Can Movere be configured to exclude user PII data?

By default, Movere collects both device and user objects from each Active Directory (AD) domain it queries. While this is the recommended approach, there are situations when this data is not required. Movere supports the exclusion of user objects when querying AD, but this can only be performed from a command prompt. This option is currently unavailable via the Movere Console.

If AD user data is supressed, Movere will still list the accounts logging into each device as part of the inventory and ARC scanning process, but it will not resolve them against AD. The user’s first name, last name, email address, company, employee number/ID, country fields etc. will be blank as Movere won’t have this data. This impacts products like SharePoint, Skype for Business, Exchange, RDS, Dynamics CRM, and Project Server from a user perspective only (e.g. Movere will still see the server(s) running these products, but it will not present the users accessing them). Everything else, including ARC data, will be unaffected, which is consistent with Movere’s primary purpose – being a cloud migration platform.

For detailed instructions on query AD without user data, see Querying Active Directory (AD) with NO user objects. 

IMPORTANT: Even though AD user data can be excluded at the user discretion, Movere is required and self-certified because Movere collects first name, last name, email address, job title and phone number (for two-factor authentication) as part of the Movere registration process to permit secure access to the Movere website.