Microsoft Assessment and Planning Toolkit

MICROSOFT ASSESSMENT AND
PLANNING TOOLKIT
GETTING STARTED GUIDE
VERSION 8.0
Published: December 2012

For the latest information, please see http://www.Microsoft.com/MAP
Microsoft.com/SolutionAccelerators
ii
Microsoft Assessment and Planning Toolkit
Copyright 2012 Microsoft Corporation. All rights reserved. Complying with the applicable
copyright laws is your responsibility. By using or providing feedback on this documentation,
you agree to the license agreement below.
If you are using this documentation solely for non-commercial purposes internally within YOUR company or organization, then this
work is licensed under the Creative Commons Attribution-Non Commercial 3.0 Unsupported License. To view a copy of this license,
visit http://creativecommons.org/licenses/by-nc/3.0/ or send a letter to Creative Commons, 444 Castro Street, Suite 900, Mountain
View, California, 94041, USA.
This documentation is provided to you for informational purposes only, and is provided to you entirely "AS IS". Your use of the
documentation cannot be understood as substituting for customized service and information that might be developed by Microsoft
Corporation for a particular user based upon that users particular environment. To the extent permitted by law, MICROSOFT MAKES
NO WARRANTY OF ANY KIND, DISCLAIMS ALL EXPRESS, IMPLIED AND STATUTORY WARRANTIES, AND ASSUMES NO LIABILITY TO
YOU FOR ANY DAMAGES OF ANY TYPE IN CONNECTION WITH THESE MATERIALS OR ANY INTELLECTUAL PROPERTY IN THEM.
Microsoft may have patents, patent applications, trademarks, or other intellectual property rights covering subject matter within
this documentation. Except as provided in a separate agreement from Microsoft, your use of this document does not give you any
license to these patents, trademarks or other intellectual property.
Information in this document, including URL and other Internet Web site references, is subject to change without notice. Unless
otherwise noted, the example companies, organizations, products, domain names, e-mail addresses, logos, people, places and
events depicted herein are fictitious.
Microsoft, Active Directory, Excel, Hyper-V, SharePoint, SQL Server, Windows, Windows Azure, Windows NT, Windows Server, and
Windows Vista are either registered trademarks or trademarks of Microsoft Corporation in the United States and/or other countries.
The names of actual companies and products mentioned herein may be the trademarks of their respective owners.
You have no obligation to give Microsoft any suggestions, comments or other feedback ("Feedback") relating to the documentation.
However, if you do provide any Feedback to Microsoft then you provide to Microsoft, without charge, the right to use, share and
commercialize your Feedback in any way and for any purpose. You also give to third parties, without charge, any patent rights
needed for their products, technologies and services to use or interface with any specific parts of a Microsoft software or service
that includes the Feedback. You will not give Feedback that is subject to a license that requires Microsoft to license its software or
documentation to third parties because we include your Feedback in them.
Getting Started Guide
CONTENTS
What is the MAP Toolkit........................................................................................................... 2
Why Choose the MAP Toolkit................................................................................................... 2
How to use the MAP Toolkit..................................................................................................... 3
Where to get Information, Help and Assistance...................................................................8
Feedback.............................................................................................................................. 8
Phase 1: Choose your MAP Toolkit goal...................................................................................9
Phase 2: Gather your data collection requirements...............................................................14
Gather Credentials (Account Names and Passwords).........................................................14
Choose a Discovery Method...............................................................................................17
Phase 3: Prepare your environment......................................................................................21
Phase 4: Install the MAP Toolkit............................................................................................. 29
System Requirements........................................................................................................ 29
Hardware Requirements..................................................................................................... 29
Where to Get the MAP Toolkit............................................................................................. 30
How to Install the MAP Toolkit............................................................................................30
Uninstall the Toolkit............................................................................................................ 31
Troubleshooting Inventory Issues.......................................................................................31
WHAT IS THE MAP TOOLKIT

The Microsoft Assessment and Planning (MAP) Toolkit 8.0 is an inventory, assessment, and
reporting tool that helps you assess your current IT infrastructure and determine the right
Microsoft technologies for your IT needs. The MAP toolkit uses Windows Management
Instrumentation (WMI), Active Directory Domain Services (AD DS), SMS Provider, and other
technologies to collect data in your environment and inventories computer hardware,
software, and operating systems in small or large IT environments without installing any
agent software on the target computers.
The data and analysis provided by MAP streamline the planning process for software
migration, help assess device driver availability, and allow you to make hardware upgrade
recommendations. The MAP Toolkit also gathers performance metrics from computers you
are considering for virtualization and includes a feature to model a library of potential host
and storage hardware configurations. Use the MAP Toolkit to simplify the planning process
for migration to Windows 8, Windows Server 2012, Windows 7, Microsoft Office 2010,
Microsoft Office 2013, Microsoft Office 365, Internet Explorer 10, Windows Azure Platform,
Windows Server 2008 R2, Microsoft SQL Server 2012, Hyper-V, Hyper-V R2, and Microsoft
Private Cloud Fast Track.
WHY CHOOSE THE MAP TOOLKIT

Whether you're an IT professional, a partner or a consultant, the MAP Toolkit helps you
understand your organization's IT infrastructures and determine the right Microsoft
technologies for your needs. This free Solution Accelerator can quickly inventory small or
large IT environments and provides insight into your ability to migrate to the latest versions
of Microsoft products. MAP is an ideal assessment and planning tool for the following:
Discovery of computers and applications

Hardware and software readiness migration
Capacity planning for server, desktop and virtualization projects
Public and Private Cloud capacity and migration planning
Software usage tracking
HOW TO USE THE MAP TOOLKIT

The key to a successful experience using the MAP Toolkit is to complete each of six phases
sequentially. This Getting Started Guide will help with Phases 1 4, as outlined below. For
more information about the goals supported by the MAP toolkit, the results provided by the
assessment and planning scenarios or where to get help with issues related to the toolkit,
please visit the MAP Community Hub at http://go.microsoft.com/fwlink/?LinkId=254922.
Microsoft.com/MAP
Phase 1: Choose Your Goals

