Domain Scan

Add your organization's domains and scan them at regular intervals for Windows and Linux workstations.

To add a new domain,

Option	Description	Comments
Probe Name	Select the installed probe that has access to the domain. To add a new probe, click the plus icon.	-
Exclude Devices	Click Exclude Devices to specify devices to be excluded during domain scan. You can exclude devices based on IP addresses and host names.	-
Domain Name	Enter the domain name.	-
Domain Controller	Enter the domain controller name.	Domain controller is the server where Active Directory is installed and domains are configured.
Login Name	Provide the domain administrator login name.	-
Password	Provide the domain administrator password.	-
Use SSL	Enable this option for secure communication between the probe and Active Directory.	Make sure that an SSL certificate is uploaded in Domain Controller or Active Directory.
Base DN	Provide the Base DN to scan only an OU and not the entire domain.	If you provide a Base DN, the probe will form a LDAP query as ldap://DomainController/<BaseDN>. Otherwise, the LDAP query will be: ldap://DomainController/<Domain Name>. During domain scans, the probe uses (objectClass=Computer) as the search filter.
Description	Provide additional information about the domain.	-
Software Scan	Software scan is disabled by default for Linux and AIX devices. To collect software details during scan, enable this option.	-

Finally, click Save.

For the probe to scan workstations, make sure these requirements are met in each target workstation.

List View Actions

In the Domain Scan list view, use the gear icon next to a domain name to scan, edit, or delete it. Additionally:

Click Task Status to view the list of scans assigned to the domain's probe and their statuses.
Click Last Scan Summary to view a summary of the most recent scan performed by the associated probe for the domain. You can export the scan summary as CSV, XLS, or XLSX files.

The user should have read access to the domain or to the Base DN specified in the domain scan configuration.

On the domain controller machine, open the Active Directory services.
Right-click the domain's properties (or respective Base DN object's properties).
Go to Security, verify or choose the login user, and click Apply.