Help: Domain settings

Domain list up

The Domain list shows the domain, and workgroups that are detected by DomainScan.

The list is grouped by domain types, which means that up to 4 different groups can be present:

Default domains (for [default] and [local users])
Workgroups
Custom domains (devices that are defined in device lists)
Directory domains

If a domain is currently online (at least 1 online user or device), then a green icon will be shown to the left of the domain name.
If the domain is offline, then a red icon will be shown.
If the domain is obsolete, then a black icon will be shown.

Note	By default, obsolete domains are hidden

The [default] and [local users] domain

When a new database is created, then DomainScan creates two standard domains [default] and [local users]

Users that are created locally on the computer will be placed in the [local users] domain, and [default] will be used as the template for new domains, which means that new domains will be created as a copy of [default].

To view settings for a particular domain, simply click on the name.

Settings up

Overview up

Summary

Domain summary is shown in this list. The numbers shown in a big black font is the number of online devices/users

Directory

In this panel, the number of devices and users that are registered within the Directory is shown. Domain Controllers, Exchange servers and Terminal license servers will also be shown here, if DomainScan were able to discover any

Note	The directory panel is only shown if it’s a directory enabled domain.

Members up

Members

All devices and users are listed in this list. To view information about a device or user, double click on the device or user in question.

The Filter option toggles whether or not one wants to see online, offline or all devices/users in the list.

Statistics

DomainScan monitors the number of devices that are online and remembers the extremes within the hour, which is listed in the drop down boxes.

One can see a graphical representation of the usage by clicking on the graph icon to the right of the drop down box.

Settings up

Connect as

If alternative login credentials are to be used on the domain, then another security setting can be assigned, and all devices in the domain will use this value to connect with.

Settings

Domain suffix
Here, DomainScan will show the domain suffix (that is .com for the domain example.com)
Depending on the network setup, DomainScan may not detect the fully qualified domain name for the domain, and one can correct this here.

Ignore
Select whether to ignore users or devices.
Users will automatically be ignored if devices are to be ignored. The default setting is Don't ignore

Scanning interval
With this option, one can set the delay between each scan for the current domain.
This may be useful in some scenarios where the domain is located on an off-site location, and it’s not that important to check the domain every time the rest of the domain is scanned.

By default, all domains use the global delay, which is set in Settings (Scan interval), but when Use global settings is unchecked, it’s possible to set a custom interval.

Ping online device, even though the domain are not to be scanned
If this option is set, then DomainScan will ping online device during each scan, just to check that online devices are still online.

Note	If one or more events are triggered on a device, then the device will be scanned in each scan until the event is resolved, regardless of the Scanning interval setting.

Directory settings

This is an Active Directory (LDAP) enabled domain
When this option is set, then the workgroup is treated as a directory controlled domain, and DomainScan will try to seek information in the directory.

Note	DomainScan will automatically try to detect Active Directory based domains.

Synchonize with the domain for every # hours
Specifies the interval, in which DomainScan will try to probe the directory for directory information.

Mark users as obsolete when the user cannot be found in the directory
If set, then DomainScan will automatically ‘obsolete’ domain users if they cannot be found in the directory any longer.

Synchronize in the next scan cycleSet this option to force synchronization in the next scan cycle
The option will automatically be cleared at the end of the next scan

New members up

Default settings for devices and users

Mark as obsolete
Set the default obsoletion period for new members of the domain. If the value is 0, then there is no default obsoletion period.

A member of the domain will be marked as obsolete once it has been offline for the specified number of days.

Default settings for new users

Simultaneously logins allowed
Set the maximum number of logins that a user can have, at the same time, without DomainScan creating a notification.
The default value is 2.

If the number of allowed logins is exceeded, then DomainScan will create a notification, but one can also assign a user monitor, in case automated responses are desired.

Retrieve user information
If enabled, DomainScan will try to collect user information from the directory or the local device.

Notifications

Create a notification when new users are discovered
If set, then a notification will be created when a new user is discovered (Notifications must be enabled for this to work).

Notify if a local user is logged in
If set, then a notification will be created if new local user (a user from the [Local users] domain) is logged into a device on the domain.

Default settings for new devices

Inherit domain assigned monitors
If set, then monitors assigned to this domain, will automatically used by every member of this domain.

Inherit domain assigned responses
If set, then responses assigned to this domain, will automatically be used by every member of this domain.

Interfaces

WMI
If disabled, DomainScan will not be able to collect a number of information – for instance audit information, user information and a lot of other information, due to the fact that DomainScan is designed to use the WMI for information gathering.

However, on most non-Windows devices, there is no WMI interface, which means that the scan cycle can be completed marginally faster, if the WMI interface is disabled on non-Windows devices.

SNMP
Virtually all network devices are equipped with a SNMP interface, which DomainScan can also use for information gathering.
However, only a fraction of information is collected, in comparison to devices with a WMI interface.

LDAP
If enabled, then DomainScan will try to resolve user information from the directory – in case the user is a member of an LDAP enabled directory (for instance Active Directory).

Notifications

New servers: Notify is the server is offline
If this setting is set then DomainScan will make sure that new servers are created with the 'notification if offline' option

Create a notification when new devices are discovered
If set, then a notification will be created when a new device is discovered (Notifications must be enabled for this to work).

Audit up

Common settings

Enable audit for this domain
If checked, then devices will collect audit information though the WMI interface

Spread time
(Minutes)
To avoid that audit collecting will be performed on all devices at the same time each day, the time between audits is slightly spread, so that audits will be collected evenly during the day.

Collect

Define the default audit settings for devices in this domain. It is possible to differentiate between servers and non-servers.
See Device information for details about audit options.

By default, the scan interval for servers is 12 hours and 24 for non-servers.

Monitors up

Here, one can select which monitors and responses that are assigned to all devices in the domain.

Note	When a monitor or a response is assigned at domain level then the same monitor, or response, cannot be selected by devices in the domain.

Merge and delete up

Merge

Merge this domain with another domain of the same kind.

The current domain is the merge ‘master’, which means that the domain, that are to be chosen in the merge dialog, will be merged into the current domain

Note	The merge will not complete until the next scan cycle has completed.

Delete

Delete the domain from the DomainScan database.

Once deleted, all information regarding the domain is lost. All devices and users that belong to this domain will be transferred to the default domains, that is [Users] and [Default].