⚠ The reports on this tab scan every domain endpoint via PowerShell and WMI. On larger networks they may take several minutes. The Groundskeeper server must be domain-joined with RSAT-AD-PowerShell installed. Which computers they scan is set on the Scan scope tab.
Disk Space
Scans C: drive free space across all active domain endpoints. Alerts when any device falls below the threshold.
PS / WMIDisabled
Windows 11 Readiness
Checks CPU generation across domain endpoints to identify devices ready for Windows 11 upgrade. Informational only.
PS / WMIDisabled
Server OS Version
Scans configured Windows Servers' OS version, flagging any still on Server 2016 or earlier and any not yet on Server 2022. Uses the same server list as the Windows Server connector.
PS / WMIDisabled
Exam Marking Software
Detects teacher-side exam marking software across domain endpoints. Forewarns IT of upcoming exam season support demand.
PS / WMIDisabled
Products to detect ?
RM Assessor
RM Assessor 3/4 — widely used across multiple awarding bodies in UK schools
Scoris Assessor
Cambridge Assessment — used for IGCSE and A-level marking
More products will be added as they are validated. Contact RSJ Software to request additions.
Windows 11 Build Compliance
Of devices already on Windows 11, flags any behind on feature updates or past end-of-servicing. Reads the agent inventory cache directly -- no extra endpoint scan needed.
Agent cacheDisabled
OneDrive Usage
Shows storage used per user across your Microsoft 365 tenant. Useful for spotting users approaching their limit before they run into sync issues.
Graph APIDisabled
🔒 OneDrive usage requires Microsoft 365 credentials. Configure the M365 Service Health or M365 Licence Usage connector in Connector Settings — this report reuses those credentials automatically.
Group Policy Passwords
Looks in Group Policy files on the domain for saved passwords (MS14-025). Reads only. Needs this server to be on the domain.
AD read-onlyDisabled
Group Policy Versions
Compares the version in Active Directory with the version in SYSVOL on each domain controller. Finds mismatches, missing folders and orphans. Reads only.
AD read-onlyDisabled
Software Inventory
Lists the programs installed on each computer, from what the RSJ Agent reports. Nothing extra is scanned.
Agent cacheDisabled
Software Advisories
Flags installed programs that have a published security fix waiting or are past end of support.
Agent cacheDisabled
Battery Health
Shows each laptop battery's capacity compared with when it was new, worst first.
Agent cacheDisabled
Windows Activation
Shows which computers' copies of Windows are not activated.
Agent cacheDisabled
Hardware & Warranty
Shows warranty end dates from the computer's maker. Nothing shows until a maker's warranty lookup is set up.
Vendor APIDisabled
RDS Sessions
Shows who is signed in to your Remote Desktop servers, from the RSJ Agent on those servers.
Agent cacheDisabled
DfE Filtering & Monitoring Readiness
Records the facts Groundskeeper cannot measure itself for the DfE filtering & monitoring standards -- a named responsible person, review/training dates, and provision descriptions. Two of the seven standard items are measured automatically from the School Services connector; the rest rely on what is entered here. See the Reports page for the full readiness view and PDF export.
Self-attestedDisabled
Reports and alerts are reviewed regularly by the responsible person
Filtering/monitoring incidents are logged and acted upon
AD scan scope
Restricts which Active Directory computers the PS / WMI reports on the Estate scans tab (Disk Space, Windows 11 Readiness, Exam Marking) enumerate. Leave blank to scan the whole domain. Set it to a specific Organisational Unit to scan only that OU — important where one AD is shared across sites, so each Groundskeeper only scans its own school's computers (e.g.
OU=Computers,OU=My School,DC=trust,DC=local). This one setting applies to every PS / WMI report.