Help: Domain settings

Domain list up

The Domain list shows the domain, and workgroups that are detected by DomainScan.

The list is grouped by domain types, which means that up to 4 different groups can be present:

Default domains (for [default] and [local users])
Workgroups
Custom domains (devices that are defined in device lists)
Directory domains

If a domain is currently online (at least 1 online user or device), then a green icon will be shown to the left of the domain name.
If the domain is offline, then a red icon will be shown.
If the domain is obsolete, then a black icon will be shown.

Note	By default, obsolete domains are hidden

The [default] and [local users] domain

When a new database is created, then DomainScan creates two standard domains [default] and [local users]

Users that are created locally on the computer will be placed in the [local users] domain, and [default] will be used as the template for new domains, which means that new domains will be created as a copy of [default].

To view settings for a particular domain, simply click on the name.

Settings up

Overview up

Summary

Domain summary is shown in this list. The numbers shown in a big black font is the number of online devices/users

Directory

In this panel, the number of devices and users that are registered within the Directory is shown. Domain Controllers, Exchange servers and Terminal license servers will also be shown here, if DomainScan were able to discover any

Note	The directory panel is only shown if it’s a directory enabled domain.

Members up

Members

All devices and users are listed in this list. To view information about a device or user, double click on the device or user in question.

The Filter option toggles whether or not one wants to see online, offline or all devices/users in the list.

Statistics

DomainScan monitors the number of devices that are online and remembers the extremes within the hour, which is listed in the drop down boxes.

With DomainScan Pro it is also possible to get a graphical representation of the number of devices.

Settings up

Settings

Domain suffix
Here, DomainScan will show the domain suffix (that is .com for the domain example.com)
Depending on the network setup, DomainScan may not detect the fully qualified domain name for the domain, and one can correct this here.

Ignore
Select whether to ignore users or devices.
Users will automatically be ignored if devices are to be ignored. The default setting is Don't ignore

Scanning interval
With this option, one can set the delay between each scan for the current domain.
This may be useful in some scenarios where the domain is located on an off-site location, and it’s not that important to check the domain every time the rest of the domain is scanned.

By default, all domains use the global delay, which is set in Settings (Scan interval), but when Use global settings is unchecked, it’s possible to set a custom interval.

Directory settings

This is an Active Directory (LDAP) enabled domain
When this option is set, then the workgroup is treated as a directory controlled domain, and DomainScan will try to seek information in the directory.

Note	DomainScan will automatically try to detect Active Directory based domains.

Synchonize with the domain for every # hours
Specifies the interval, in which DomainScan will try to probe the directory for directory information.

Mark users as obsolete when the user cannot be found in the directory
If set, then DomainScan will automatically ‘obsolete’ domain users if they cannot be found in the directory any longer.

Synchronize in the next scan cycleSet this option to force synchronization in the next scan cycle
The option will automatically be cleared at the end of the next scan

New members up

Default settings for devices and users

Mark as obsolete
Set the default obsoletion period for new members of the domain. If the value is 0, then there is no default obsoletion period.

A member of the domain will be marked as obsolete once it has been offline for the specified number of days.

Default settings for new users

Simultaneously logins allowed
Set the maximum number of logins that a user can have, at the same time, without DomainScan creating a notification.
The default value is 2.

Retrieve user information
If enabled, DomainScan will try to collect user information from the directory or the local device.

Default settings for new devices

Interfaces

WMI
If disabled, DomainScan will not be able to collect a number of information – for instance audit information, user information and a lot of other information, due to the fact that DomainScan is designed to use the WMI for information gathering.

However, on most non-Windows devices, there is no WMI interface, which means that the scan cycle can be completed marginally faster, if the WMI interface is disabled on non-Windows devices.

SNMP
Virtually all network devices are equipped with a SNMP interface, which DomainScan can also use for information gathering.
However, only a fraction of information is collected, in comparison to devices with a WMI interface.

LDAP
If enabled, then DomainScan will try to resolve user information from the directory – in case the user is a member of an LDAP enabled directory (for instance Active Directory).