In this section, you can review the inventory, assessment, capacity planning and software
usage tracking scenarios supported by the MAP toolkit, understand with which wizard you
should start, what selections to make in the wizard, and get an idea of which data collection
technologies will be used.
Phase 2: Gather Your Data Collection Requirements
The MAP Toolkit uses collection protocols to communicate with machines in a network in
order collect information to use in the various assessments. The communication is subject
to specific administration and security settings on the target machines and is based upon
many things including the operating system, firewall and anti-virus settings as well as the
information that you are trying to collect. In this phase, you will gather the user accounts
and passwords needed to connect and successfully inventory your environment in advance
of running the toolkit.
Phase 3: Prepare Your Environment
The MAP Toolkit uses several different communication protocols based upon your goals and
how the environment is configured. These include WMI, Active Directory Domain Services,
SQL Server commands, VMware Web services and SSH with remote shell commands. In
Phase 3, you will prepare your environment to ensure that MAP can successfully connect and
gather information from the target machines in your environment.
Phase 4: Install the MAP Toolkit
The MAP Toolkit is available as a free download from the Microsoft Download Center. In this
phase, you will install the toolkit according to the options that best fit your environment and
goals. See the Microsoft Assessment and Planning Toolkit page on the Microsoft Download
Center for additional information.
Phase 5: Collect Data

After you have selected your goals, gathered data collection requirements, prepared your
environment, and installed the MAP toolkit, you can now begin the data collection process.
There are two wizards that are used to collect to the data required for most scenarios.
Inventory and Assessment Wizard

Performance Metrics Wizard
The Inventory and Assessment Wizard is the starting point for all MAP toolkit scenarios.
Using the information gathered in phases 1-3, the step-by-step wizard will prompt you to:
1. Select your inventory scenario (Phase 1)
2. Select your discovery method (Phase 2)
3. Provide the credentials required to connect and inventory the target machines
successfully (Phase 2- 3)
For additional information about the Inventory and Assessment wizard, see the MAP Team
Wiki at http://go.microsoft.com/fwlink/?LinkId=254922.
The Performance Metrics Wizard is used to collect specific performance related
information such as CPU, memory, network and disk utilization for Windows servers and
clients as well as LINUX based servers. The information gathered through this collection
mechanism supports the capacity planning features for server consolidation, desktop
virtualization, Microsoft Private Cloud Fast Track, and Azure Application migration.
For more information about Collecting Performance Data, go to the MAP Team Wiki topic at
http://go.microsoft.com/fwlink/?LinkId=255497.
For a more in depth discussion of Data Collection scenarios, see the MAP Team Wiki topic at
Phase 6: Review the Reports
The MAP Toolkit will generate custom reports and proposals that are specific to the
environment the Toolkit inventoried. The following reports and proposals are available in the
MAP Toolkit.
MAP Report Package
Name
Description
Windows 7 Hardware
Assessment
Summarizes the readiness of computers on your network for

migration to Windows 7. Indicates which computers already meet
the hardware requirements for Windows 7, describes any hardware
or BIOS upgrades you should complete before migration, and
addresses the compatibility of the devices installed on each
computer.
This assessment includes a report and proposal.
MAP Report Package

Name
Description
Windows 8 Hardware
Assessment
Summarizes the readiness of computers on your network for

migration to Windows 8. Indicates which computers already meet
the hardware requirements for Windows 8.
Windows Server
2008 R2 Hardware
Assessment
This assessment includes a report and a proposal.

Summarizes the hardware readiness of servers for a migration to
Windows Server 2008 R2 and indicates whether they are capable
of running Windows Server 2008 R2.
Windows Server
2012 Hardware
Assessment
This assessment includes reports and a proposal.

Summarizes the hardware readiness of servers for a migration to
Windows Server 2012 and indicates whether they are capable of
running Windows Server 2012.
Microsoft SQL
Server Discovery
This assessment includes a report and a proposal.

Summarizes SQL Server components installed in your
environment, indicates how they map to components in SQL
Server 2012, and describes any guidance and best practices for
migrating those components.
The MAP toolkit also generates a SQL Server Database Details
report, which provides detailed information about various SQL
Server instances running in your network. This report also shows
which databases are installed on each instance. You can use the
information in this report to consolidate SQL Server instances or
databases in your environment.
MySQL, Oracle and

Sybase Discovery
Internet Explorer
Discovery
Virtual Machine
Discovery
This assessment includes reports and a proposal.

Identifies Windows and Linux computers running MySQL, Oracle
and Sybase databases as well as Oracle servers that are installed
on HP-UX. This information can be used to assess your
environment for migrating to Microsoft SQL Server.
This assessment includes a report only.
Provides details about Internet Explorer and Non-Microsoft
browsers deployed in your environment. This report also provides
information about the Internet Explorer Add-ons deployed in your
environment.
Identifies and provides detailed information about physical
computers and the virtual machines running on them. It covers
Microsoft Virtual Server 2005 R2, Microsoft Hyper-V technology,
and VMware virtualization platforms.
MAP Report Package

Name
Description
Microsoft Office 2010

Assessment
Summarizes the readiness of each inventoried client computer for

migration to Microsoft Office 2010. Describes the Microsoft
Office products installed on each computer, and the version(s) that
are installed.
Microsoft Office 2013

Assessment
Office 365 Client

Readiness
Performance Metrics
Report
Server Consolidation
Recommendations
Microsoft Private Cloud

Fast Track
Consolidation

Summarizes the readiness of each inventoried client computer for
migration to Microsoft Office 2013. Describes the Microsoft
Office products installed on each computer, and the version(s) that
are installed.
Summarizes the overall readiness of the client machines for an
upgrade to Office 365. Describes the Microsoft Office products
installed on each computer and the version(s) that are installed.
This report is generated from data using the Performance Metrics
Wizard. It provides detailed statistics and information discovered
during performance monitoring of selected servers. The statistics
are provided for processor, network, memory, physical disk, and
logical disk utilization for each selected server. The report is
provided so you can ensure that performance monitoring
completed successfully and to validate the performance collection
statistics.
This assessment is generated using data from the Server
Consolidation Wizard. It provides detailed information about the
host machine configured in the wizard, consolidation
recommendations based on that model, utilization of servers
before and after virtualization, and why particular physical
computers may not have been placed on the host.
This assessment offers detailed deployment and sizing
recommendations based on key performance metrics and detailed
hardware specifications of each server that the Microsoft
Assessment and Planning (MAP) tool inventoried across the
network.
MAP Report Package

