Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Original file line number Diff line number Diff line change
Expand Up @@ -14,21 +14,21 @@ unlisted: false

The purpose of this monitor set is to create an 'ADPluginUser' account for the domain controllers detected in the AD Plugin. It will also initiate the script to force a password change every **X** days.

**X** (Number of days) can be defined in the system property `AD_Plugin_Password_Update_Days`. Refer to the [CWM - Automate - Script - Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737) script's document for more information on the system property.
**X** (Number of days) can be defined in the system property `AD_Plugin_Password_Update_Days`. Refer to the [Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737) script's document for more information on the system property.

**Note**
This monitor will no longer run on any EOL systems. This includes 2003 Servers, 2008 Servers, 2011 SBS Servers, and 2012 Servers (both normal and R2). All management of the AD Plugin User Accounts will need to happen manually for these machines.

## Dependencies

[CWM - Automate - Script - Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737)
[Script - Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737)

## Target

Service Plans. Windows Servers. Server Roles. Windows Server Core Services. Domain Controllers

## Alert Template

**Name:** `△ Custom - Autofix - AD Plugin User - Create/Update`
`△ Custom - Autofix - AD Plugin User - Create/Update`

- Import the [CWM - Automate - Script - Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737) script before importing the alert template, or simply verify the script was imported correctly and is fully up to date after importing the alert template.
- Import the [Script - Active Directory - Plugin User Account - Create/Update](/docs/ea1aca74-77ee-4387-91f2-57adb5822737) script before importing the alert template, or simply verify the script was imported correctly and is fully up to date after importing the alert template.
19 changes: 9 additions & 10 deletions docs/cwa/monitors/cpu-temperature-monitoring-process.md
Original file line number Diff line number Diff line change
Expand Up @@ -16,25 +16,24 @@ The remote monitor is responsible for CPU temperature monitoring on physical Win

The remote monitor verifies if the current temperature readings from the sensors exceed the permissible temperature for more than two consecutive executions of the monitor set. If this condition is met, it triggers a failure.

The monitor set is established by the [EPM - Sensors - Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) script, and its configuration is dependent on the system properties and the EDFs, as detailed in the [script's](/docs/7519f655-224b-4c95-b716-773f59cb7314) documentation.
The monitor set is established by the [CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) script, and its configuration is dependent on the system properties and the EDFs, as detailed in the [script's](/docs/7519f655-224b-4c95-b716-773f59cb7314) documentation.

## Details

**Suggested "Limit to":** Physical Windows machines

**Suggested Alert Style:** Once

**Suggested Alert Template:** `△ Custom - Ticket Creation - Computer` or `△ Custom - Email Creation - Computer`
- **Suggested "Limit to":** Physical Windows machines
- **Suggested Alert Style:** Once
- **Suggested Alert Template:** `△ Custom - Ticket Creation - Computer` or `△ Custom - Email Creation - Computer`

## Dependencies

- [EPM - Sensors - Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [EPM - Sensors - Internal Monitor - Execute Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [EPM - Sensors - Script - CPU Temperature Monitor - Manage](/docs/56c1260c-a689-45e9-a226-49bf31444750)
- [Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [Internal Monitor - Execute Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [Script - CPU Temperature Monitor - Manage](/docs/56c1260c-a689-45e9-a226-49bf31444750)
- [Solution - CPU Temperature Monitoring](/docs/cbd87b6f-563f-4fbb-82cf-2861c671f250)

## Ticketing

**Subject:** `CPU Temperature Monitoring - Failure - \\<COMPUTER NAME>`
**Subject:** `CPU Temperature Monitoring - Failure - [COMPUTER NAME]`

**Sample Screenshot:**
![Sample Screenshot](../../../static/img/docs/84d6587b-2bca-4f0e-9176-c0df064f532c/image_1_1.webp)
Original file line number Diff line number Diff line change
Expand Up @@ -12,21 +12,22 @@ unlisted: false

## Summary

The monitor set runs the [EPM - Sensors - Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) script once a week on Windows machines where CPU temperature monitoring is enabled. Monitoring can be turned on or off using the system properties and the EDFs, as explained in the [script’s](/docs/7519f655-224b-4c95-b716-773f59cb7314) documentation.
The monitor set runs the [CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) script once a week on Windows machines where CPU temperature monitoring is enabled. Monitoring can be turned on or off using the system properties and the EDFs, as explained in the [script’s](/docs/7519f655-224b-4c95-b716-773f59cb7314) documentation.

