{"id":38833,"date":"2025-08-25T04:41:38","date_gmt":"2025-08-25T04:41:38","guid":{"rendered":"https:\/\/www.insentragroup.com\/nz\/insights\/uncategorized\/the-purview-on-premises-scanner-from-zero-to-wtf-is-that-file-in-60-seconds\/"},"modified":"2025-08-25T07:26:03","modified_gmt":"2025-08-25T07:26:03","slug":"the-purview-on-premises-scanner-from-zero-to-wtf-is-that-file-in-60-seconds","status":"publish","type":"post","link":"https:\/\/www.insentragroup.com\/nz\/insights\/geek-speak\/information-management\/the-purview-on-premises-scanner-from-zero-to-wtf-is-that-file-in-60-seconds\/","title":{"rendered":"The Purview On-Premises Scanner \u2013 From Zero to \u2018WTF is That File?\u2019 in 60 Seconds"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Welcome to the Dungeon (aka Your On-Premises Data)&nbsp;<\/h2>\n\n\n\n<p>Hey folks, Pure Awesomeness here (aka Chief Data Whisperer)&nbsp; \u2013 and yep, it\u2019s been a whole five minutes since I dropped my last spicy blog on DSPM for Skynet\u2026 I mean, AI (definitely friendly, probably not self-aware&#8230; yet).&nbsp;<\/p>\n\n\n\n<p>But let\u2019s shift gears and talk about something that really sends a cold shiver down my spine\u2026and no, not clowns or pineapple on pizza (if you have pineapple on your pizza, that\u2019s a whole different conversation we need to have). I\u2019m talking on-premises data.&nbsp;<\/p>\n\n\n\n<p>Yes, that dark corner of your infrastructure you pretend doesn\u2019t exist until an auditor shows up with a flashlight and a frown. And what magical tool are we summoning to tame the chaos? The tool that works harder than your VPN on a Monday morning: the Microsoft Purview On-Premises Scanner.&nbsp;<\/p>\n\n\n\n<p>Let\u2019s face it\u2026your on-premises data is like that weird corner of the garage you haven\u2019t cleaned in five years. It&#8217;s dark, dusty, and full of things you\u2019re not entirely sure you should be legally storing.&nbsp;<\/p>\n\n\n\n<p>Enter the Microsoft Purview On-Premises Scanner. It\u2019s like sending in a data-sniffing sniffer dog, only this one doesn\u2019t bark, doesn\u2019t shed, and doesn\u2019t pee on your firewalls.<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img fetchpriority=\"high\" decoding=\"async\" width=\"501\" height=\"332\" src=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-22.png\" alt=\"\" class=\"wp-image-38834\" srcset=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-22.png 501w, https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-22-300x199.png 300w\" sizes=\"(max-width: 501px) 100vw, 501px\" \/><\/figure>\n\n\n\n<p>What it does do is help you figure out what the heck is actually sitting in those old file shares and SharePoint 2013 servers (yes, we see you\u2026 still clinging to life like a Nokia 3310).<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img decoding=\"async\" width=\"285\" height=\"434\" src=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-23.png\" alt=\"\" class=\"wp-image-38836\" srcset=\"https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-23.png 285w, https:\/\/www.insentragroup.com\/nz\/wp-content\/uploads\/sites\/18\/2025\/08\/image-23-197x300.png 197w\" sizes=\"(max-width: 285px) 100vw, 285px\" \/><\/figure>\n\n\n\n<h2 class=\"wp-block-heading\">So\u2026 What Is This Magical Beast?<\/h2>\n\n\n\n<p>The Microsoft Purview On-Premises Scanner is the ultimate combo; stealthy (is this even a word?) like 007 and a neat freak like Marie Kondo on a caffeine high:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>It discovers all those forgotten files lying around in your dusty file servers<\/li>\n\n\n\n<li>It classifies them like a librarian on a double-shot espresso<\/li>\n\n\n\n<li>It labels<strong> and <\/strong>protects the stuff that actually matters (and not those &#8220;final_FINAL2_V3_use_this_one_really.docx&#8221; files).&nbsp;<\/li>\n<\/ul>\n\n\n\n<p>This scanner doesn\u2019t judge your messy storage habits but it will make them known to your compliance officer. So maybe start caring.