Name
Description
Legacy Windows
Server Inventory
Report
Provides details about computers running the Windows 2000

Server and Windows Server 2003 operating systems in your
environment. The report provides information about the
applications installed on each computer and lists their current
roles. This report also displays servers running on Itanium
hardware as Windows support for this platform has ended with
Windows Server 2008 R2.
Web Application and

Database Discovery

Inventories web applications and SQL Server database instances
in your environment and reports information that will help you plan
for the migration of on-premises workloads to Windows Azure
Platform.
Desktop Virtualization
Planning Report

Provides a summary comparison, assessment selection and
planning details for Remote Desktop Services VDI and Session
based capacity planning.
Windows Environment
Summary Report

Provides a summary of all Windows-based computers discovered in
your environment as well as all collected hardware data and an
installed application count.
Linux Environment
Summary Report

Provides a summary of all Linux-based computers discovered in
your environment as well as all collected hardware data and all
collected LAMP stack details.
Windows Thin PC
Readiness Report

Provides a summary of Windows Thin PC readiness information for
computers that are already running a Microsoft Windows client
operating system.
Windows Azure VM
Readiness Report

Provides a summary of the Microsoft Windows Server and Linux
machines that were evaluated to be migrated to a Windows Azure
Virtual Machine.
Windows Azure VM
Capacity Report

Provides a summary of estimated resource usage and sizing
requirements to migrate your physical and virtual servers to
Windows Azure Virtual Machines.
VMWare Migration
Report

Provides a summary of physical servers running virtualization
technologies and virtual machines in your IT environment.
This assessment includes two reports and one proposal.
MAP Report Package

Name
Description
Active Devices and

Users Report
Provides a count of the number of Windows devices and users

found in the Active Directory environment.
Windows Server Usage

Tracking Report
SharePoint Server
Usage Tracking Report
Endpoint Protection
SQL Server Usage

Tracking Report
Exchange Server
System Center
Configuration Manager
Lync Usage Tracking

Report

Provides an overview of the Windows Server usage assessment run
within your IT environment, a summary of servers found in your
environment, roles for each server, and information on unique
client and device connections to each server.
Provides an overview of Office SharePoint Server assessment run
within your IT environment, relationships between office
SharePoint Server farms and the servers in those farms, details
about the servers, and client access information.
Provides an overview of Microsoft Forefront Endpoint Protection
deployments discovered in your environment, lists each SCCM
server with Forefront components installed, and provides details
about Forefront agents discovered in your environment.
Provides details on editions of Microsoft SQL Server that require
licensing, details on SQL Server instances discovered in your
environment, and authorized user and device access to each SQL
Server instance discovered.
Provides details about roles and versions of each inventoried
Microsoft Exchange Server, as well as details about Exchange
mailboxes and enterprise features enabled for each mailbox.
Provides details on each SCCM and SMS 2003 server and their
management tools, as well as a list of agents discovered in your
environment.
Provides details about Lync servers detected in your environment,
roles, and devices and users that may require Client Access
Licenses.
For more information about the MAP Toolkit Reports and Proposals, go the MAP Toolkit page
on Microsoft.com.
WHERE TO GET INFORMATION, HELP AND ASSISTANCE
You can get more information about the MAP Toolkit by going to the following resources:
1. Key Resources on the MAP Toolkit page on Microsoft.com
Toolkit Community Hub

TechNet Library
The Microsoft Partner Network
Training Kit
Community Forum
Frequently Asked Questions (FAQ)
2. The ReadMe provides release notes and information you should read before
installing the MAP Toolkit, including installation prerequisites and known issues. You
can download the ReadMe information from the Microsoft Assessment and Planning
Toolkit page on the Microsoft Download Center.
Support for the MAP Toolkit is provided through Microsoft Product Support Services (PSS).
Premier customers should contact Premier Support for assistance. Support offerings and
regional contact information can be found on the Solution Accelerators Support page.
FEEDBACK
To send feedback or suggestions for improving the MAP Toolkit, contact us at
mapfdbk@microsoft.com.
10
PHASE 1: CHOOSE YOUR MAP TOOLKIT GOAL

Use the tables below to help identify your goals, the MAP feature that supports it and the
section of the document that explains the data you will need to collect.
Choose from the following goals:
I want to
understand:
MAP
Feature:
MAP Wizards
to Use:
Which web
browsers and
Internet
Explorer Add-ons
are deployed in
my environment
Internet
Explorer
Discovery
1. Inventory
and
Assessment
Wizard
What components
are in my SQL
Server
environment, how
they map to SQL
Server 2012
features, and
obtain guidance
for migrating
those
components.
Which Windows
and Linux
computers are
running a MySQL
database, and if
we could migrate
to Microsoft SQL
Server.
Which Windows
and Linux
computers are
running an
Oracle
database, which
Oracle servers are
installed on HPUX, and could
migrate to
Microsoft SQL
Server.
Inventory
Scenario to
Select:
Collector
Technologies
Required:
Windows
Computers
WMI
SQL Server
Or
WMI
SQL Server
Authentication
(Native)
SQL Windows
Authentication
Microsoft
SQL Server
Discovery
1. Inventory
and
Assessment
Wizard
MySQL
Discovery
1. Inventory
and
Assessment
Wizard
MySQL,
Oracle and
Sybase
WMI
SSH
Oracle
Discovery
1. Inventory
and
Assessment
Wizard
MySQL,
Oracle and
Sybase
WMI
SSH
Oracle
SQL Server
with
Database
Details
11
MAP
Feature:
MAP Wizards
to Use:
Inventory
Scenario to
Select:
Collector
Technologies
Required:
Which Windows
and Linux
computers are
running a Sybase
database and if
we could migrate
to Microsoft SQL
Server.
Sybase
Discovery
1. Inventory
and
Assessment
Wizard
MySQL,
Oracle and
Sybase
WMI
SSH
Detailed
information about
which physical
computers
running VMware
or Hyper-V have
virtual
machines
running on them.
Virtual
Machine
Discovery
1. Inventory
and
Assessment
Wizard
Windows
Computers
VMware
Computers
WMI
VMware
Windows
Server
Roles
Discovery
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Windows 8
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
What existing
hardware can run
the Windows 7
operating system,
which devices are
compatible with
Windows 7 and
what hardware
upgrades I will
need
Windows 7
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Which computers
are ready to be
upgraded to
Microsoft Office
2010
Microsoft
Office 2010
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
I want to
understand:
Which Windows
Server roles are
installed on each
server.
What existing
hardware can run
the Windows 8
operating system
and what
hardware
upgrades I will
need
12
I want to
understand:
MAP
Feature:
MAP Wizards
to Use:
Inventory
Scenario to
Select:
Collector
Technologies
Required:
Which computers
are ready to be
upgraded to
Microsoft Office
2013
Microsoft
Office 2013
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Which of my
computers are
ready to be
upgraded to
Office 365
Office 365
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Which computers
can be
repurposed for my
Desktop
Virtualization
initiative to run
Windows Thin
PC
Windows
Thin PC
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Which of my
existing server
hardware is ready
to run Windows
Server 2012
Windows
Server
2012
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
Which of my
existing server
hardware is ready
to run Windows
Server 2008 R2
Windows
Server
2008 R2
Readiness
1. Inventory
and
Assessment
Wizard
Windows
Computers
WMI
How to collect
processor,
network, memory,
physical disk, and
logical disk
utilization for
Windows servers,
Windows desktops
and Linux based
servers.
Performanc
e Metrics
Results
Windowsbased
Linux-based
WMI
SSH
1. Performance
Metrics
Wizard