## Dependencies

[EPM - Sensors - Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314)
- [Solution - CPU Temperature Monitoring](/docs/cbd87b6f-563f-4fbb-82cf-2861c671f250)

## Target

Global

## Alert Template

**Name:** △ CUSTOM - Execute Script - CPU Temperature Monitor - Create
`△ CUSTOM - Execute Script - CPU Temperature Monitor - Create`

**The alert template should run the** [EPM - Sensors - Script - CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) **script for `Error`.**
**The alert template should run the** [CPU Temperature Monitor - Create](/docs/7519f655-224b-4c95-b716-773f59cb7314) **script for `Error`.**

![Image 1](../../../static/img/docs/d1cd1622-27ec-4bbd-9297-1b4b7b2d65b2/image_1.webp)
![Image 2](../../../static/img/docs/d1cd1622-27ec-4bbd-9297-1b4b7b2d65b2/image_2.webp)
12 changes: 6 additions & 6 deletions docs/cwa/reports/active-directory-reporting-solution.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,9 +18,9 @@ To provide clients with a professional-looking Active Directory report that they

| Content | Type | Function |
| ----------------------------------------------------------------------------------------------- | --------- | ------------------------------------------------------------------------------------------------------------------------------------- |
| [Report - Active Directory User Assessment](/docs/71ade073-cc5c-4833-bf2c-2d8b13472078) | Report | Displays an overall health view of the client's Active Directory along with a full user report |
| [Report - Active Directory User Groups - Detail](/docs/e76e5bf4-d80e-4a53-ab39-a116c157e008) | Report | Displays a complete user list with all groups that each user is in, along with an overall view of which groups are used the most. |
| [Report - Computers in Active Directory - No Agent](/docs/f3651662-8b77-4254-a8b3-8a945e3aab51) | Report | Displays a list of all computers that are in Active Directory but not in Automate. Can be used to clean up client Active Directories. |
| [Active Directory User Assessment](/docs/71ade073-cc5c-4833-bf2c-2d8b13472078) | Report | Displays an overall health view of the client's Active Directory along with a full user report |
| [Active Directory User Groups - Detail](/docs/e76e5bf4-d80e-4a53-ab39-a116c157e008) | Report | Displays a complete user list with all groups that each user is in, along with an overall view of which groups are used the most. |
| [Computers in Active Directory - No Agent](/docs/f3651662-8b77-4254-a8b3-8a945e3aab51) | Report | Displays a list of all computers that are in Active Directory but not in Automate. Can be used to clean up client Active Directories. |
| SubPageHeaderLandscape | Subreport | Used as the template for the page header on these reports. |

## Associated Content
Expand All @@ -37,19 +37,19 @@ To provide clients with a professional-looking Active Directory report that they
| Content | Type | Function |
| -------------------------------------------------------------------------------------------------------- | ---------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
| [Active Directory Reporting SQL Import Attachment](/docs/fff1e6ee-cc28-43da-87ef-cdb121414c76) | Document | Please download the Import_All_AD_Reports.sql attached to this document. |
| [RSM - Active Directory - Agnostic - Test-WeakCredentials](/docs/9188a8e9-ba15-45aa-9391-d412866b1ebc ) | Agnostic Content | Agnostic method of gathering information on users with potentially compromised passwords by querying currently available comprehensive lists of known password hashes. It is used in the Automate script [RSM - Active Directory - Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724). |
| [RSM - Active Directory - Agnostic - Test-WeakCredentials](/docs/9188a8e9-ba15-45aa-9391-d412866b1ebc ) | Agnostic Content | Agnostic method of gathering information on users with potentially compromised passwords by querying currently available comprehensive lists of known password hashes. It is used in the Automate script [Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724). |

## Dependencies

These reports are dependent on the following items:

1. [AD - Create Views/Table/Schedule for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
2. [RSM - Active Directory - Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724)
2. [Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724)
3. The Active Directory Plugin must be installed and configured for these reports to function.

## Implementation

1. Import the script [RSM - Active Directory - Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724) (This needs to be imported before creating the Table/Views/Schedule).
1. Import the script [Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724) (This needs to be imported before creating the Table/Views/Schedule).
2. Import the script [AD - Create Views/Table/Schedule for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49).
- Run the script once to create the framework needed for the solution. **Delete the script afterward.**
3. Download the attached SQL file named 'Import_All_AD_Reports.sql'.
Expand Down
Original file line number Diff line number Diff line change
Expand Up @@ -22,6 +22,10 @@ Import the file using System → General → Import → SQL File (The SQL file i

![Image](../../../static/img/docs/fff1e6ee-cc28-43da-87ef-cdb121414c76/image_1.webp)

**Note:** Import the SQL file only after importing the script [RSM - Active Directory - Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724) and executing the script [AD - Create Views/Table/Schedule for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49).
**Note:** Import the SQL file only after importing the script [Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724) and executing the script [AD - Create Views/Table/Schedule for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49).
## Attachments
[Import_All_AD_Reports.sql](<../../../static/attachments/itg/15079008/Import_All_AD_Reports.sql>)
[Import_All_AD_Reports.sql](<../../../static/attachments/itg/15079008/Import_All_AD_Reports.sql>)

## Dependencies

- [Active Directory Reporting Solution](/docs/ca5427f7-0efe-499d-9e80-c06698efa5d0)
5 changes: 3 additions & 2 deletions docs/cwa/reports/active-directory-user-assessment.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,5 +18,6 @@ The Active Directory User Assessment report displays a comprehensive list of all

This report is dependent on the following items:

