepare your environment in the Getting Started Guide (can be selected during download of the tool).
This will note which types of permissions are required for what types of devices and scenarios for discovery.
In particular, we will need to take into consideration the following:
WMI in Active Directory Environments at http://go.microsoft.com/fwlink/?LinkId=255268.
o Enable Remote Administration Exception Using Group Policy Appendix
o Enable Windows Firewall exceptions Using Group Policy Appendix
Enable File and Print Sharing Appendix
Firewall Considerations Using WMI at http://go.microsoft.com/fwlink/?LinkId=255269.
o WMI Port 135 (DCOM/RPC) for the initial connection, then a dynamic port above 1024
o SMB Ports: UDP-137, 138, 445 & TCP 139, 445
o SSH Port 22
o VMware Port 80 and/or 443
o PowerShell 5985 and/or 5986
o SQL Server Port 1433 for default instances and port 1434 for the SQL Server Browser Service
o Oracle 1521
WMI In Workgroups and Windows NT 4.0 based Domains at
http://go.microsoft.com/fwlink/?LinkId=255270.

Installation Instructions
1. Download and execute the Microsoft Assessment and Planning (MAP) Toolkit to the above prepared
machine Microsoft Assessment and Planning Toolkit
2. The first thing to be run is the MAP Install Prerequisite Checker if all above requirements are met, you
will continue with the installation. If any requirements are missing, you will see a red X and will need to
be remedied prior to installation.
You must remediate the requirements, cancel the installation, and restart the installation
3. Begin by clicking Next, and accept the license terms to continue with the installation.
4. Continue by choosing the installation directory or leaving the default location
5. Select weather or not you would like to join the Customer Experience Improvement Program
6. On the Installation Summary screen, press the Install button to continue with the installation.
7. Once the installation is successful, continue to finish and open the MAP toolkit.

Configuration Instructions
1. Once opened, begin by giving your new database a name and description then press OK
Name: Customer Name (dd/MM/yyyy)
Description: Microsoft inventory on dd/MM/yyyy
2. Next, select Perform an inventory by clicking the image on the Overview page

3. Select the scenario(s) which are needed to cover your environment or scope of work. If unsure, please
select all scenarios
Note: Not all scenarios are required, but it is recommended to cover the scenarios for the types of
technologies which are currently deployed in your environment.

Windows computers

Exchange Server *

SQL Server with Database

Details*

Linux/UNIX computers

Forefront Endpoint
Protection Server*

Windows Azure Platform

Migration *

VMware computers *

Lync Server *

MySQL, Oracle and Sybase *

Active Devices and

Users

SQL Server *

Windows Volume Licensing *

Client Access Tracking

for Windows Server
2012 *

Client Access
Tracking for
SharePoint Server
2013 *

* Indicates options scenarios which should be selected if they apply to your IT environment

V1.2/7/23/20133

2/7

4. Select the discovery method(s) needed for your environment:

Active Directory Selected by default, recommended for most environments
i. Specific Organization Units (OU) can be deselected
Windows networking protocols recommended for workgroup setups
System Center Configuration Manager (SCCM)
Scan an IP range (ex. 192.168.1.1 192.168.1.255)
Manually enter computer names recommended for machines not joined to the domain such as
ESXi machines not managed by vCenter
Import computer names from a file recommended for specific target scanning
* Select Active Directory if you are unsure of any other methods for discovery

5. Enter the Domain name, Domain user account and password for the account and hit Next. This will be
used to gather information from Active Directory and does not require administrative rights.

6. Select either all computers in the domain or only those containers which have active devices to be
inventoried / within scope and hit Next.

V1.2/7/23/20133

3/7

7. Select Create and enter the account name and password for the various technologies. Make sure to
select PowerShell as well.
These accounts should have privileges to connect to the machines youve specified, usually
administrative
If VMware is used and selected, the account must have access to vCenter management server
Note: You can enter multiple credentials for different technologies by selecting the appropriate
check boxes according to their respective permissions.

8. Once all credentials are entered, hit Save and Next and you will be able to specify the order which the
credentials should be attempted if multiple credentials are being used and entered.
Note:

Next screen(s) may vary based on the scenarios and technologies in your environment.

VMware technology Port 80 / 443 and SSL certificate validation are the defaults but may
be changed per your setup. Recommended to uncheck Validate SSL Certificate

9. Review the Summary page, to begin the inventory of your environment, click Finish and you
will be able to view the status of the inventory.

V1.2/7/23/20133

4/7

Whats next?
Scan completion and additional scanning
Once the initial scan is completed, you will view the success rate on the overview page noting the computers
which were found and successfully inventoried:

Because of the amount of variables in the environment including machines being powered off, users being out of
the office, or other possibilities, we suggest running the scan(s) throughout the day and different times.
Subsequent scans can be initiated on the same database which will only attempt those machines not previously
inventoried successfully.

