Safeguard Privilege Manager for Windows 4.4 - Administrator Guide

Generating and using reports

To generate a report:

1. Under the Reporting section of the Console, select the type of report. The window for the report will open to the right.

2. Click the Generate Report button to generate a report based on the default filter settings displayed in the Applied Filters section on the top of the screen. You can create multiple shared filter sets and save settings that other administrators can use. For more information, see Using the Applied Filters Wizard.

3. Use the toolbar next to the Applied Filters drop-down menu to add, edit, copy, or delete a filter.

   The results appear below.

4. For the Rule Deployment report, use the Type and Sort menus to view additional information and sort data.

5. Use the toolbar at the top of the results window to navigate the pages or organize them and search for data.

   

6. To navigate across a multi–page report, use the and buttons.

7. The Number of Records field in the upper part of the results page refers to the number of rules listed in the report.

To save the data, use either the Copy or Export To buttons on the results window:

1. Click anywhere on the results window.
2. Click the Copy button.
3. Paste the copied data into a file.

Or,

1. In the toolbar of the of the results window, click the Export To PDF, Export To Excel, Export To Html, or Export To RTF button to save the data into a PDF, Excel, HTML, or RTF file.

2. In the Save As window that appears, name the report.
3. Click Save.

Using the Applied Filters Wizard

To use the Applied Filters Wizard to modify displayed requests and save shared filters for other administrators:

1. Open the Console and select the area for your shared filter set by completing one of the following steps:
   • Under the Reporting section, open the screen for Elevation Activity, Rule Deployment, Instant Elevations, Rule Details, or Advanced Policy Settings, or
   • Under the Discovery and Remediation section, open the screen for Privileged Application Discovery or Self-Service Elevation Requests.

   The Applied Filters section appears on the top of the screen.

2. Use the toolbar next to the Applied Filters drop-down menu to add, edit, copy, or delete a filter.

   The Applied Filters Wizard appears when you add a filter.

3. Complete the following steps:.

   1. Enter a name for your filter set.
   2. Select a filter type in the left section.
   3. Set the desired parameters in the right section.
   4. Press Reset to reset to the default screen, OK to save your settings, or Cancel to close the screen.

4. You can create multiple shared filter sets and save settings that other administrators can use.

   When you select a filter type, it is saved automatically and you can proceed to another modification. Select as many filter types as necessary by switching between them and configuring settings.

   Note: Each filter type can have only one value specified. Every time you set a new value for the same filter type, the newer one overwrites the older one.

5. When finished, click OK to save your changes.

   The specified filter values appear in the Applied Filters list.

Using the Scheduled Reports Details Wizard

After you create a shared filter set to modify your report criteria, you can select a report and set its schedule and delivery. You can configure it to go to multiple recipients, including you, your manager, and/or the help desk. In addition, you can set the subject line to meet the requirements of your help desk. You can also specify network and file share locations to send it to.

To use the Scheduled Reports Details Wizard to generate a scheduled report:

1. Configure the Server.

   1. Use the Privilege Manager Server Setup Wizard to configure the Server Email Notification Configuration settings on the first screen of the wizard.
   2. If you previously completed the wizard, the remaining screens are automatically populated.
   3. Refer to the Privilege Manager for Windows Quick Start Guide for step-by-step instructions.

2. Create shared filter sets to modify your report criteria. You must create at least one shared filter set to generate a scheduled report. Scheduled reports work only for shared filter sets configured in the Reporting tab (except for the built-in Local Filters), not in Discovery & Remediation. For more information, see Using the Applied Filters Wizard.

3. In the Reporting section of the navigation pane, select Scheduled Reports.

   The Scheduled Reports section appears on the top of the screen.

4. Complete the following steps:
   1. Click the Refresh button to refresh the screen and update the last run time.
   2. Use the toolbar to add, edit, copy, or delete a report.

5. The Scheduled Reports Details Wizard will open when you add a report.

6. Complete the Type tab and click Next.
7. Complete the Schedule tab.
   1. Select the Start time.
   2. Select the Cycle for how often the report will run. Changes to scheduled reports may take up to 10 minutes to take effect.
   3. Click Next.
8. Complete one of the sub-tabs under the Delivery tab.
   1. Complete the Email sub-tab.
      1. Use the button to add email addresses and the button to remove them.
      2. Enter a subject.
      3. Select the report format.

   Or,

   2. Complete the File share sub-tab.
      1. Type the folder path in the following format: \\ComputerName\SharedFolder
      2. Use the Browse button to locate the folder.
      3. Use the button to add folder paths and the button to remove them.
      4. Select the report format.
9. Click Finish.
10. After the report is created, check your email or file share to confirm receipt.

Using the Resultant Set of Policy Wizard

The Resultant Set of Policy (RSoP) Wizard is a built-in MMC snap in. It helps you view policy settings applied to selected computers and users (in the logging mode) or simulate a policy implementation to plan changes to your network (in the planning mode). On Windows 10 machines .Net 4.0 needs to be enabled or the PM Console installed in order to view the values from the RSoP Wizard.

To use the Resultant Set of Policy Wizard to report on policies you have applied:

1. Install the Client on the computer for which you are viewing or simulating a policy.
2. Open the MMC. On the Start menu, click Run, type MMC, and then click OK.
3. From the File menu, select Add/Remove Snap-in. The Add or Remove Snap-ins dialog box appears.
   1. Select Resultant Set of Policy under the list of snap-ins.
   2. Click the Add button.
   3. Click OK.
4. The Console Root window now has a snap-in, Resultant Set of Policy, rooted at the Console Root folder.
5. Under the Name column, click Resultant Set of Policy.

6. Complete one of the following steps:

   • Right-click Resultant Set of Policy and select Generate RSoP Data
   • Under the Resultant Set of Policy pane in the Actions column, click More Actions and select Generate RSoP Data.

   The Resultant Set of Policy Wizard appears.

7. Complete the following steps:
   1. Choose the Logging mode to review policy settings or the Planning mode to simulate a policy implementation.
   2. Specify the data requested in each tab and click Next.

   3. Click Finish to quit the wizard.

   The Console Root window now has Privilege Manager for Windows nodes, rooted at the Console Root folder under Computer Configuration and User Configuration. Privilege Manager for Windows Details appears on the right, showing the rules and advanced policy settings that are applied.