Inactive Users Tracker Quick Start

8/12/2019 Inactive Users Tracker Quick Start

1/10

NetWrix Inactive Users Tracker

Quick Start Guide


2/10

NetWrix Inactive Users Tracker Quick Start Guide

Contents

Introduction......................................................................................................................................................3

Product Features...............................................................................................................................................3

Licensing..........................................................................................................................................................3

Getting Started.................................................................................................................................................5

Syste !e"uireents..................................................................................................................................5

Setu#............................................................................................................................................................5

Next Ste#s........................................................................................................................................................$

Fi%tering &ccounts.......................................................................................................................................$

!unning an 'n()eand !e#ort..................................................................................................................$

*diting t+e Sc+edu%ed Task )irect%y...........................................................................................................$

*diting Noti,ication Te#%ates.................................................................................................................-

2


3/10


Introduction

/any cor#orate security #o%icies and co#%iance regu%ations re"uire t+at &ctive )irectory user and

co#uter accounts ust 0e disa0%ed a,ter certain #eriod o, inactivity. T+is is a good #ractice1 doing sokee#s &ctive )irectory secure and c%ean. For exa#%e2 soeone can create a user account2 %eave it

untouc+ed ,or any days2 and t+en use it to #er,or a%icious activity against an organiation. &not+erexa#%e is e#%oyee retireent4 User accounts ust 0e disa0%ed +en an e#%oyee "uits an organiation2

0ut in #ractice2 IT de#artents are usua%%y t+e %ast to kno +en soe0ody %eaves. &%so2 ost 6!data0ases on%y kee# in,oration a0out t+e 7#riary7 user account and kno not+ing a0out additiona% user

accounts.

Inactive Users Tracker autoates t+e anageent o, inactive user and computer accounts. T+e #rogra

#eriodica%%y c+ecks a%% user and co#uter accounts in s#eci,ied doains and re#orts a%% accounts inactive

,or ore t+an s#eci,ied nu0er o, days.

Product Features

8+ecks a%% user accounts and re#orts t+ose t+at +ave 0een inactive ,or a s#eci,ied nu0er o, days.

&utoatica%%y deactivates inactive user accounts2 eit+er 0y disa0%ing2 or setting a rando #assord2

oving to a s#eci,ic organiationa% unit or ,ina%%y de%eting suc+ accounts.

)etects and re#orts on inactive co#uter accounts and a##%y t+e sae set o, deactivation actions as

,or user accounts.

Sends noti,ications to anagers a0out t+eir inactive accounts.

*(ai% noti,ication te#%ates can 0e custoied according to s#eci,ic re"uireents.

Licensing

Inactive Users Tracker coes in to variants4 ,ree and coercia%. T+e coercia% version is avai%a0%e

it+ t+e ,o%%oing ,eatures4 noti,ications to anagers2 re#ort custoiation2 autoatic account

deactivation2 oving accounts to a s#eci,ied 'U or account de%etion2 accounts ,i%tering and ,u%% tec+nica%

su##ort. We a%so #rovide ,ree o, c+arge tec+nica% su##ort ,or t+e ,reeare version on t+e Support Forum.

3
http://www.netwrix.com/forumhttp://www.netwrix.com/forum


4/10


T+e ta0%e 0e%o out%ines t+e di,,erences 0eteen ,ree and coercia% versions4

Feature Freeware Version Commercial Version

&ctions No

Noti,y anager

Set rando #assord

)isa0%e account

/ove to a s#eci,ic organiationa% unit

)e%ete account

Process co#uter accounts No 9es

Fi%tering ca#a0i%ities No

:y account nae

:y &ctive )irectory organiationa% unit

Tec+nica% Su##ort Su##ort ,oru P+one2 eai%

LicensingFree o, c+arge

Per anaged &) doain or site %icense2 #%ease re"uesta "uot

T+e ,ree version can 0e used 0y 0usinesses and individua%s ,or an unlimited tie2 at no c+arge. T+e

coercia% version can 0e eva%uated ,ree o, c+arge ,or 20days.

4
http://www.netwrix.com/forumhttp://netwrix.com/requestq.html?product=penhttp://netwrix.com/requestq.html?product=penhttp://www.netwrix.com/forumhttp://netwrix.com/requestq.html?product=penhttp://netwrix.com/requestq.html?product=pen


5/10


Getting Started

Fo%%o t+e instructions 0e%o to insta%% and con,igure Inactive Users Tracker.

System Requirements

'ne o, t+e ,o%%oing o#erating systes4

Windos ;P Service Pack < =3?(0it@

Windos Server


6/10


In t+is dia%og 0ox2 s#eci,y t+e ,o%%oing4

T+e nae o, t+e anaged doain in t+e Net:I'S =,or exa#%e2 netwricorp@ or FQ)N = ,or

exa#%e2 netwricorp!local@ ,orat =IP addresses are not su##orted@.

6


7/10


T+e t+res+o%d a,ter +ic+ a%% accounts t+at are not on%ine ,or ore t+an s#eci,ied #eriod i%% 0e

considered inactive and re#orted to adinistrator. /ake sure you s#eci,ied a reasona0%e inactivity#eriod =not %ess t+an 3 days@2 ot+erise you ay get rong users re#orted2 deactivated or de%eted.

