The Active Roles Collector allows you to collect data from computers running the Administration Service and store it in a SQL Server database, making the data available for reporting.
NOTE: The Collector is installed as a separate component of Active Roles.
Data for reports is collected from the following sources:
The scope of data that the Collector can retrieve from Active Directory is restricted by the access rights of the user account under which the Collector performs the data collection task. Therefore, reports based on Active Directory data only include information about the objects that the Collector is permitted to access in Active Directory.
For example, suppose the Collector performs a data collection task under the user account that is not permitted to access user account properties in Active Directory. As a result, the Collector will not be able to retrieve data related to user accounts, and reports will not display any information about user accounts, including the number of user accounts.
To start the Active Roles Collector wizard
When started, the Collector wizard displays the Select Task page where you can select one of the following the tasks to perform:
If you select the option Collect data from the network on the Select Task page, the Collector wizard displays the Configure Connection page on the next step.
On the Configure Connection page, the wizard prompts you to specify the basic options for managing the data: the database in which you want to store the collected data; the source computer running the Administration Service; and the credentials to log on to that computer.
To specify a database, click the button next to the Database box. In the dialog box that appears, you can specify the desired database and authentication option for connection to SQL Server.
In the Active Roles Service box, type the full name of the computer running the Administration Service from which you want to collect information.
In the Log on as area, specify the credentials that the Collector will use to connect to the Administration Service. You can choose one of the following options:
Click Next to proceed to the Data Collection Tasks page.
On the Data Collection Tasks page, the wizard prompts you to select the sources of the data you want Collector to retrieve:
Click Next to proceed to the Data to Collect page.
NOTE: The wizard only displays the Data to Collect page if you select the Active Directory check box on the Data Collection Tasks page.
On the Data to Collect page, the wizard prompts you to specify the categories of data you want to collect:
NOTE: If you select the Policy Compliance Information check box on the previous page, the wizard does not allow the Policy Objects check box to be cleared on the Data to Collect page.
Click Next to proceed to the Select Domains or OUs page.
On the Select Domains or OUs page, the wizard prompts you to specify the domains or containers from which you want to collect information. You can complete this page as follows:
When selecting a domain or OU, you have the option to force the wizard to collect information about all objects held in the selected domain or OU: select the Use subtree search check box in the dialog box that appears when you click Add. If you clear the Use subtree search check box, the wizard only collects information about the immediate child objects of the selected domain or OU.
Click Next to proceed to the Select Operation Mode page.
On the Select Operation Mode page, you can specify whether to start the task execution immediately or schedule the task to run at a convenient time. You can also disable SID resolving for faster data collection.
If you want to start the collection process right now, select Now under Run Active Roles Collector and click Next. While the wizard performs the operation you can see the progress screen, showing you the progress details.
When the operation is completed, the wizard displays the final screen that shows you the operation results. You can click View Log to examine operation log for possible errors.
If you want to schedule the task, select On a schedule and click Next. This displays the Schedule page where you can specify the task schedule and logon account. Click Add to create a schedule for the task. In the User account under which the task will run area, supply the user name and password of the user account under which you want the task to run. Once the scheduling options are set, click Next to complete the wizard.
You use the Active Roles Collector to prepare data for reporting. The data is stored in the database you specify. Then, in order to make the data available to the report server, you need to configure the data source on the report server to connect to the database that holds the data. This topic provides instructions on how to prepare report data. For instructions on how to configure the data source for the Active Roles Report Pack, see Configuring the data source later in this chapter.
To collect data from the network, start the Collector wizard (see Starting the Active Roles Collector wizard), and complete the wizard pages as follows.
When selecting a domain or OU, you have the option to force the wizard to collect information about all child objects of the selected domain or OU: Select the Use subtree search check box in the dialog box that appears when you click Add. If you clear the Use subtree search check box, the wizard only collects information about the immediate child objects of the selected domain or OU.
The user account under which the task will run must have the “Log on as a batch job” right. Use Group Policy security settings to assign that right to the user account. Members of the Administrators or Backup Operators group have the “Log on as a batch job” right by default.
You can use the Task Scheduler console to examine the Collector task that you have scheduled. Task Scheduler allows you to view or change the task’s properties such as task’s name, description, security options, triggers, conditions, and settings. The task’s history can also be viewed along with the properties. Task Scheduler tracks the task’s history by events that are raised when the task is started, run, finished executing, and at other times as needed to track the task’s history. Errors related to the task are also tracked in the task’s history.
To view the task’s properties and history by using Task Scheduler
You can start Task Scheduler by entering Taskschd.msc at a command prompt.
The name of the task in the Task Scheduler console has the following format:
Active Roles Collector ( <task name> ) where <task name> stands for the name you specified in the Collector wizard; for example, Active Roles Collector (New Task).
The History tab lists the events specific to the task you selected. Click an event in the list to view the description of the event.