The special file ad_gc_entitymap.xlsx is used to provide business input to PingCastle reports.
Run the program PingCastleReporting and enter “template” in the interactive mode. An empty ad_gc_entitymap.xlsx will be created. As an alternative, run the command:
The configuration file contains 3 sheets:
- The sheet “Domains” making the link with a domain and its owner
The 2 mandatory columns are : BU and Domain. Entity, Contact or Comment can be left blank.
- The sheet “Migrations” to not impact the score of an AD being officially migrated
- The sheet “Exceptions” to deal with false positive or with situation whose risks have been accepted
The individual scores of the domains will be recomputed to take the information of the sheet “Migrations” and “Exceptions” into account. For example the rules about SID Filtering or SID History.