You can remotely scan managed hosts (other than those on the supported list) by adding a “generic” managed host. This type of managed host supports scheduled scans only and does not support real-time security updates or resource activity collection.

To add a generic managed host

1. In the Navigation view, select Data Governance | Managed hosts.

   NOTE: If you do not see the host you want to manage listed, edit the Data Governance service configuration file (DataGovernanceEdition.Service.exe.config) as follows:

   • Locate the customHostParameters section.

     <customHostParameters>

         <additionalOperatingSystems>

             <!--<operatingSystem value="MyOperatingSystem"/>-->

         </additionalOperatingSystems>

     </customHostParameters>

   • Remove the commented operatingSystem line and replace it with a line that specifies the operating system value for the host you want to manage. That is, the string found in the ADSMachine.OperatingSystem field. For example, if the host you want to manage has the operating system field "MyOS", edit this setting as follows:

     <customHostParameters>

         <additionalOperatingSystems>

             <operatingSystem value="MyOS"/>

         </additionalOperatingSystems>

     </customHostParameters>

     This will include all machines that contain the string "MyOS" in its operating system field.

   • If you want to specify an exact match, include the isExact parameter as follows:

     <customHostParameters>

         <additionalOperatingSystems>

             <operatingSystem value="MyOS" isExact="true"/>

         </additionalOperatingSystems>

     </customHostParameters>

   All of the hosts found using this filter will now appear in the Managed Host view as Unknown host type.

2. In the Managed hosts view (right pane), select a host with the status of Not Managed and a host type of Unknown.

3. Select Manage host from the Tasks view or right-click menu.

   NOTE: If you selected multiple host computers with the status of Not Managed and of the same host type, use the Manage multiple hosts task or right-click menu command. The settings specified on the Managed Host Settings dialog will apply to all selected host computers.

   The Managed Host Settings dialog appears.

   NOTE: If you select a host computer on a domain that was not previously identified as a managed domain, the Domain Credentials dialog appears. Click the Set button to supply the credentials of an Active Directory user with administrative rights on the selected domain. Assigning the credentials for the domain registers the user as a Data Governance Edition service account, links the service account to the domain and adds it to the managed domains list.

   Once the domain credentials are set, the Managed Host Settings dialog appears.

4. At the top of the Managed Host Settings dialog, specify the following information:
   1. Managed Host: This is a read-only field displaying the name of the host computer selected in the Managed hosts view.
   2. Host Type: Select Generic Host Type.

   3. Agent Install Path: (Optional) Use this field to specify an alternate installation location. This must be a local path (for example C:\Mypath) and cannot exceed 512 characters.

      Note: By default, this field displays Use default install directory and the agent is installed in the Data Governance Server installation directory (%ProgramFiles%\One Identity\One Identity Manager Data Governance Edition\Agent Services).

      If there is an existing agent, you cannot install another agent with a different installation directory. All agents must be installed in the same directory.

   4. Keywords: (Optional) Enter a keyword which can be displayed and used to group managed hosts in the Managed hosts view.

5. Use the Agents page to select the remote agent and service account to be used to scan the target host.

   To add a remote agent:

   1. Open the Agents page.
   2. Select the agent: Select the agent host computer to be used to scan the target computer.

   3. Select the service account: Select a service account with sufficient permissions to access the target computer and the agent host.

      An agent requires a service account that has the rights to read security information on the remote host. Only previously configured service accounts that are registered with Data Governance Edition are available for selection. For more information, see Readying a service account and domains for deployment.

   4. Click the Add button to add the agent to the agents list.

      TIP: For remote managed hosts, add only one remote agent during the host's initial deployment. You can add additional remote agents later using the Edit host settings task after the managed host is deployed.

      For more information, see Agents page.

6. Use the Managed Paths page to specify the roots of the NTFS directory tree to be scanned by the agent.

   To add managed paths:

   1. Open the Managed Paths page.
   2. Click the Add button.

   3. In the Managed Paths Picker dialog, click the check box to the left of a directory to add it to the managed paths list.

      NOTE: When using multiple agents to monitor a remote managed host, select the managed path to be monitored and then select an agent from the Agent Selection drop-down menu. Repeat this process for all paths to be monitored. An agent can monitor multiple paths; however, multiple agents cannot monitor the same managed paths. The Scanning Agent field in the Managed Paths Selection grid displays the agent selected to scan the different paths.

   4. Click OK to save your selections and close the dialog.

   The selected paths, including those that are excluded, appear on the Managed Paths page.

   For more information, see Managed paths page.

7. By default, remote agents scan daily at 2:00 A.M. Use the Security Scanning page to change the time and frequency with which the agent scans the target computer.

   To modify the scanning schedule and settings:

   1. Open the Security Scanning page.
   2. Use the controls in the Scanning Schedule pane to define the time and frequency of the agent scans.
   3. Use the check boxes at the bottom of the page to modify the default security scanning behavior:
      • Immediately scan on agent restart or when managed paths change: Select this check box to perform a full scan whenever the agent restarts or there are changes made to the managed paths.

      • Ignore all files and only store folder security data: Clear this check box if you want to include file security data in the security index.

   For more information, see Security Scanning page.

8. Click the OK button at the bottom of the Managed Host Settings dialog to save your selections and deploy the managed host.

Scanning of the specified managed paths begins on the configured schedule. Once the managed host is successfully added (Status is Managed), you are able to see and manage security information for the folders and shares on the target managed host using the Resource browser. Double-click a managed host in the Managed hosts view to display the Resource browser.