Available only in Safeguard Privilege Manager for Windows Professional Edition and Professional Evaluation Edition.
Run the Client Data Collection Settings Wizard so that you can compile reports, support discovery, and launch on-demand features.
Client data collection settings only apply on computers running a Client.
Before configuring Client data collection settings, you must configure a Server on your domain. For more information, see Configuring the Server.
To use the Client Data Collection Settings Wizard to set up, modify, or discard settings,
Open the wizard by completing one of the following steps:
Open the Client Data Collection Settings Wizard from the Setup Tasks section. It will always show the default settings.
On the Advanced Policy Settings tab of the target GPO, double-click Client Data Collection Settings. The changes made within the wizard are saved here.
Enable the Client Data Collection Settings on the State tab.
Choose Enabled, to ensure the settings apply to the selected GPO.
Choose Not Configured, to enable child GPOs to inherit settings from their parent.
Define the Server on the Settings tab. This Server receives data from the Clients of the target GPO.
Click Browse to locate a Server through Active Directory.
Use the Test button to verify the selected Server's connection to the ScriptLogic PA Reporting Service. If the test fails, check to see if there are network or firewall problems.
Click the Clear the server name link if you want to configure another Server. The displayed service remains installed.
NOTE: To prevent data transfer issues between the Server and linked Clients, check that the port you have selected is open for incoming connections on the Server. Port 8003 is the default port for Server installation.
Use the Advanced Settings on the Settings tab to set these data transfer parameters:
Maximum Sleep Time (in seconds) sets the stagger time period within which every Client sends its data to the data collection service. This value is set to 60 seconds by default.
Send Retries defines the number of retries that are made if an attempt to connect to the web service fails. This number is set to 1 by default.
Network Timeout (in seconds) sets how many seconds a Client should wait to stop sending data if it does not reach the target. This value is set to 600 seconds by default.
Maximum Records Per Transaction indicates how many portions of cached data the Client sends. This value is set to 0 by default, which indicates an unlimited number. To reduce the load on the Server side, you can increase the value to 1 or 2. This may be useful on large networks where each client computer generates many records and a Client may not be able to connect to the data collection service because it is too busy processing data collection transactions.
Click Next to use Validation Logic to target the settings to specific client computers or user accounts within the GPO, or click Finish to save your settings and quit.
If an error message indicates that the target GPO is not selected:
Click OK to close the message window.
Open the GPO tab and select the desired GPO.
Click Save on the GPO toolbar to save the new settings.
Adjust the parameters that Clients use to send their data to the ScriptLogic PA Reporting data collection web service to your specific needs. The web service supports collecting data from a significant number of Clients running concurrently.
Available only in Safeguard Privilege Manager for Windows Professional Edition and Professional Evaluation Edition.
To grant on-demand administrative privileges to a group of trusted users and audit their actions, use the Instant Elevation Wizard.
NOTE: In some cases, Instant Elevation and Blacklisting rules could be configured for the same target application. In this case, Blacklisting takes precedence over Instant Elevation and prevents the application from starting. For more information about creating Blacklisting rules, see Using the Create Rule Wizard.
Before you configure Instant Elevation settings, ensure the following components are set up:
The Client is running on the computers you want to apply the settings to;
The Server is configured and running with the port that you have selected allowed for incoming data (the default port is 8003); and
Client data collection settings are enabled for the selected GPO.
To use the Instant Elevation Wizard to set up, modify, or discard privileges
Open the wizard by completing one of the following steps:
Open the Instant Elevation Wizard from the Setup Tasks section. It will always show the default settings.
Double-click the Advanced Policy Settings > Instant Elevation Settings tab of the target GPO. The changes made with the wizard will be saved here.
Enable the Instant Elevation Settings on the State tab.
Choose Enabled, to ensure the settings apply to the selected GPO.
Choose Not Configured, to enable child GPOs to inherit settings from their parent.
Use the Groups tab to alter the settings. By default, users of the target GPO automatically inherit the administrator's settings (BUILTIN\Administrators).
Complete the advanced options in the Privileges and Integrity tabs.
Click Next to use Validation Logic to target the settings to specific client computers or user accounts within the GPO, or click Finish to save your settings and quit.
If an error message indicates that the target GPO is not selected:
Click OK to close the message window.
Open the GPO tab and select the desired GPO.
Click Save on the GPO toolbar to save the new settings.
Users can click 
Run an Instant Elevation Report to view the processes that are launched. For more information, see Instant Elevation Report.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Conditions d’utilisation Confidentialité Cookie Preference Center