I want to
understand:
How to
consolidate my
Windows Servers
using
virtualization and
Microsoft Hyper-V
How to
consolidate my
LINUX servers
using
virtualization and
Microsoft Hyper-V
How many servers

will I need to host
my Virtual
Desktop
Infrastructure and
Remote Desktop
Services Session
environments
Consolidation and
deployment
recommendations
for Microsoft
Private Cloud Fast
Track
deployments
13
MAP
Feature:
MAP Wizards
to Use:
Inventory
Scenario to
Select:
Collector
Technologies
Required:
Server
Consolidati
on Results
1. Performance
Metrics
Wizard
2. Hardware
Library
Wizard
3. Server
Virtualizatio
n and
Consolidatio
n Wizard
Not
Applicable
WMI
Server
Consolidati
on Results
1. Performance
Metrics
Wizard
2. Hardware
Library
Wizard
3. Server
Virtualizatio
n and
Consolidatio
n Wizard
Not
Applicable
SSH
Desktop
Virtualizatio
n Planning
Results
1. Performance
Metrics
Wizard
2. Hardware
Library
Wizard
3. Desktop
Virtualizatio
n Planning
Wizard
Not
Applicable
WMI
Microsoft
Private
Cloud Fast
Track
1. Performance
Metrics
Wizard
2. Hardware
Library
Wizard
3. Microsoft
Private
Cloud Fast
Track
Consolidatio
n Wizard
Not
Applicable
WMI
SSH
14
I want to
understand:
MAP
Feature:
Modeling and
estimating
capacity
requirements for
migrating
applications to the
Windows Azure
Platform
Windows
Azure
Application
Migration
How many users

and devices need
to be licensed for
my Exchange
Server
Software
Usage
Tracking for
Exchange
How many users

and devices need
to be licensed for
Microsoft Office
SharePoint
Server
Software
Usage
Tracking for
Office
SharePoint
Server
How many users

and devices need
to be licensed for
SQL Server
Software
Usage
Tracking for
SQL Server
How many users

and devices need
to be licensed for
System Center
Configuration
Manager
Software
Usage
Tracking for
System
Center
Configurati
on Manager
MAP Wizards
to Use:
Inventory
Scenario to
Select:
Collector
Technologies
Required:
1. Azure
Application
Configuratio
n Wizard
Not
Applicable
Not Applicable
1. Inventory
and
Assessment
Wizard
Exchange
Server
Active Directory
1. Collect Log
Files for 90
days
2. Configure
Log Parser
3. Parse Log
Files
Windows
Computers
For information on
how to configure the
log file, see the MAP
Toolkit Wiki article at
http://go.microsoft.c
om/fwlink/?
LinkId=255274.
1. Collect Log
Files for 90
days
2. Inventory
and
Assessment
Wizard
3. Configure
Log Parser
4. Parse Log
Files
Windows
Computers
SQL Server
Discovery
SQL Server
with
Database
Details
For information on
how to configure the
log file, see the MAP
Toolkit Wiki article at
http://go.microsoft.c
om/fwlink/?
LinkId=255275.
Windows
Computers
Select the System

Center
Configuration
Manager option
from the Discovery
options in the
Inventory and
Assessment Wizard
WMI
1. Inventory
and
Assessment
Wizard

I want to
understand:
How many users

and devices need
to be licensed for
Forefront
Endpoint
Protection
MAP
Feature:
Software
Usage
Tracking for
Forefront
Endpoint
Protection
How many users

and devices need
to be licensed for
Lync Server
Software
Usage
Tracking for
Lync Server
How to determine
how many Active
Users and Devices
I have in my
organization
Software
Usage
Tracking for
Active
Users and
Devices
15
MAP Wizards
to Use:
1. Inventory
and
Assessment
Wizard
1. Inventory
and
Assessment
Wizard
1. Inventory
and
Assessment
Wizard
Inventory
Scenario to
Select:
Collector
Technologies
Required:
Forefront
Endpoint
Protection
Server
Select the System

Center
Configuration
Manager option
from the Discovery
options in the
Inventory and
Assessment Wizard
WMI
PowerShell
Lync Server
WMI
PowerShell
SQL Authentication
(Native)
SQL Authentication
(Windows)
Active
Devices and
Users
Active Directory
WMI
16
PHASE 2: GATHER YOUR DATA COLLECTION REQUIREMENTS

