Generating Reports

Once you've created a profile, you can generate AD permission reports to analyze and document your Active Directory environment. This page explains how to run reports and monitor their progress.

Starting a Report Generation

To generate a new report:

1. From the Home screen, select the profile you want to use
2. Click the "Generate Report" button
3. The report generation process will begin immediately

Understanding the Report Generation Process

When you start a report generation, the application performs these steps:

1. Connects to the domain controller using the specified credentials
2. Locates the entry points (specified containers or domain root)
3. Retrieves objects based on the scan target and filter settings
4. Collects permission information (ACLs) for each object
5. Processes group memberships if those options are enabled
6. Organizes the data into a hierarchical structure
7. Displays the completed report

Monitoring Progress

During report generation, a progress screen will display:

The progress screen includes:

• Progress Message - Current activity being performed
• Started - When the report generation began
• Elapsed - Time since the scan started
• Progress Text - Detailed information about the current step
• Stop Button - Cancel the report generation if needed

Canceling a Report

If you need to cancel a report generation in progress:

1. Click the "Stop" button on the progress screen
2. The application will complete the current operation and then terminate the process
3. You'll be returned to the Home screen

Note: Canceling a large scan may take a few moments as the application needs to clean up resources.

Report Completion

When the report generation completes:

1. The progress screen will close automatically
2. The report viewer will open, displaying the AD Objects tab
3. If the "Auto save reports" option is enabled in Settings, the report will be saved to the history database

Handling Errors

If errors occur during report generation:

• The errors will be collected and displayed in the Event Log section at the bottom of the report viewer
• The Event Log can be expanded to show error details
• Common errors include permission issues, connectivity problems, or timeout errors

Report Generation Tips

• Performance considerations:
  • Large domains can take significant time to scan
  • Options like "Expand nested groups" will increase scan time
  • Consider running larger scans during off-hours
• Memory usage:
  • Very large scans may consume significant memory
  • The application will log memory usage information in case of issues
• Network impact:
  • Scans generate LDAP queries that may impact domain controller performance
  • Consider the network load when running scans in production environments

Once your report has been generated, move on to the Viewing Reports section to learn how to analyze and interpret the results.