Create an Active Directory Scan

Use an Active Directory scan to review users, devices, groups, and MFA status across Active Directory and Microsoft Entra ID.

Tenant users create scans for their current tenant. MSP users create scans from Global and select one tenant to scan.

Before creating an Active Directory scan, Microsoft 365 must be configured for the tenant. For setup instructions, see the Microsoft 365 Integration Guide.

Start a New Scan

1. Select Scanning.

2. Select New Scan.

   

3. Select Active Directory.

4. Select AD scan.

MSP Users: Select a Tenant

1. Search for or select the tenant you want to scan.

2. Select Continue.

The scan will be scoped to the selected tenant.

Tenant users will not see this screen.

Schedule the Scan

1. Enter a Scan Name.

2. Choose one of the following:

• Recurring: Select the frequency, day, and time.

• Run Now: Run the scan one time.

3. To notify a user when the scan finishes, turn on Notify on Completion.

4. Select Submit.

View the Results

After the scan completes:

1. Open the module menu at the top of the page on the tenant level.

   

2. Select Microsoft 365.

3. Select AD Monitoring to view scan results.

   

4. Open the scan list next to New Scan

   

5. Select the scan you want to view.

The AD Monitoring page will update to display the results of the selected scan.

Use the Users, Devices, Groups, and MFA Status tabs to review the scan results.