AD Action Summary Custom Report Request

An overview explaining the report you require:
I need a report that creates a summary of AD activity, showing Accounts Created, Accounts Deprovisioned, Computers Created, Groups Created and Groups Modified.
I have reports that will output the information but then I need to use another method to count the number of operations then find another way to send the information.
It would be much easier if a custom report could be created that I could then use the scheduler to send the email with the information.

The report will output the information like this:
Action                                      Count
Accounts Created                    163
Accounts Deprovisioned          431
Computers Created                 133
Groups Created                       361
Groups Modified                      1502

What version of Enterprise Reporter is being used?:
3.1.0.2112

What discoveries have been run?:
AD

Is there a library report that closely matches what you require?:
Not that I have found but I have made one that gathers the information required just doesn't total the numbers. (see above)

What fields are required in the report?:
Accounts Created, Accounts Deprovisioned, Computers Created, Groups Created and Groups Modified

How does the information in the report need to be sorted?:
Just summary totals as shown above

What parameters are required for filtering the report?:
Timeframe selection e.g. Summary between 01/09/2019 and 01/10/2019

How will this report be consumed? For example, will the report be viewed in report display, exported to CSV, or exported to PDF?:
Preferably sent out using the scheduler but otherwise can be report viewer, csv or pdf etc.

Parents
  • Thank you for your request.  This request is very interesting. 

    Before we can confirm if this report request is possible, we have a few questions. 

    What is your definition of an account being deprovisioned?  Enterprise Reporter does not collect or store dates when an account is deleted or disabled. It is unclear how we would summarize this information in a report. 

    Is the summary for a single domain or multiple domains? 

    Any other parameters required?  Such as domain, OU, etc? 

    Do you have plans to upgrade to version 3.2 or 3.2.1?

    Thank you,

    -Angela  

Reply
  • Thank you for your request.  This request is very interesting. 

    Before we can confirm if this report request is possible, we have a few questions. 

    What is your definition of an account being deprovisioned?  Enterprise Reporter does not collect or store dates when an account is deleted or disabled. It is unclear how we would summarize this information in a report. 

    Is the summary for a single domain or multiple domains? 

    Any other parameters required?  Such as domain, OU, etc? 

    Do you have plans to upgrade to version 3.2 or 3.2.1?

    Thank you,

    -Angela  

Children
  • Apologies I should have mentioned that we add "- Deprovisioned [Date]" to the object name when we deprovision it prior to deletion. e.g. N466690 - Deprovisioned 10/10/2019

    So the way I had the report working to create a report of all deprovisioned computers between a time frame was to use the change history data. I used hidden parameters to look for object name changes that had a value that contained "Deprovisioned" so when someone changes the name to have - deprovisioned in it it will be seen as a change then I just used the change date and time to sort out selecting a time frame..

    I hope that makes sense. I have attached an image to show the parameters of the report as described above.

    Regarding single domain or multiple domain question I think it would be best if we could choose to have a report with multiple domains or just one. I am thinking of it being just like it is on many of the published reports where you can input a domain or multiple domains into the parameter.

    I do not see the need for it to be slimmed down to OU but as mentioned above it would be good if we could see the actions taking place in each domain and actions taking place in multiple domains as a total summary.

    Regarding the upgrade to 3.2 I am not aware of any plan to upgrade but I will find out from someone who may know more and respond ASAP

    And finally regarding the computer creation I just saw when-created (extended) (Domain Computer) as a field and thought it may be possible to add computers created to the report.

    Thank you very much for you hard work on this one definitely is not simple
    Alain

  • After some further investigation we will only need the ability to have the summary for one domain not multiple domains so you can ignore the part talking about multiple domains in the previous reply.

    Additionally there is a plan to upgrade all of our quest products but we do not have a date set yet.