Analytics Use Cases

The use cases in the following sections provide guidance on how to manage and interpret the results of the data gathered by Analytics v2.

Generate Views

Additional Analytics v2 features you can use when generating the data:

  • After setting the filters, save the view to load the same set of filters the next time you want to refresh the data.
  • Add the applications to policy using the Add to Policy option.

Windows

Use Case Favorite Filters
Learn about recent events that require admin rights in your estate and add them to your Add Admin Application Groups.

On the Events grid with these filters:

  • OS: Windows
  • Admin Required: Yes
  • Application Group Names:
    • (Default) Trusted & Signed UAC Prompt
    • (Default) Signed UAC Prompt
    • (Default) UAC Prompt
Learn about recent on-demand elevation events in your estate, and add them to Add Admin Application Groups.

On the Events grid with these filters:

  • OS: Windows
  • On Demand: Yes
  • Admin Required: Yes
  • Application group names:
    • (Recommended) Restricted Functions (On-Demand)
    • (Default) Any Application
Learn about the most popular applications that require admin rights in your estate, and add them to your Add Admin Application Groups.

On the Applications grid with these filters:

  • Operating System: Windows
  • Admin Required: Yes
  • Application Group Names:
    • (Default) Any Trusted & Signed UAC Prompt
    • (Default) Any Signed UAC Prompt
    • (Default) Any UAC Prompt
Learn about the most popular applications that are elevated on demand in your estate, and add them to your Add Admin Application Groups.

On the Applications grid with these filters:

  • OS: Windows
  • On Demand: Yes
  • Admin Required: Yes
  • Application group names:
    • (Recommended) Restricted Functions (On-Demand)
    • (Default) Any Application
To see the most popular passive applications that would have been blocked if the Low Flexibility policy was enabled, and add those to the Low Flex - Passive list before enabling the active allow list.

On the Applications grid with these filters:

  • OS: Windows
  • Application Group:
    • (Default) Any Application

macOS

Use Case Favorite Filters
Learn about recent events that require authorization rights in your estate, and add them to Add Admin Application Groups.

On the Events grid with these filters:

  • OS: Mac
  • Authorization Required: Yes
  • Application Group Names:
    • (Default) General - Any Applications Requiring Authorization
Learn about the most popular applications that require authorization in your estate, and add them to your Authorize Application Groups.

On the Applications grid with these filters:

  • OS: macOS
  • Authorization Required: Yes
  • Application Group Names:
    • (Default) General - Any Applications Requiring Authorization
To see the most popular passive applications that would have been blocked if the Low Flexibility policy was enabled, and add those to the Low Flex - Passive list before enabling the active allow list.

On the Applications grid with these filters:

  • OS: macOS
  • Event Action: Allowed + Passive
  • Application Group Names:
    • (Default) Passive - System Trusted