Skip to main content

Collection Job Group

The Collection job group collects group policy settings, local users, and local group membership information from Windows servers, then analyzes this information to provide insight into privileged users within the environment.

Collection Job Group in the Jobs Tree

The jobs in the Collection job group are:

  • SG_GroupPolicy Job – This job collects policy assignments from all targeted servers. In particular, the job audits Allow log on locally, Log on as a batch job, Allow log on through Remote Desktop Services, and Log on as a service.
  • SG_LocalMembership Job – This job collects local group membership details from all targeted servers
  • SG_LocalUsers Job – This job collects local user accounts from all targeted servers