Running reports
Once the inventory is complete, you can begin to generate many different reports, assessments and data exports
from each scenario selected. We suggest running all of the reports which are available in the tool. These will be
exported to the My Documents\DatabaseName folder of the current user.
Example:

1. Select Environment from the left menu > Click Inventory Results under scenarios:

2. Then click Generate Inventory Results Report:

We suggest running each report for each of the different sections and scenarios within the MAP toolkit. Generally,
each scenario tile will have the option to run one or more reports. (Saved under My Documents > MAP > (DB
Name))

V1.2/7/23/20133

5/7

MAP Toolkit Reference & Support:

Online Resources
The MAP Getting Started Guide http://www.microsoft.com/enus/download/details.aspx?&id=7826
The MAP F.A.Q. http://go.microsoft.com/fwlink/?LinkID=233058
The MAP TechNet Forum http://go.microsoft.com/fwlink/?LinkID=233057
The MAP Training Kit with sample database http://go.microsoft.com/fwlink/?LinkID=196614
Contact us
Microsoft
o Support offerings and regional contact information can be found at
http://support.microsoft.com/common/international.aspx. Premier customers should contact
Premier Support for assistance.
o Twitter @MSSolutionAccel
o Email us directly at mapfdbk@microsoft.com
SoftwareONE
Local, giselle.rojas@softwareone.com; adriana.reyes@softwareone;
Zesergio.Mendoza@softwareone.com
Other Resources
The MAP blog http://blogs.technet.com/mapblog/

Appendix:
1.

To Enable Remote Administration Exception Using Group Policy

You need to enable the Remote Administration exception for computers that have Windows Firewall enabled.
This exception opens TCP port 135 used by RPC and DCOM. If you have another host firewall installed or a
network firewall, you will need to consult that system's documentation on allowing the WMI service through the
firewall.
1. Click Start and then click Run. In the Open box, type gpedit.msc and then click OK.
2. Under Console Root, expand Computer Configuration\Administrative Templates\Network\Network
Connections\Windows Firewall and then click Domain Profile.
3. Right-click Windows Firewall: Allow remote administration exception and then click Properties.
4. Click Enabled and then click OK.
2.

To enable Windows Firewall exceptions Using Group Policy

1. Using the Local Group Policy Editor, expand Computer Configuration\Windows Settings\Security
Settings\Local Policies and then click Security Options.
2. In the Network access: Sharing and security model for local accounts section, click Classic local
users authenticate as themselves.
3. Expand Computer Configuration\Administrative Templates\Network\Network Connections\Windows
Firewall and then click Domain Profile.
4. In the Windows Firewall: Allow remote administration exception section, click Enabled.
5. In the Allow unsolicited incoming messages from box, type the IP address or subnet of the computer
that will perform the inventory.
6. In the Allow unsolicited incoming messages from box, type the IP address or subnet of the computer
that will perform the inventory.

3.

To manually enable the Remote Registry service

1. On the computer on which you want to collect performance data, click Start, right-click Computer, and
click Manage.
6/7

then
V1.2/7/23/20133

2. Microsoft Management Console starts.

3. In the navigation pane, expand Services and Applications, and then click Services.
4. In the console pane, right-click Remote Registry and then click Start.
4.

To enable File and Print Sharing

1. Open Control Panel, click System and Security, and then click Windows Firewall.
2. In the left pane, click Advanced settings, and in the console tree, click Inbound Rules.
3. Under Inbound Rules, locate the rules File and Printer Sharing (NB-Session-In) and File and Printer
Sharing (SMB-In).
4. For each rule, right-click the rule, and then click Enable Rule.

5.

Throttling the MAP tool

The MAP Toolkit has the ability to throttle itself on the machine that it is running on, to prevent the available
resources from being fully consumed. The MAP Toolkit does not throttle itself based on the network availability.
Therefore, in some cases it is possible for the MAP Toolkit to request more information from the target machines
that cannot be handled by the network. When this happens, the network becomes saturated and the machine
running MAP may reboot.
1. Shutdown MAP if it is running
2. Edit the %Program Files%\Microsoft Assessment and Planning
Toolkit\bin\Microsoft.AssessmentPlatform.UI.Console.exe.config file and add the following lines into the
<appSettings> section.
These values in the first and second lines can be adjusted up or down as needed to maximize the performance
while maintaining system stability, but these values must be greater than 3.
<add key=" Mi c ro s oft.As s e s sm en tPl atfo rm .Inv e nto r y En gi ne.In ve nt o ry S erv i c e.D efa ul tM a x T hr ea ds X 86 " value="52" />
<add key=" Mi c ro s oft.As s e s sm en tPl atfo rm .Inv e nto r y En gi ne.In ve nt o ry S erv i c e.D efa ul tM a x T hr ea ds " value="52" />
<add key=" Mi c ro s oft.As s e s sm en tPl atfo rm .Inv e nto r y En gi ne.In ve nt o ry S erv i c e.D efa ul tM i nT h rea ds " value="3" />
<add key=" Mi c ro s oft.As s e s sm en tPl atfo rm .Inv e ntor y En gi n e.In v e nto ry S erv i c e.M ax T h re ad s L o w er Bo un d" value="2" />

NOTES:
The first two lines will set the maximum number of machines to inventory at the same time. You can adjust the
maximum value up or down as needed to maximize the performance while maintaining system stability, but these
values must be greater than 3. Changing these values may increase the inventory time.
The third line sets the minimum number of threads that MAP will use, changing this value is NOT recommended.
6.

Installing .NET 3.5 on Windows Servers 2008 or later (reference)

1. Click the Start button in the lower left hand corner of the display.
2. Highlight Administrative Tools and select Server Manager.
3. In the Server Manager interface, click Features to display all the installed Features in the right hand
pane. Verify that .NET Framework 3.5.1 is listed.
4. If not, continue to click Add Features, and select to install the .NET 3.5 Framework

V1.2/7/23/20133

7/7