In this phase you will learn which data collection requirements you will need to gather prior
to installing and using the MAP Toolkit. There are two parts to this phase Gather credentials
and choose your discovery methods.
GATHER CREDENTIALS (ACCOUNT NAMES AND PASSWORDS)
In this phase, you will identify which credentials you will need for discovering machines in
your environment as well as those required to gather the necessary information to support
your goal. Most of the credentials required must have local machine administrative rights for
the specific collector technology required.
Collector
Technology
Required:
Requirements:
WMI
Account Name and Passwords for Accounts with local machine

administrative rights
The WMI collector is used to gather hardware, device, and software
information from remote Windows based computers. This collector
technology is used for these inventory scenarios and must be enabled on
the remote target computers.
Windows computers
Active Devices and Users
Exchange Server
Forefront Endpoint Protection Server
Lync Server*
SQL Server*
SQL Server with Database Details*
Windows Azure Platform Migration
MySQL, Oracle and Sybase
*This scenario uses a modified WMI collection query that returns a subset of the
data gathered by the WMI collector in the other scenarios.
The Inventory and Assessment Wizard will not provide an option to enable
WMI: You must enable it through Group Policy settings, logon scripts, or
manually on each computer.
To connect remotely and perform the WMI inventory, you must

provide accounts that are members of the local Administrators
group on the computer being inventoried.
For most networks, the network administrator will have a domain or
local account that is a member of the local Administrators group on
all the computers in the environment. These are the accounts you

Collector
Technology
Required:
Requirements:
SQL SERVER
AU
TH
EN
TI
CA
TI
O
N
(N
AT
IV
E
AN
D
WI
ND
O
W
S)
SSH
17
should enter on the Active Directory Credentials page in the

Inventory and Assessment Wizard to perform the WMI inventory.
By default, in Windows domain environments, the Domain Admins
security group is added to the local Administrators group on a
computer when it is joined to a domain.
Account Name and Passwords for Accounts with administrative rights to

the SQL Server databases
The SQL Native and SQL Windows Collectors are the same except for the
credentials used. They are used to collect additional in-depth SQL Server
database information from remote Windows based computers. This
collector technology is used for these inventory scenarios.
Lync Server
SQL Server with Database Details
MAP can use either SQL Server Authentication or Windows Authentication

to query the database engines. MAP refers to these methods as SQL
Native and SQL Windows respectively. Although they are listed separately
in the Inventory Wizard, you only need to provide administrator credentials
for one.
Account Name and Passwords for Accounts with logon rights to the target
machine. For Linux, the account must have rights to access HAL or
dmidecode information.
The SSH collector is used to collect hardware and software information
from remote Linux and HP-UX based computers. It is also used to gather
device performance data for Linux machines. This collector technology is
used for these inventory scenarios and must be enabled on the target
computers.
Linux/UNIX computers
MySQL, Oracle and Sybase

18

Requirements:
Collector
Technology
Required:
Note: MAP cannot connect to your Linux machines if you use SSH Keys.
Account Name and Passwords for Accounts with Oracle database

ORACLE
The Oracle Collector is used to collect Oracle SQL Server schema

information from remote Windows, Linux, and HP-UX based computers.
This collector technology is used for this inventory scenario.
MySQL, Oracle and Sybase. The 64-bit Oracle client must be installed
on the machine that is running MAP in order to connect directly to the
database engine and collect the schema information. If the 64-bit Oracle
client is not installed MAP will still collect some basic information about the
Oracle server from WMI or SSH. MAP will not collect schema information if
the 32-bit oracle client is installed.
VMWARE
.The VMware Collector is used to collect hardware, device, and software

information from remote VMware computers. This collector technology is
used for this inventory scenario.
POWERSHELL
VMware computers

administrative rights as well as administrator rights for either Lync or
SCCM server with FEP components you are attempting to collect from.
The PowerShell Collector is used to collect software information from
remote Windows based computers. PowerShell 2.0 or higher must be
installed and remote PowerShell must be enabled on the target computers.
This collector technology is used for these inventory scenarios.
Forefront Endpoint Protection Server

Lync Server
Account Name and Password for an Account that is domain authenticated
ACTIVE
DI
RE
CT
For Exchange the Account must have Exchange Admin or Domain Admin
privileges
19
Requirements:
Collector
Technology
Required:
OR
Y
The Active Directory Collector is used to collect device and user

information from Active Directory Domain Services. This collector
technology is used for these inventory scenarios.
Active Devices and Users

Exchange Server
CHOOSE A DISCOVERY METHOD

In preparation for using the MAP Toolkit, it is important to understand how the Discovery
Methods work and what credentials they require. For more detailed information about using
the Discovery Methods, go to the MAP Team Wiki.
Discovery
Method:
Requirements:
Active
Directory
Domain
Services
This method allows you to query a domain controller via the Lightweight
Directory Access Protocol (LDAP) and select computers in all or specific
domains, containers, or OUs. Use this method if all computers and devices
are in AD DS.
Credentials required The wizard requires a domain account that is

to be used to query AD DS. At a minimum, this account should be a
member of the Domain Users group in the domain. For each computer
to be included in the WMI inventory process, the wizard also requires
an account that is a member of the local Administrators group on that
computer.
For additional information, see the MAP team Wiki page for this discovery
method at http://go.microsoft.com/fwlink/?LinkId=255508.
20
Discovery
Method:
Requirements:
Windows
Networking
Protocols
This method uses the WIN32 LAN Manager Application Programming

Interfaces (API) to query the Computer Browser service for computers in
workgroups and Windows NT 4.0based domains. If the computers on the
network are not joined to an Active Directory domain, use only the Windows
networking protocols option to find computers.
Credentials required - None
If the Windows Networking Protocols page of the wizard does not provide
a list of workgroups, Windows NT 4.0 domains, or AD DS domain NetBIOS
names, ensure that the Computer Browser and Server services are running
on the computer performing inventory. For help, see Troubleshooting the
Microsoft Computer Browser Service.
System
Center
Configuratio
n Manager
(SCCM)
This method enables you to inventory computers managed by System Center

Configuration Manager (SCCM). You need to provide credentials to the
System Center Configuration Manager server in order to inventory the
managed computers.
Scan an IP
Address
Range
This method allows you to specify the starting address and ending address of
an IP address range. The wizard will then scan all IP addresses in the range
and inventory only those computers. The IP address range computer
discovery method is limited to scanning only 100,000 IP addresses at one
time. If you have more addresses than the limit, run the wizard multiple
times, specifying different IP address ranges each time you run the wizard.
Credentials required This method requires an account with

access to the Configuration Manager WMI provider on the site server
you entered.
Credentials required None