&nbsp;<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Benefits (Aka Why You\u2019ll Look Like a Hero)<\/h2>\n\n\n\n<p>Here\u2019s what happens when you unleash this bad boy:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Single pane of glass: See what\u2019s happening on-premises. It\u2019s like night vision goggles for your data estate<\/li>\n\n\n\n<li>Compliance on autopilot: Get policies and labels out there faster than your coworker can say, \u201cWe\u2019ll fix it in production\u201d<\/li>\n\n\n\n<li>Data discovery without the meltdowns: Find those \u201caccidentally public\u201d spreadsheets with credit card numbers before the auditors do<\/li>\n\n\n\n<li>Proactive DLP: Say goodbye to &#8220;Oops, I emailed the entire HR folder to my personal Gmail&#8221; scenarios. (You know who you are)&nbsp;<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Purview Scanner Prereqs (a.k.a. the \u201cDon\u2019t Even Think About Scanning Until This Stuff\u2019s Sorted\u201d List)<\/h2>\n\n\n\n<p>Before you start downloading things like a kid on Christmas morning, check off these must-haves:<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-f03f9da8d6c73d0509656f33a03a2e72\" style=\"color:#f37237\">Windows Server Requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>Needs to be <strong>Windows Server 2012 R2 or newer<\/strong>. If your server still runs on steam and prayers, it\u2019s time to let it go&nbsp;<\/li>\n\n\n\n<li>Must be <strong>domain-joined<\/strong>. Scanners don\u2019t do \u201clone wolf\u201d mode<\/li>\n\n\n\n<li>Don\u2019t even think about installing this on that old lab VM you named \u201cDO_NOT_USE_TEST_FINAL_FINAL(1)\u201d&nbsp;<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-9692bb08c4bfdea156b5ba9b84c4ba97\" style=\"color:#f37237\">Service Account Requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Domain account only<\/strong>. Local accounts are the IT equivalent of flip-flops at a black-tie dinner<\/li>\n\n\n\n<li>Needs <strong>read access<\/strong> to your data. Without it, it just sits there looking cute and doing absolutely nothing<\/li>\n\n\n\n<li><strong>No MFA<\/strong>. The scanner doesn\u2019t have thumbs to approve your push notifications<\/li>\n\n\n\n<li>Use <strong>gMSA<\/strong> or give it a <strong>non-expiring password<\/strong>, because expired passwords mid-scan are the adult version of \u201cthe dog ate my homework\u201d<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-3ceb65f4276b2de31009038d2fa99581\" style=\"color:#f37237\">SQL Server Requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>SQL Server version must be <strong>2012 or later<\/strong>. If your SQL databases were born before Gangnam Style, it\u2019s officially a relic<\/li>\n\n\n\n<li>Scanner needs to <strong>connect over the network<\/strong>, not tucked away behind 27 firewalls and a VPN that only connects on the second Tuesday of the month<\/li>\n\n\n\n<li><strong>SYSADMIN rights<\/strong>\u2026yes, full-blown, no-restrictions, top-shelf access. Because the scanner isn\u2019t here to ask politely. It\u2019s here to <strong>get stuff done<\/strong>\n<ul class=\"wp-block-list\">\n<li>Look, sysadmin is a non-negotiable must. But if you&#8217;re feeling rebellious and really can&#8217;t grant it, there&#8217;s a workaround&#8230; though it\u2019s uglier than a Monday morning without coffee. More on that hot mess <a href=\"https:\/\/learn.microsoft.com\/en-us\/purview\/deploy-scanner-prereqs#restriction-you-cannot-be-granted-sysadmin-or-databases-must-be-created-and-configured-manually\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">here<\/a> Honestly, just grant sysadmin. Your future self will thank you<\/li>\n<\/ul>\n<\/li>\n\n\n\n<li>Don\u2019t install the scanner on the SQL server itself unless you enjoy living dangerously (or love performance bottlenecks for fun)<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-4906807474d18a9c3cb529aea5889644\" style=\"color:#f37237\">Information Protection Client Requirements<\/h3>\n\n\n\n<ul class=\"wp-block-list\">\n<li>You need the <strong>AIP unified labeling client<\/strong> installed on the scanner machine<\/li>\n\n\n\n<li>Not the legacy one. Not the beta. The <strong>real deal<\/strong><\/li>\n\n\n\n<li>No client = no label scanning = lots of logs that say \u201c\u00af_(\u30c4)_\/\u00af\u201d<\/li>\n<\/ul>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-827e17bb50a82c8135fda6d29c250d40\" style=\"color:#f37237\">Entra Token<\/h3>\n\n\n\n<p>Yes, the scanner needs an Entra token to do its thing \u2013 no token, no scan, no bueno. Think of it like the VIP wristband at a festival: without it, you&#8217;re stuck outside listening to the bass from the carpark.&nbsp;<\/p>\n\n\n\n<p>Set it up properly, make sure the right permissions are in place, and you\u2019ll be scanning like a boss. Skip this bit, and you\u2019ll be troubleshooting at 11pm wondering why life is hard.