Se%ect t+e "oti#y manager a#ter o#tion2 to noti,y an account anager t+at t+e account considered

inactive. :y de,au%t2 t+e account anager i%% receive a essage %ike t+e ,o%%oing4

T+e Set random password a#tero#tion can 0e use,u% i, you donCt ant to disa0%e accounts2 0ut sti%%ant to ake t+e inaccessi0%e ,or %ogon.

Set t+e $isa%le accounts a#tero#tion to disa0%e inactive accounts a,ter a #eriod o, inactivity you+ave s#eci,ied.

Se%ect t+e &ove to a speci#ic '( a#ter o#tion to ove inactive accounts to t+e s#eci,ic

organiationa% unit.

To de%ete inactive accounts a,ter a s#eci,ied #eriod2 use t+e $elete accounts a#tero#tion.

Set t+e Process computer accounts o#tion to inc%ude sta%e co#uter accounts in #rocessing.

*nter coa(se#arated %ist o, e(ai% addresses in t+e "oti#y administrators ,ie%d in t+e

"oti#ication settingssection2 at %east one e(ai% address is re"uired. :y de,au%t2 t+e adinistrators

i%% receive a essage %ike t+e ,o%%oing4

7


8/10


S#eci,y S/TP server settings =S/TP server nae2 #ort2 ,ro address@.

Inactive Users Tracker ski#s a%% autoated actions +en one o, t+e doain contro%%ers is not avai%a0%e. 9ou

can exc%ude doain contro%%ers ,ro #rocessing 0y adding t+e to t+e omitdclist!tt,i%e ,ro t+e #rogra

insta%%ation ,o%der.W+en you +ave ,inis+ed con,iguration2 c%ick '). 9ou i%% 0e #ro#ted ,or t+e credentia%s to run t+e

sc+edu%ed task ca%%ed NetWrix Inactive Users Tracker t+at #er,ors t+e &ctive )irectory c+ecks and sends

noti,ications. T+e account ust +ave su,,icient rig+ts to read your &ctive )irectory doain2 as ,o%%os4

&ccess to t+e )oain 8ontro%%ers organiationa% unit =s*&*ccount"ame2 lastLogon and

lastLogon+imestampattri0utes are re"uired@.

!ig+ts to disa0%e2 ove2 and de%ete accounts2 i, necessary.

T+e de,au%t sc+edu%e ,or t+is task is 3 &/ dai%y2 0ut you can c+ange t+e sc+edu%e 0y c%icking t+e Sc,edule0utton. 9ou can a%so run t+is sc+edu%ed task anua%%y.

8


9/10


"et Steps

T+is section te%%s you +o to contro% t+e o#eration o, Inactive Users Tracker 0eyond t+e initia%

con,iguration. For ore detai%s2 see t+eInactive Users Tracker on%ine +e%#.

Filtering *ccounts

8on,igure ,i%tering 0y organiationa% units i, you donCt ant to #rocess t+e entire doain. =on%y se%ected

'Us i%% 0e #rocessed@. &vai%a0%e on%y in t+e coercia% version.

&not+er use,u% o#tions is Filter %y account name2 +ic+ a%%os you to s#eci,y an inc%usion ,i%ter2 e.g. i,

you enter CsvcDC t+ere2 on%y accounts +ose naes 0egin it+ CsvcC i%% 0e re#orted.

&dditiona% ,i%tering can 0e s#eci,ied using t+e #ilter!tt,i%e =t+is ,i%e %ocated toget+er it+ t+e iut!ee@. List

account naes t+ere =it+out doain naes@ to exc%ude ,ro tracking and #revent t+eir autoaticdisa0%ing. Wi%dcards can 0e used in t+is ,i%e. &vai%a0%e on%y in t+e coercia% version.

Running an 'n-$emand Report

To get a re#ort on +et+er any accounts are inactive2 c%ick S,ow Report. 9ou i%% 0e #ro#ted ,or t+enae o, t+e 6T/L ,i%e you ant to store t+e re#ort in2 and con,ir t+e nae. T+e #rogra i%% #er,or

t+e c+eck using t+e current con,iguration and o#en t+e re#ort ,i%e autoatica%%y.

.diting t,e Sc,eduled +as/ $irectly

Inactive Users Tracker uses a standard Windos sc+edu%ed task ca%%ed NetWrix Inactive Users Tracker to

9


10/10


sc+edu%e its o#eration. In addition to using t+e Sc,edule0utton in t+e NetWrix Inactive Users Tracker

con,iguration dia%og 0ox2 you can edit t+e sc+edu%e and ot+er #araeters o, t+is task direct%y in its#ro#erties.

.diting "oti#ication +emplates

9ou can edit t+e te#%ate ,or t+e noti,ication e(ai% essages. For t+at2 c%ick t+e .dit 0utton in t+e"oti#ication settingssection.

Noti,ication te#%ate editing is avai%a0%e on%y in t+e coercia% version o, Inactive Users Tracker

E

Documents

Inactive Users Tracker Quick Start