Server Roles Detection and Grouping for NinjaOne
Purpose
This document details the procedure for categorizing servers into suitable groups according to their installed roles.
Associated Content
| Content | Type | Function | 
|---|---|---|
| cPVAL Windows Servers | Group | A group designated for machines running the Windows Servers. | 
| Windows Server Roles Detection | Automation | Retrieves installed Windows Server roles, additional services, and FSMO roles (if applicable). | 
| cPVAl Roles Detected | Custom Field | This custom field stores the list of roles detected on a Windows server. | 
| Windows Server Roles Detection | Task | Runs the Windows Server Roles Detection automation daily against cPVAL - Windows Servers group | 
Server Role Groups
| Name | Role | Condition | Description | 
|---|---|---|---|
| cPVAL - Server Role - Certificate Authority Servers | Active Directory Certificate Services | Custom FieldcPVAl Roles DetectedContainsActive Directory Certificate Services | A group tailored for Windows Servers that have the Active Directory Certificate Servicesrole installed | 
| cPVAL - Server Role - Domain Controllers | Active Directory Domain Services | Custom FieldcPVAl Roles DetectedContainsActive Directory Domain Services | A group tailored for Windows Servers that have the Active Directory Domain Servicesrole installed | 
| cPVAL - Server Role - Federation Servers | Active Directory Federation Services | Custom FieldcPVAl Roles DetectedContainsActive Directory Federation Services | A group tailored for Windows Servers that have the Active Directory Federation Servicesrole installed | 
| cPVAL - Server Role - LDS Servers | Active Directory Lightweight Directory Services | Custom FieldcPVAl Roles DetectedContainsActive Directory Lightweight Directory Services | A group tailored for Windows Servers that have the Active Directory Lightweight Directory Servicesrole installed | 
| cPVAL - Server Role - RMS Servers | Active Directory Rights Management Services | Custom FieldcPVAl Roles DetectedContainsActive Directory Rights Management Services | A group tailored for Windows Servers that have the Active Directory Rights Management Servicesrole installed | 
| cPVAL - Server Role - Application Servers | Application Server | Custom FieldcPVAl Roles DetectedContainsApplication Server | A group tailored for Windows Servers that have the Application Serverrole installed | 
| cPVAL - Server Role - Health Attestation Servers | Device Health Attestation | Custom FieldcPVAl Roles DetectedContainsDevice Health Attestation | A group tailored for Windows Servers that have the Device Health Attestationrole installed | 
| cPVAL - Server Role - DHCP Servers | DHCP Server | Custom FieldcPVAl Roles DetectedContainsDHCP Server | A group tailored for Windows Servers that have the DHCP Serverrole installed | 
| cPVAL - Server Role - DNS Servers | DNS Server | Custom FieldcPVAl Roles DetectedContainsDNS Server | A group tailored for Windows Servers that have the DNS Serverrole installed | 
| cPVAL - Server Role - Fax Servers | Fax Server | Custom FieldcPVAl Roles DetectedContainsFax Server | A group tailored for Windows Servers that have the Fax Serverrole installed | 
| cPVAL - Server Role - File Servers | File and Storage Services | Custom FieldcPVAl Roles DetectedContainsFile and Storage Services | A group tailored for Windows Servers that have the File and Storage Servicesrole installed | 
| cPVAL - Server Role - HGS Servers | Host Guardian Service | Custom FieldcPVAl Roles DetectedContainsHost Guardian Service | A group tailored for Windows Servers that have the Host Guardian Servicerole installed | 
| cPVAL - Server Role - Hyper-V Host | Hyper-V | Custom FieldcPVAl Roles DetectedContainsHyper-V | A group tailored for Windows Servers that have the Hyper-Vrole installed | 
| cPVAL - Server Role - Hyper-V Cluster | SharePoint Server | Custom FieldcPVAl Roles DetectedContainsHyper-V Cluster | A group tailored for Windows Servers that have the Hyper-V Clusterrole installed | 
| cPVAL - Server Role - NPS Servers | Network Policy and Access Services | Custom FieldcPVAl Roles DetectedContainsNetwork Policy and Access Services | A group tailored for Windows Servers that have the Network Policy and Access Servicesrole installed | 
| cPVAL - Server Role - Print Servers | Print and Document Services | Custom FieldcPVAl Roles DetectedContainsPrint and Document Services | A group tailored for Windows Servers that have the Print and Document Servicesrole installed | 
| cPVAL - Server Role - Remote Access Servers | Remote Access | Custom FieldcPVAl Roles DetectedContainsRemote Access | A group tailored for Windows Servers that have the Remote Accessrole installed | 
| cPVAL - Server Role - RDS Servers | Remote Desktop Services | Custom FieldcPVAl Roles DetectedContainsRemote Desktop Services | A group tailored for Windows Servers that have the Remote Desktop Servicesrole installed | 
| cPVAL - Server Role - Volume Activation Servers | Volume Activation Services | Custom FieldcPVAl Roles DetectedContainsVolume Activation Services | A group tailored for Windows Servers that have the Volume Activation Servicesrole installed | 
| cPVAL - Server Role - Web Servers | Web Server (IIS) | Custom FieldcPVAl Roles DetectedContainsWeb Server (IIS) | A group tailored for Windows Servers that have the Web Server (IIS)role installed | 
| cPVAL - Server Role - WDS Servers | Windows Deployment Services | Custom FieldcPVAl Roles DetectedContainsWindows Deployment Services | A group tailored for Windows Servers that have the Windows Deployment Servicesrole installed | 