21
Discovery
Method:
Requirements:
Manually
enter
Computer
Names
This method enables you to test and inventory a few computers at a time.
Use this method if you want to inventory a small number of specific
computers and enter computer names, NetBIOS names, or fully qualified
domain names (FQDN) by hand.
Guest/Host
Discovery
When inventorying computers, MAP will automatically attempt to detect

whether the computer is a VM host or guest machine. If MAP discovers the
machine is, it will attempt to discover its host if it is a guest machine, or all
guest machines if it is a host. The discovered machine(s) will then be added
to the list of computers to be inventoried.
Import
Computer
Names from
a file
Using this method, you can create a text file with a list of computer names
that will be inventoried. Each computer name should be on a new line and
the file should not use delimiters, such as a comma, period, or tab.
Use this method if you have a list of up to 120,000 computer names that you
want to inventory. The imported file can contain computer names, NetBIOS
names, or FQDNs.
Credentials required None.
22
CONSIDERATIONS FOR DISCOVERY METHODS
Exchange Server usage: The MAP Toolkit collects information about active
mailboxes in Active Directory Domain Services (AD DS). The credentials that you
provide should have the required privileges to enumerate mailboxes, groups,
and users in AD DS.
System Center Configuration Manager Agent counts: The MAP Toolkit
collects information from the Configuration Manager servers. The credentials
that you provide should have adequate privileges to collect data from the
Configuration Manager server you supply.
Lync 2010 and Forefront Endpoint Protection (FEP): These inventory
scenarios must be run separately due to issues around handling of credentials
for multiple inventory scenarios using PowerShell.
23
PHASE 3: PREPARE YOUR ENVIRONMENT

Now that you have determined the collectors that will be required, there are certain
considerations and configurations that must be verified or implemented in your environment
in order to inventory your environment with a high degree of success. In Phase 3, you will
review the sections below and using the data collection requirements from Phase 2,
understand and configure your environment to allow MAP to inventory the computers in your
environment.
My goal
requires
that I use:
WMI
How to prepare your environment:
The Inventory and Assessment Wizard will not provide an option to enable
WMI.
You must enable it through Group Policy settings, logon scripts, or manually
on each computer. Based upon your environment, you may have different
considerations when using WMI as a collector technology. See the following
topics at the MAP Wiki site for additional details.
WMI in Active Directory Environments at http://go.microsoft.com/fwlink/?
LinkId=255268.
Firewall Considerations Using WMI at http://go.microsoft.com/fwlink/?
LinkId=255269.
WMI In Workgroups and Windows NT 4.0 based Domains at
SQL Server
Authentication
(Native and
Windows)
SQL Server uses Port 1433 for default instances and port 1434 for the SQL
Server Browser Service. For named instances, MAP queries the browser
service and learns the port numbers assigned by SQL Server or that were
manually set by the user. See this support article for more information on
named instance port numbers.
24
My goal
requires
that I use:
SSH
Port 22 is the default port MAP will use. In the Inventory and Assessment
Wizard, you can change the port that MAP uses if a non-default port is used
in your environment.
MAP uses HAL commands through SSH to inventory hardware information
from computers running Linux operating systems. If the HAL package is not
installed on the target computers or the inventory account lacks permission
to use those commands, MAP will fall back to dmidecode if that fails.
Dmidecode needs to access /dev/mem to get its data, which is restricted to
root only. If that fails as well, then MAP will report blank values for some of
the hardware properties in the reports.
Oracle
Port 1521 is the default port MAP will use for connecting to the Oracle SQL
database engine. In the inventory wizard, you can change the port that MAP
uses if a non-default port is used in your environment.
The 64-bit Oracle client must be installed on the machine that is running MAP
in order to connect directly to the database engine and collect the schema
information. If the 64-bit Oracle client is not installed MAP will still collect
some basic information about the Oracle server from WMI or SSH. MAP will
not collect schema information if the 32-bit Oracle client is installed on the
machine running MAP.
VMware
PowerShell
Ports 80 and/or 443 are the default ports for HTTP and HTTPS respectively. In
the inventory wizard, you can change the port that MAP uses if a non-default
port is used in your environment. Some VMware environments use ports
8222 and/or 8333 for HTTP and HTTPS, but these are not listed by default in
MAP.
Ports 5985 and 5986 are the default ports for PowerShell HTTP and HTTPS
respectively. In the Inventory and Assessment wizard, you can change the
port that MAP uses if a non-default port is used in your environment.
Additionally, you can designate whether or not to use SSL and whether or not
to validate the server certificate. If certificate validation is selected, you will
need to ensure that the certificate is trusted by the MAP machine.

My goal
requires
that I use:
Active
Directory
System Center
Configuration
Manager
25
In a domain that consists of Windows Server 2003based domain

controllers, the default dynamic port range is 1025 through 5000.
Windows Server 2008 R2 and Windows Server 2008, in compliance with
Internet Assigned Numbers Authority (IANA) recommendations, increased the
dynamic port range for connections. The new default start port is 49152, and
the new default end port is 65535. Therefore, you must increase the remote
procedure call (RPC) port range in your firewalls. If you have a mixed domain
environment that includes a Windows Server 2008 R2 and Windows Server
2008 server and Windows Server 2003, allow traffic through ports 1025
through 5000 and 49152 through 65535. See this article for more
information.
If you plan to use System Center Configuration Manager for the discovery
method of machines in your environment, then you must configure the
System Center Configuration Manager site server as follows:
1. Open the Configuration Manager Console
2. Under the Site Database node that will be used for discovery, go to
the Security Rights node and click Manage ConfigMgr Users
3. Grant the account that will be used for discovery the following rights:
a. Class: Collection, Instance: All instances, Rights: Read, Read
Resource
2. Also, ensure the account is in the local Windows security group
named SMS Admins
Forefront
Endpoint
Protection
If you will be collecting data for Forefront Endpoint Protection usage tracking,
you will need to enable remote PowerShell on the appropriate server
machines. To do so, log on to each System Center Configuration Manager
server that has Forefront Endpoint Protection components installed, and
ensure PowerShell will allow remote connections from the machine on which
you have installed MAP. If non-default ports are used for PowerShell, make
note of the port numbers used by PowerShell on this machine, as you will
need to enter them in the MAP inventory wizard. You may also designate
specific SSL or certificate requirements in the inventory wizard. For more
information see http://technet.microsoft.com/en-us/magazine/ff700227.aspx.
Do not run Lync 2010 and Forefront EndPoint Protection Server scenarios
concurrently. The inventory data will not produce valid results for either
scenario. If you wish to run both scenarios, it is recommended to run one of
them first and then MAP again with the other scenario selected.
26
My goal
requires
that I use:
Lync Server
If you will be collecting data Lync Server 2010 usage tracking, you will need
to enable remote PowerShell on the appropriate server machines. To do so,
log on to each Lync 2010 server of interest and ensure PowerShell will allow
remote connections from the machine on which you have installed MAP. If
non-default ports are used for PowerShell, make note of the port numbers
used by PowerShell on this machine, as you will need to enter them in the
MAP inventory wizard. You may also designate specific SSL or certificate
requirements in the inventory wizard. For more information see
http://technet.microsoft.com/en-us/magazine/ff700227.aspx.
Do not run Lync 2010 and Forefront EndPoint Protection Server scenarios
concurrently. The inventory data will not produce valid results for either
scenario. If you wish to run both scenarios, it is recommended to run one of
them first and then MAP again with the other scenario selected.
Configure Log
Files for
Windows
Server
To capture logon information, the Audit Logon policy needs to be set to