&nbsp;<\/p>\n\n\n\n<p>Get the token sorted. Easy win.<\/p>\n\n\n\n<h3 class=\"wp-block-heading has-text-color has-link-color wp-elements-7b3e2729dd762baecd9ad4b9eb343c00\" style=\"color:#f37237\">Bottom Line<\/h3>\n\n\n\n<p>Get all this sorted and your scanner will hum like a Tesla on a full charge.<strong>&nbsp;<br><\/strong>Skip a step, and you\u2019ll be in log file limbo, wondering why your scans return a whole lot of nothing.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Setup: Like IKEA, But With Less Swearing (Hopefully)<\/h2>\n\n\n\n<p>Here&#8217;s the build-your-own-furniture guide to getting it running:&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Create a Scanner Cluster<\/strong> \u2013 Not a real cluster bomb. Just a cool name for grouping your scanner configs in Purview<\/li>\n\n\n\n<li><strong>Configure Content Scan Jobs<\/strong> \u2013 Tell it where to look and what to sniff. (Like saying, \u201cGo find all the spicy Excel files in HR-ServerSecrets\u201d)<\/li>\n\n\n\n<li><strong>Install the Scanner<\/strong> \u2013 Slap it on your Windows Server, connect it to SQL, and give it a good pep talk<\/li>\n\n\n\n<li><strong>Run the Scan<\/strong> \u2013 Start in \u2018discovery\u2019 mode (the peek-without-touching mode), then switch to \u2018enforcement\u2019 when you&#8217;re ready to slap some labels and show those files who\u2019s boss\u2026or just move the data to M365. If you\u2019re going to do this, speak to me first<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\">Final Thoughts: Why You Shouldn&#8217;t Ghost Your On-Premises data<\/h2>\n\n\n\n<p>Look, cloud is cool. We get it. But just because you\u2019re vibing with SharePoint Online doesn\u2019t mean you should ghost your on-premises data like a bad Tinder date. Those servers still have feelings and more importantly, sensitive information.&nbsp;<\/p>\n\n\n\n<p>The Microsoft Purview On-Premises Scanner lets you embrace your hybrid chaos and actually do something about it. You\u2019ll impress your CISO, win the respect of your compliance team, and maybe, just maybe, finally retire that Windows Server 2008 file server that\u2019s been humming in the corner like a haunted fridge.&nbsp;<\/p>\n\n\n\n<p>If you can scan it, you can label it. And if you can label it, you can sleep at night\u2026Maybe.&nbsp;<\/p>\n\n\n\n<p>Ready to wrestle your on-prem data into submission? Whether you need help setting up Microsoft Purview On-Premises Scanner or just want to make sure you\u2019re not one audit away from chaos, we\u2019ve got you covered.&nbsp;<\/p>\n\n\n\n<p><strong><a href=\"https:\/\/www.insentragroup.com\/nz\/contact\/\" target=\"_blank\" data-type=\"link\" data-id=\"https:\/\/www.insentragroup.com\/au\/contact\/\" rel=\"noreferrer noopener\">Contact us today<\/a><\/strong> and let\u2019s turn that \u201cWTF is that file?\u201d moment into \u201cWow, we\u2019ve got this.\u201d\u00a0<\/p>\n\n\n\n<p>Until next time\u2026Pure Awesomeness signing off!&nbsp;<\/p>\n\n\n\n<p>\u201cYou are never too old to set another goal or to dream a new dream.\u201d \u2013 C.S. Lewis&nbsp;<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Learn how Microsoft Purview On-Premises Scanner discovers, classifies, and protects data to simplify compliance and security. <\/p>\n","protected":false},"author":52,"featured_media":38838,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"content-type":"","footnotes":""},"categories":[272],"tags":[],"class_list":["post-38833","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-information-management","entry"],"_links":{"self":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38833","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/users\/52"}],"replies":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/comments?post=38833"}],"version-history":[{"count":3,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38833\/revisions"}],"predecessor-version":[{"id":38839,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/posts\/38833\/revisions\/38839"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media\/38838"}],"wp:attachment":[{"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/media?parent=38833"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/categories?post=38833"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.insentragroup.com\/nz\/wp-json\/wp\/v2\/tags?post=38833"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}