<!-- Assessment Tool — https://wiki.cyberguard.srl/cat/administration/scheduling/ -->

# Scheduling

CyberGuard can run your assessments automatically, so that the Security Score always reflects the current state of your environment without anyone having to remember to start them. You configure it in **Company Profile → Edit → Scheduling**, a tab reserved to administrators.

## How It Works

| Assessment | Who runs it at the scheduled time |
| --- | --- |
| **Microsoft Entra** | The CyberGuard portal itself, through the [Microsoft Entra app](https://wiki.cyberguard.srl/cat/onboarding/entra-app.md). Nothing to install. |
| **Microsoft 365** | The portal starts the collection through Microsoft Graph; right after, the Microsoft 365 **probe** completes it with Exchange, Defender, SharePoint, Teams, Purview and mailboxes. |
| **Active Directory** | The Active Directory **probe**. |

A probe is the agent installed as a Windows service on a machine of your organization: see [Run as a Service](https://wiki.cyberguard.srl/cat/agents/service.md). Without a probe, the Microsoft 365 and Active Directory assessments cannot run on a schedule.

## Probes

![The probes of the organization](https://wiki.cyberguard.srl/cat/img/scheduling-probes.png)

The **Probes** card lists the probes installed in your environment: their scope (Microsoft 365 or Active Directory), the machine, its operating system, the agent version, when they were registered, their last contact and until when their access token is valid. A probe that stops contacting the portal is reported here and, if you want, by [email](https://wiki.cyberguard.srl/cat/administration/email-notifications.md).

Use the revoke button to disable a probe — for example if the machine is decommissioned or compromised. The probe stops working at its next contact; then uninstall it from the machine.

## Scheduling an Assessment

![Scheduling the Microsoft Entra assessment](https://wiki.cyberguard.srl/cat/img/scheduling-entra.png)

Each assessment has its own card:

1. Turn on **Enable scheduling**.
2. Choose the **Frequency**: every day, every N days, or every week on a given day.
3. Choose the **Time**. Times are in your organization's time zone; start times are spread by a few minutes so that not all organizations start at the same moment.
4. Click **Save**.

The card shows when the next run is due, when the last run happened and its result, and who set the schedule.

## What to Expect

- An assessment started from the portal continues even if you close the page; the list updates by itself when it is done.
- If a scan is already running, a new request — manual or scheduled — is not queued: the portal tells you, and the scheduled run is skipped.
- Probes update themselves to the latest agent version.
- To be told when a scheduled assessment completes or fails, or when a probe stops responding, turn on the [email notifications](https://wiki.cyberguard.srl/cat/administration/email-notifications.md).