Success, which is the default for all Windows Server operating systems
since Windows Server 2003. You can also set this configuration manually in
the Group Policy Management Console (GPMC) or automatically using the
Auditpol.exe command-line tool.
For more information about these Group Policy settings, see the following
resources:
For Windows Server 2008, see the Microsoft Help article Microsoft
Knowledge Base article 921469.
For Windows Server 2003, see Define or modify auditing policy
settings for an event category.
MAP 8.0 can be configured to use the new User Access Logging (UAL)
feature in Windows Server 2012. For Windows Server 2012, there is no
need for log parsing. For more information about UAL, see
Configure Log
Files for SQL
Server
SQL Server 2008 Enterprise and Datacenter Editions introduced audit event
configuration for Windows security logging, which enabled SQL Server 2008
to log logon events to the Windows Security log. The MAP Toolkit can parse
these logs to track usage for SQL Server 2008 Enterprise and Datacenter
Editions.
TO ENABLE SQL SERVER 2008 OR NEWER TO LOG AUDIT EVENTS
TO THE WINDOWS SECURITY LOG
On each SQL Server 2008 or newer instance for which you need to track

My goal
requires
that I use:
27
usage, run the following SQL command:

/* Turn LOGIN logging on */
USE MASTER
GO
/* Note: the name 'Server_Audit' is your choice */
CREATE SERVER AUDIT [Server_Audit]
TO SECURITY_LOG WITH ( QUEUE_DELAY = 1000, ON_FAILURE = CONTINUE);
ALTER SERVER AUDIT [Server_Audit]
WITH (STATE = ON);
USE MASTER
GO
/* Note: the name 'login_audit' is your choice */
CREATE SERVER AUDIT SPECIFICATION [login_audit]
FOR SERVER AUDIT Server_Audit
ADD (SUCCESSFUL_LOGIN_GROUP) WITH (STATE = ON);
Configure the Audit Object Access Setting
The Audit object access setting must be configured to capture the events.
The best way to do this varies depending on your operating system. To write
to the Windows Security log, the account under which the SQL Server service
is running must have the Generate Security Audits permission to write to the
Windows Security log. By default, the LOCAL SERVICE and the NETWORK
SERVICE accounts have this permission. This step is not required if SQL
Server is running under one of those accounts. You must have Administrator
privileges on the computer to configure these settings.
TO USE AUDITPOL.EXE TO CONFIGURE THE AUDIT OBJECT
ACCESS SETTING FOR WINDOWS VISTA OR WINDOWS SERVER
2008 OR LATER
1. Open a command prompt with administrative permissions.
a. On the Start menu, point to All Programs, point to
Accessories, right-click Command Prompt, and then click
Run as administrator.
b. If the User Account Control dialog box opens, click
Continue.
2. Run the following statement* to enable auditing from SQL Server.
auditpol /set /subcategory:"application generated" /success:enable
/failure:enable
3. Close the command prompt window.
4. This setting takes effect immediately.
5. *Note: /subcategory:application generated will only work with
English language operating systems. If your operating system is a
different language, you will need to use the localized parameter.
28
My goal
requires
that I use:
TO USE SECPOL.MSC TO CONFIGURE THE AUDIT OBJECT ACCESS

SETTING FOR WINDOWS OPERATING SYSTEMS EARLIER THAN
WINDOWS VISTA OR WINDOWS SERVER 2008
1. On the Start menu, click Run.
2. Type secpol.msc and then click OK.
3. In the Local Security Policy tool, expand Security Settings, expand
Local Policies, and then click Audit Policy.
4. In the results pane, double-click Audit object access.
5. On the Local Security Setting tab, in the Audit these attempts
area, select both Success and Failure.
6. Click OK.
7. Close the Security Policy tool.
This setting takes effect immediately.
TO USE SECPOL.MSC TO GRANT THE GENERATE SECURITY
AUDITS PERMISSION TO AN ACCOUNT
1. On the Start menu, click Run.
2. Type secpol.msc and then click OK. If the User Access Control
dialog box appears, click Continue.
3. In the Local Security Policy tool, expand Security Settings, expand
Local Policies, and then click User Rights Assignment.
4. In the results pane, double-click Generate security audits.
5. On the Local Security Setting tab, click Add User or Group.
6. In the Select Users, Computers, or Groups dialog box, either type
the name of the user account, such as domain1\user1 and then click
OK, or click Advanced and search for the account.
7. Click OK.
8. Close the Security Policy tool.
This setting takes effect when SQL Server is restarted.
TO STOP MONITORING SQL SERVER 2008 LOGON EVENTS TO
THE WINDOWS SECURITY LOG
Run the following SQL command on each SQL Server 2008 instance for which
you want to stop monitoring events.
/* Turn LOGIN logging off */
use MASTER
GO
ALTER SERVER AUDIT SPECIFICATION [login_audit] WITH (STATE = OFF);
DROP SERVER AUDIT SPECIFICATION [login_audit];
ALTER SERVER AUDIT [Server_Audit] WITH (STATE = OFF);
DROP SERVER AUDIT [Server_Audit];

My goal
requires
that I use:
Configure Log
Files for Office
SharePoint
Server
29
To capture access information for supported versions of Microsoft SharePoint

