Reports Page

This page is also in the Groundskeeper wiki: https://github.com/rsjsoftwareltd/groundskeeper/wiki/Reports-Page

The Reports page gathers the longer-running checks in one place: how each connector has been getting on, the scans that look across your whole estate (disk space, Windows 11 readiness, software and so on), and the background tasks Groundskeeper runs. It is also where an admin downloads the IT health report as a PDF.

Open it from the Reports item in the sidebar, or at https://<server-address>:8443/reports. Admin and technician accounts can see it. An SLT account cannot.

The scans themselves are set up on a separate page, Reports Settings. It is described at the end of this page.

The top of the page #

Last scan (top right) -- when the newest estate scan summary was recorded. It appears once at least one scan has produced results.
IT health report (PDF) -- builds a PDF from the current state of Groundskeeper and downloads it. It holds a connector summary, an agent estate summary, the top recent alerts, an AI narrative summary where AI has made one, and the report insights. It is built on your server and sent nowhere. Admin accounts only. A technician who clicks it is told it is for admin accounts only.
Reports Settings -- opens the settings page.

Connectors #

One card for each connector you have switched on, showing its state (Idle, Running, OK or Error), when it last finished and how long it took. A connector that is running shows a small spinner and what it is doing.

Click a card to see that connector's recent polls, newest first: when, whether it was OK or an Error, how long it took, and the detail or error message. Up to the last 25 polls are shown. A connector that has never run says so.

If the list could not be loaded, the section says so instead of showing an empty grid.

Reports #

One card for each report. A card shows a one-line summary. Click a card that has results to open them in a pop-up. Press Escape or click outside it to close. A card with no results yet is dimmed and says "No results yet", or "Could not load results" if the feed could not be read.

Report	What it shows
Disk Space	Devices whose C: drive is below the free-space threshold, worst first. The worst device is named at the top, and Show all lists them with their free space (red under 5 GB, amber above). The same pop-up has Disk Space Trends: a small chart of free space for each device, worst first, over 7, 14, 30 or 90 days. If some devices could not be read, "no devices below threshold" carries a note that it is not an all-clear.
Windows 11 Readiness	Counts of machines already on Windows 11, ready to upgrade, not capable, could not be checked, and without data. Where machines have the RSJ Agent, this uses their real TPM 2.0, Secure Boot, CPU, RAM and disk checks. It also lists the blockers across the estate and the machines that cannot take Windows 11, for refresh planning. Machines whose checks could not be read are left out of the percentage rather than counted as failed. Servers are left out. Without agent data, it falls back to the older CPU-generation scan.
Server OS Version	Servers on Server 2016 or earlier are flagged as running an unsupported operating system. Otherwise it reports how the scanned servers stand.
Windows 11 Build Compliance	Of the devices already on Windows 11, which are behind on feature updates or past the end of servicing.
Software Inventory	From the agent's list of installed programs: end-of-life software (flagged as a Cyber Essentials fail), outdated high-risk software below a minimum safe version, and a footprint of what is installed and on how many devices. Devices with no software reading yet are listed separately.
Windows Activation	Counts of devices unlicensed, in a grace period, or still on a MAK key, with the devices behind each. Unlicensed and grace period are the ones to act on. "Still on MAK" is information only. Where the edition is known, a suggested re-key command is shown for a technician to run themselves. Groundskeeper does not run it.
Filtering & Monitoring	The DfE filtering and monitoring items, each marked MEASURED or SELF-REPORTED, with a count of those needing attention. It has a Download readiness PDF button (admin accounts only) and an Edit attestation link. See DfE Filtering and Monitoring Readiness.
Hardware & Warranty	Devices grouped by warranty status: expired, expiring soon, in warranty, unknown. No warranty connector exists yet, so for now the card says there is no warranty data.
RDS Sessions	For Remote Desktop session hosts reporting through the agent: active sessions, disconnected sessions, and "stale" ones disconnected for 24 hours or more, longest idle first, with a per-host breakdown. This is reporting only and raises no alerts.
OneDrive Usage	The Microsoft 365 users using the most OneDrive storage, with the amount used and allocated. A user at or over the Warn above (GB) size (in the report settings, below) is shown in amber. Needs a Microsoft 365 connector's credentials.