| cPVAL - Server Role - Essentials Servers | Windows Server Essentials Experience | Custom FieldcPVAl Roles DetectedContainsWindows Server Essentials Experience | A group tailored for Windows Servers that have the Windows Server Essentials Experiencerole installed | 
| cPVAL - Server Role - WSUS Servers | Windows Server Update Services | Custom FieldcPVAl Roles DetectedContainsWindows Server Update Services | A group tailored for Windows Servers that have the Windows Server Update Servicesrole installed | 
| cPVAL - Server Role - MSSQL Servers | MSSQL Server | Custom FieldcPVAl Roles DetectedContainsMSSQL Server | A group tailored for Windows Servers that have the MSSQL Serverrole installed | 
| cPVAL - Server Role - Exchange Servers | Exchange Server | Custom FieldcPVAl Roles DetectedContainsExchange Server | A group tailored for Windows Servers that have the Exchange Serverrole installed | 
| cPVAL - Server Role - MySQL Servers | MySQL Server | Custom FieldcPVAl Roles DetectedContainsMySQL Server | A group tailored for Windows Servers that have the MySQL Serverrole installed | 
| cPVAL - Server Role - Veeam BDR | Veeam BDR | Custom FieldcPVAl Roles DetectedContainsVeeam BDR | A group tailored for Windows Servers that have the Veeam BDRrole installed | 
| cPVAL - Server Role - SharePoint Servers | SharePoint Server | Custom FieldcPVAl Roles DetectedContainsSharePoint Server | A group tailored for Windows Servers that have the SharePoint Serverrole installed | 
| cPVAL - Server Role - FSMO - Schema Master | Schema Master | Custom FieldcPVAl Roles DetectedContainsSchema Master | A group tailored for Windows Servers that have the Schema Masterrole installed | 
| cPVAL - Server Role - FSMO - Domain Naming Master | Domain Naming Master | Custom FieldcPVAl Roles DetectedContainsDomain Naming Master | A group tailored for Windows Servers that have the Domain Naming Masterrole installed | 
| cPVAL - Server Role - FSMO - PDC Emulator | PDC Emulator | Custom FieldcPVAl Roles DetectedContainsPDC Emulator | A group tailored for Windows Servers that have the PDC Emulatorrole installed | 
| cPVAL - Server Role - FSMO - RID Master | RID Master | Custom FieldcPVAl Roles DetectedContainsRID Master | A group tailored for Windows Servers that have the RID Masterrole installed | 
| cPVAL - Server Role - FSMO - Infrastructure Master | Infrastructure Master | Custom FieldcPVAl Roles DetectedContainsInfrastructure Master | A group tailored for Windows Servers that have the Infrastructure Masterrole installed | 
Implementation
Step 1
Create the cPVAL Windows Servers group.
Step 2
Create the cPVAl Roles Detected custom field.
Step 3
Create the Windows Server Roles Detection automation.
Step 4
Create the Windows Server Roles Detection task schedule.
Step 5
Create the following server role groups:
- cPVAL - Server Role - Certificate Authority Servers
- cPVAL - Server Role - Domain Controllers
- cPVAL - Server Role - Federation Servers
- cPVAL - Server Role - LDS Servers
- cPVAL - Server Role - RMS Servers
- cPVAL - Server Role - Application Servers
- cPVAL - Server Role - Health Attestation Servers
- cPVAL - Server Role - DHCP Servers
- cPVAL - Server Role - DNS Servers
- cPVAL - Server Role - Fax Servers
- cPVAL - Server Role - File Servers
- cPVAL - Server Role - HGS Servers
- cPVAL - Server Role - Hyper-V Host
- cPVAL - Server Role - Hyper-V Cluster
- cPVAL - Server Role - NPS Servers
- cPVAL - Server Role - Print Servers
- cPVAL - Server Role - Remote Access Servers
- cPVAL - Server Role - RDS Servers
- cPVAL - Server Role - Volume Activation Servers
- cPVAL - Server Role - Web Servers
- cPVAL - Server Role - WDS Servers
- cPVAL - Server Role - Essentials Servers
- cPVAL - Server Role - WSUS Servers
- cPVAL - Server Role - MSSQL Servers
- cPVAL - Server Role - Exchange Servers
- cPVAL - Server Role - MySQL Servers
- cPVAL - Server Role - Veeam BDR
- cPVAL - Server Role - SharePoint Servers
- cPVAL - Server Role - FSMO - Schema Master
- cPVAL - Server Role - FSMO - Domain Naming Master
- cPVAL - Server Role - FSMO - PDC Emulator
- cPVAL - Server Role - FSMO - RID Master
- cPVAL - Server Role - FSMO - Infrastructure Master
FAQ
Q1. How often should the "Windows Server Roles Detection" automation be scheduled?
A: It is recommended to schedule the task to run daily to ensure that the server role information is up-to-date.
Q2. Can I customize the server role groups?
A: Yes, you can customize the server role groups by creating additional groups or modifying the conditions in the existing groups to suit your organization's requirements.
Q3. What happens if a server has multiple roles installed?
A: If a server has multiple roles installed, it will be included in all the corresponding server role groups based on the roles detected.
Q4. How do I verify that the roles are being detected correctly?
A: You can verify the detected roles by checking the value of the custom field cPVAl Roles Detected for a specific server. Ensure that the roles listed match the roles installed on the server.
Q5. What should I do if a role is not being detected?
A: Ensure that the Windows Server Roles Detection automation and task are configured correctly. Verify that the server is part of the cPVAL Windows Servers group and that the automation is running successfully.
Q6. Can I add roles that are not listed in this document?
A: Yes, you can add additional roles by creating new server role groups and defining the conditions based on the custom field cPVAl Roles Detected.
Q7. Is this solution compatible with non-Windows servers?
A: No, this solution is specifically designed for Windows Servers and relies on detecting roles that are unique to the Windows Server operating system.