Server, configure the generation of Internet Information Services (IIS) logs on
the servers for which you plan to monitor client access.
You must configure IIS logging in the W3C log file format (called W3C
Extended on some operating systems) with the following fields included:
date
time
s-sitename
s-computername
s-ip
s-port
cs-uri-stem
cs-uri-query
cs-username
c-ip
sc-status
SharePoint or IIS administrators might use W3C logging for other reasons. If
these administrators require additional fields to be logged, they can add
those fields to the configuration. However, administrators should not remove
any of the fields that the Software Usage Tracker requires.
For information about enabling W3C logging in IIS, see:
Configuring Logging in IIS 7

How to enable logging in Internet Information Services (IIS)
PHASE 4: INSTALL THE MAP TOOLKIT
SYSTEM REQUIREMENTS
The MAP Toolkit works with the following operating systems:
30
Operating
System
Supported
Not Supported
Windows 8
Supported editions include

Windows 8 Pro and
Windows 8 Enterprise.
Not supported: Windows 8, Windows 8 RT.
Windows 7
With Service Pack 1

Professional, Enterprise and
Ultimate.
Not supported: Starter, Home Basic, Home

Premium, and Home Starter editions.
Windows
Vista
With Service Pack 2

Business, Enterprise and
Ultimate.
Not supported: Starter, Home Basic, and

Home Premium editions.
Windows
Server 2012
All editions.
No unsupported editions.
Windows
Server 2008
With Service Pack 2
All other Service Pack levels
With Service Pack 1
All other Service Pack levels
Windows
Server 2008
R2
HARDWARE REQUIREMENTS
The MAP Toolkit requires a computer with the following minimum configuration:
1.5 GHz dual core processor
2.0 GB of memory
Some MAP scenarios have additional system requirements that do not block Setup. For a
complete list of system requirements for the MAP Toolkit, view the Read Me (Release Notes)
or see the System Requirements section of the Microsoft Assessment and Planning Toolkit
page on the Microsoft Download Center.
WHERE TO GET THE MAP TOOLKIT
The MAP Toolkit is available as a free download from the Microsoft Download Center. See the
Microsoft Assessment and Planning Toolkit page on the Microsoft Download Center.
HOW TO INSTALL THE MAP TOOLKIT
31
Install the MAP Toolkit on a single computer that has access to the network on which you
want to conduct an inventory and assessment. The toolkit uses a SQL Server database to
store and process the information that it collects from your environment. There are two
options for your database installation:
Database Option
LocalDB
MAPS Instance
When to use
Most of the time. This is the default option, when the MAPS
instance does not already exist
Databases will be less than 10 GB
You have an existing MAP database that you want to
preserve
Your database will grow more than 10GB
Multiple users need to connect to the MAPS database
LocalDB provides several benefits:
Faster installation of the MAP Toolkit
Internet access is not needed during install of the MAP Toolkit
Machine resources to support SQL Server are not utilized when MAP is not running
HOW TO INSTALL MAP USING LOCALDB

The Microsoft Assessment and Planning Toolkit Setup Wizard will guide you through the
installation of application files and Microsoft SQL Server 2012 Express LocalDB.
1. After you run the MAP Setup, the Welcome screen will display. Click Next to continue.
2. Read and accept the License Agreement and then click Next to continue.
3. Select where to install MAP (generally you can accept the default) and click next to
continue.
4. Review the Customer Experience Improvement* Options and then click Next.
5. You are presented with a summary of the installation process. Click Install to begin.
6. The MAP Toolkit will now install LocalDB and the MAP Toolkit files. Since the LocalDB
installation is much small and quicker than SQL Server Express, the MAP Toolkit Setup
will complete quicker than previous versions.
*For more information about Microsoft Customer Experience Improvement Program (CEIP),
go to http://go.microsoft.com/fwlink/?LinkId=229285.
HOW TO INSTALL MAP USING YOUR OWN SQL SERVER

By default, the MAP Toolkit will install Microsoft SQL Server 2012 Express LocalDB during
setup. You may also use an existing installation of SQL Server 2008, SQL Server 2008 R2, or
SQL Server 2012 but you must create a non-default instance named MAPS before running
the MAP Toolkit installer. The MAP Toolkit requires the collation order of the database engine
to be set to SQL_Latin1_General_CP1_CI_AS.
32
This instance is customized for the MAP Toolkit and should not be modified. By default,
access to this instance is blocked from remote computers. Access to the instance on the
local computer is only enabled for users who have local administrator credentials.
TROUBLESHOOTING INSTALLATION ISSUES
If you encounter a problem during installation, refer to the installation log files. The log files
are located in the path specified in the %TEMP% environment variable on the local
computer. You can find additional troubleshooting information by examining the application
and system event logs.
PREREQUISITES NOT FOUND: MAPS INSTANCE
If you have a SQL Server instance called MAPS on your machine and it is SQL Server 2005,
you will receive a Prerequisites Not Found: MAPS Instance during installation. If you receive
this error message, you need to do one of the following:
Uninstall the instance

Upgrade to SQL Server 2008 or higher
UNINSTALL THE TOOLKIT

You can use the Microsoft Assessment and Planning Toolkit Setup Wizard to uninstall the MAP
Toolkit. The wizard provides the option to remove the SQL Server 2012 Express LocalDB
instance and delete files that the application created. The SQL Server common installation
files will not be removed during uninstallation. To uninstall them manually, use the
Add/Remove Programs or Programs and Features Control Panel item.
TROUBLESHOOTING INVENTORY ISSUES
There are a few basic reasons why inventory may not be successful when running the
Microsoft Assessment and Planning Toolkit. The topics found on the following Wiki pages
describe these reasons and how to quickly resolve the issues.
For Inventory Assessment Results and Problems see http://go.microsoft.com/fwlink/?

LinkId=255523.
For Impact on Network Security and Performance see http://go.microsoft.com/fwlink/?

LinkId=255524.

Microsoft Assessment and Planning Toolkit

Uploaded by

Document Information

Original Description:

Copyright

Available Formats

Share this document

Share or Embed Document

Sharing Options

Did you find this document useful?

Is this content inappropriate?

Copyright:

Available Formats

Microsoft Assessment and Planning Toolkit

Uploaded by

Copyright:

Available Formats

MICROSOFT ASSESSMENT AND

Published: December 2012