- [RSM - Active Directory - Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724)
- [AD - Create Views/Tables/Schedules for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
- [Script - Weak Passwords - AD Test](/docs/cf22292d-e874-47ee-9bd1-5ec79c5f3724)
- [AD - Create Views/Tables/Schedules for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
- [Active Directory Reporting Solution](/docs/ca5427f7-0efe-499d-9e80-c06698efa5d0)
3 changes: 2 additions & 1 deletion docs/cwa/reports/active-directory-user-groups-detail.md
Original file line number Diff line number Diff line change
Expand Up @@ -18,4 +18,5 @@ The Active Directory User Groups - Detail report displays a comprehensive list o

This report is dependent on the following items:
- The Active Directory Plugin needs to be installed and configured.
- [AD - Create Views/Tables/Schedules for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
- [AD - Create Views/Tables/Schedules for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
- [Active Directory Reporting Solution](/docs/ca5427f7-0efe-499d-9e80-c06698efa5d0)
1 change: 1 addition & 0 deletions docs/cwa/reports/computers-in-active-directory-no-agent.md
Original file line number Diff line number Diff line change
Expand Up @@ -20,6 +20,7 @@ This report is dependent on the following items:

- The Active Directory Plugin needs to be installed and configured.
- [AD - Create Views/Tables/Schedules for AD Reporting Solution](/docs/f0b2fe2b-8bd8-4d9a-9428-2123b332aa49)
- [Active Directory Reporting Solution](/docs/ca5427f7-0efe-499d-9e80-c06698efa5d0)

## Report Example

Expand Down
Original file line number Diff line number Diff line change
@@ -1,8 +1,8 @@
---
id: 'ea1aca74-77ee-4387-91f2-57adb5822737'
slug: /ea1aca74-77ee-4387-91f2-57adb5822737
title: 'Active Directory - Plugin User Account - CreateUpdate'
title_meta: 'Active Directory - Plugin User Account - CreateUpdate'
title: 'Active Directory - Plugin User Account - Create/Update'
title_meta: 'Active Directory - Plugin User Account - Create/Update'
keywords: ['domain', 'admin', 'account', 'active', 'directory', 'plugin']
description: 'This document outlines a script designed to create or update a domain admin account for the Active Directory plugin, including features for random password generation and troubleshooting capabilities. It is intended for use on domain controllers detected by the Active Directory Domains plugin and includes implementation steps, dependencies, and variable configurations.'
tags: ['active-directory', 'security', 'setup', 'windows']
Expand All @@ -16,7 +16,7 @@ This script will create or update a domain admin account to be used with the AD

Additionally, there is an option available in the script to set the password as the deployment and default password for the location. This option can be controlled by the system property `AD_Plugin_Set_Location_Default_Password`.

**Intended Target**: Domain Controllers detected in the `Active Directory Domains` plugin. The script is called by the [CWM - Automate - Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba) monitor as an autofix.
**Intended Target**: Domain Controllers detected in the `Active Directory Domains` plugin. The script is called by the [Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba) internal monitor as an autofix.

### Notes
- This script will no longer function on any end-of-life systems, including 2003 Servers, 2008 Servers, 2011 SBS Servers, and 2012 Servers (both regular and R2 editions). Manual management of AD Plugin User Accounts will be necessary for these machines.
Expand All @@ -41,7 +41,7 @@ Additionally, there is an option available in the script to set the password as
![Update Step](../../../static/img/docs/ea1aca74-77ee-4387-91f2-57adb5822737/image_2.webp)

- Import the replacement Monitor, Script, and alert template using the ProSync plugin.
- [CWM - Automate - Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba)
- [Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba)
- `△ Custom - Autofix - AD Plugin User - Create/Update`
- This script 'should' be imported after importing the alert template. Verify it is in the system.

Expand All @@ -55,7 +55,7 @@ Additionally, there is an option available in the script to set the password as

**For New Implementation:**
- Import the New Monitor, Script, and alert template using the ProSync plugin.
- [CWM - Automate - Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba)
- [Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba)
- `△ Custom - Autofix - AD Plugin User - Create/Update`
- This script 'should' be imported after importing the alert template. Verify it is in the system.

Expand All @@ -66,7 +66,7 @@ Additionally, there is an option available in the script to set the password as

**Notes:**
- The user parameters are required for the **first run only** (First run of the updated script).
- The values set for the user parameters will be used to create system properties used by the script and the [CWM - Automate - Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba) monitor set.
- The values set for the user parameters will be used to create system properties used by the script and the [Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba) monitor set.
- **If values are not provided** to the user parameters for the first run of the script, the script and the monitor set will then use the default values.
- Default Password Title: ADPluginUser
- Default Username: ADPluginUser
Expand All @@ -84,7 +84,8 @@ Additionally, there is an option available in the script to set the password as

## Dependencies

[CWM - Automate - RMM+ Plugin Configuration](/docs/f99ddaae-0cb3-4941-b2aa-dc93671dd246)
- [RMM+ Plugin Configuration](/docs/f99ddaae-0cb3-4941-b2aa-dc93671dd246)
- [Internal Monitor - Active Directory - ADPluginUser - Create/Update](/docs/49c050b4-5319-4ffe-929a-d59429bdd3ba)

## Variables

Expand Down
Loading