Managing MS AD discovery tasks

Edit an MS AD discovery task

  1. Navigate to Discovery  MS AD Discovery Tasks.

  2. Select the discovery task you want to edit, and click the Edit icon.

  3. Edit the details of the General tab based on the information provided in the following table.

    Field Description

    Name

    The name of the discovery task.

    Agent

    The agent assigned to run the discovery task.

    Certificate Bucket

    The certificate bucket used to group certificates discovered by the task.

    Domains to Scan

    The name of each AD domain to scan. Multiple domains can be entered in a comma-separated list. When left empty, the task scans all accessible AD domains.

    Max Depth of the Scan

    The number of levels to be included in the scan, starting from the top level of the AD domain, and continuing down into subsequent branching levels. Everything is scanned at each level unless prevented by your AD configuration.

    For example, if the depth is set to 2, the task scans the top level (domain) and the next two nested levels.

    When the depth is set to 0, the task scans all accessible levels.

  4. On the Schedule tab, update the discovery task’s scan frequency.

  5. Click Save.

Delete an MS AD discovery task

  1. Navigate to Discovery  MS AD Discovery Tasks.

  2. Select the discovery task you want to delete, and click the Delete icon.

  3. Click Delete.