Active Directory polling

Expand all | Collapse all

Use Active Directory polling if you use Active Directory; otherwise, it is recommended to use other poll types. If you use Active Directory but some of the networked devices are not listed as members, these devices cannot be discovered by Active Directory polling.

Before you start network polling, make sure that the SMB protocol is enabled. Otherwise, Kaspersky Security Center cannot discover devices in the polled network. To enable the SMB protocol, follow the instructions for your operating system.

Viewing and modifying the settings for Active Directory polling

To view and modify the settings for polling Active Directory groups:

1. In the console tree, in the Device discovery folder, select the Active Directory subfolder.

   Alternatively, you can proceed from the Unassigned devices folder to the Device discovery folder by clicking the Poll now button.

2. Click Configure polling.

   The Active Directory properties window opens. If you want, modify the settings of Active Directory group polling:

   • Enable Active Directory polling

     This option is selected by default. However, if you do not use Active Directory, the poll does not retrieve any results. In this case, you can unselect this option.

   • Set polling schedule

     The default period is one hour. The data received at the next polling completely replaces the old data.

     The following polling schedule options are available:

     • Every N days

       The polling runs regularly, with the specified interval in days, starting from the specified date and time.

       By default, the polling runs every day, starting from the current system date and time.

     • Every N minutes

       The polling runs regularly, with the specified interval in minutes, starting from the specified time.

       By default, the polling runs every five minutes, starting from the current system time.

     • By days of week

       The polling runs regularly, on the specified days of week, and at the specified time.

       By default, the polling runs every Friday at 6:00:00 PM.

     • Every month on specified days of selected weeks

       The polling runs regularly, on the specified days of each month, and at the specified time.

       By default, no days of month are selected; the default start time is 6:00:00 PM.

     • Run missed tasks

       If the Administration Server is switched off or unavailable during the time for which the poll is scheduled, the Administration Server can either start the poll immediately after it is switched on, or wait for the next time for which the poll scheduled.

       If this option is enabled, the Administration Server starts polling immediately after it is switched on.

       If this option is disabled, the Administration Server waits for the next time for which the polling is scheduled.

       By default, this option is enabled.

   • Advanced

     You can select which Active Directory domains to poll:

     • Active Directory domain to which the Kaspersky Security Center belongs.
     • Domain forest to which the Kaspersky Security Center belongs.
     • Specified list of Active Directory domains.

       If you select this option, you can add domains to the polling scope:

       • Click the Add button.
       • In the corresponding fields, specify the address of the domain controller, the name and password of the account for accessing it.
       • Click OK to save changes.

       You can select the domain controller address on the list and click the Modify or Remove buttons to modify or remove it.

     • Click OK to save changes.

If you want to perform the poll immediately, click the Poll now button.

On the virtual Administration Server, you can view and edit the polling settings of Active Directory groups in the properties window of the distribution point, in the Device discovery section.