Some of these cards only have something to show once the right data exists. The agent-fed ones (Windows 11 readiness, Software, Activation, RDS) need machines running the RSJ Agent that have reported that information. Until then the page shows "awaiting first agent readings", or lists the machines without data.

Most of the detail tables are collapsed. Use the Show ... buttons to open them.

Activity #

Groundskeeper's background tasks that are not connector polls, one card each: Windows Server Scan, AD Server Discovery, AI Summary, Disk Space Report, Windows 11 Readiness, OneDrive Usage, Server OS Version and Windows 11 Build Compliance. Each shows its state, what it last did, when it finished and how long it took. Click a card to see its last run in full.

Some cards have a button:

Task	Button
Windows Server Scan	Run now
AD Server Discovery	Discover
Disk Space Report	Run scan
Windows 11 Readiness	Run scan
OneDrive Usage	Run scan
AI Summary	Refresh

The Server OS Version and Windows 11 Build Compliance cards have no button here.

If a run is refused (already running, not switched on, or you do not have the rights) or never reached the server, the card says why for a few seconds. Otherwise the button is disabled while the task runs.

While an estate scan is running, a Scan in progress banner shows the current stage, the stages already done and the time so far. When it finishes, the results refresh themselves.

When there is nothing to show #

If no report has produced any results yet, the page shows a No report data yet box listing the usual reasons:

Reports are not enabled. Switch them on in Reports Settings.
The AD search base is wrong (blank searches the whole domain).
The scan is still running.
The ActiveDirectory PowerShell module (RSAT) is not installed on the Groundskeeper server.

The box has two buttons: Run diagnostic check and Start full scan now.

A Report errors card appears at the bottom if the Reports connector has recorded a failed scan, with the title and detail of each.

Reports Settings #

The Reports Settings page (under Configuration in the sidebar) has three tabs.

Estate scans -- these scan your Active Directory computers over PowerShell and WMI. The server must be domain-joined with RSAT installed, and on a larger network a scan can take several minutes.

Disk Space -- how often it runs and the Alert threshold (GB free). The box starts at 10.
Windows 11 Readiness -- how often it runs. Informational only.
Server OS Version -- how often it runs and a WMI timeout. It uses the same server list as the Windows Servers connector.
Exam Marking Software -- how often it runs and which products to look for.

Cloud and agent -- these use the Microsoft 365 connection or the agent's data, so they need no extra scan of your computers.

Windows 11 Build Compliance -- how often it runs.
OneDrive Usage -- how often it runs, how many top users to show, and the size above which a user raises a warning. Both start at 50.
DfE Filtering & Monitoring Readiness -- the facts Groundskeeper cannot measure: a named responsible person and their role, when filtering and monitoring were last reviewed, when staff were last trained, a description of the filtering and monitoring provision, and two tick boxes. See DfE Filtering and Monitoring Readiness.

Scan scope -- the AD search base. Leave it blank to scan the whole domain, or set it to one Organisational Unit (for example OU=Computers,OU=Example Academy,DC=trust,DC=local) so that each Groundskeeper only scans its own school's computers. One setting covers every PowerShell and WMI report.

Schedules. Each report can be off, or run every hour, every day, every week or every month. The exam marking scan has no monthly choice. For Disk Space, Windows 11 Readiness, Server OS Version, Windows 11 Build Compliance and OneDrive Usage you also pick the time of day (it starts at 07:00), the weekday for a weekly run, or the day of the month (1 to 28) for a monthly run.

Emailing a report. The same five reports have an Email this report box, with recipients separated by commas. The email has its own schedule, daily, weekly or monthly, which starts at weekly on Monday at 08:00. It is separate from how often the report runs, so a report can run daily and be emailed monthly. The email carries what the most recent completed run found. Email needs the mail settings under General Settings -> Notifications. See Alerts and Notifications.

The Reports connector must be switched on for any scan to run. If it is off, a note at the top of the settings page says so. Saving a report with its box ticked switches the connector on, and you can also switch it on or off on the Connector Settings page. Disk Space, Windows 11 Readiness, Exam Marking Software and OneDrive Usage have a Run now button.