The scope defines the set of objects upon which to execute the actions of the Scope Action. It can be a set of machines, users or groups.
Note: You can further fine tune which objects within a scope will be processed by using Conditions.
A scope is first defined by an object type: Users, Groups or Computers. Click on the desired object type button in the Target Object Type section. You should do that before you define the scope. Once you have defined the object type, you need to define the actual set of objects for this scope action.
If you have Scope Templates objects, you can drag and drop them from the template area to the scope area.
If you haven't yet defined a template, you need to create a new scope definition. To create a new scope template, either double-click on the Add New button in the Scope Template area, or, click on the Add New button in the scope area and once defined, drag and drop the scope object to the Template area.
Once Sharing has been configured, you can share your scope templates to make them available to everyone belonging to your Goverlan Workgroup.
Select a scope template from the template area and click on the
button to share or un-share the object.
Click on the Add New button to create a new scope definition, enter a name to define this scope object and define the scope.
Depending on the selected object type, Goverlan offers miscellaneous methods to define the set of objects.
Available for all object types, this method allows you to define a list of objects by selecting an Active Directory container or domain.
Select the domain or container you wish to include in the scope
Enable the Include sub-containers option if you wish to include every child container, or, disable this option to only include the objects contained at the root of the selected container.
Optionally configure a Name Filter. A name filter is a simple string with NO wildcard. The object's name must contain the specified text to be included in the set.
Click on OK.
Available for all object types, this method allows you to define a list of objects based on an input file. The contents of the input file is queried during execution. Therefore, the input file's contents can change between scope action executions.
The input file must contain one entry per line. Do not use quotes or double-quotes to define each entry. The format for each entry can either be a UNC Name (i.e.: DOMAIN\AccountID), or, a simple name (for computer objects only), or, an active directory bindstring (i.e.: LDAP://cn=Object Name, cn=Container, dc=my, dc=domain, dc=com).
Click on the Add Container or Domain link to insert an entire container into the scope. A container can be an Active Directory domain, container or organizational unit or a NT domain. When inserting an Active Directory container in the scope, you also have the option to include all sub-containers as well.
Available for all object types, this method allows you to define a list of objects by selecting them individually from Active Directory (see: Goverlan Object Selector).
If you are defining a Computer scope, this method also allows you to define a list of computers via an IP subnet scan (see: Select Computer Targets). This method is slightly different than selecting the Add an IP Range method (see below) because it defines a static list of found IPs, while adding an IP range defines a dynamic scope (the IP range is scanned during execution).
Note: While selected individual objects using the Goverlan Object Selector, you can select a Group of objects as well. The group members will be queried at execution time.
Available only for computer objects, this method allows you to define an IP range to be scanned at execution time. The IP addresses which fullfil the configured criteria (i.e., is alive, resolves to a name) are used for the scope.
Available only for computer objects, this method allows you to define the scope based on an Active Directory Site. As with the IP Range definition, you can configure criteria on the IP addresses which belong to the selected site.