Starting from release 2021.4 in June 2021, all the server-side anonymization features are marked as deprecated as Nexthink is in the process of replacing them with client-side alternatives.

Overview

Nexthink offers various ways to anonymize data, as well as, granular controls for user privacy. The approach described in this article complements similar features offered by the data storage layer, ensuring that data leaving the Windows or macOS device is anonymized.

If the data anonymization is enabled for the user name and activity at the Collector level, there is no need to enable the server-side equivalents.

User name

By default, the Collector reports a user name in a human-readable format. Use one of the following solutions to enable the user name's encryption and to produce a unique, irreversible hash as an output:


If the Nexthink server infrastructure is configured to retrieve data from Active Directory (AD) using the Data Enricher or the Azure AD Enricher, the system may discard information coming from the Collector and will only keep information coming from Active Directory. Please ensure that the list of AD fields is properly set up.

Windows remote action

The remote action labeled Set Collector Configuration allows you to change the Collector configuration parameter for the anonymized user name feature.

Windows installer

For new installations, use the following Windows Installer optional parameter:

ANONYMIZE_USERNAME=enable

Windows registry

Use the Windows registry to create the following key:

registry key

HKLM\SOFTWARE\Nexthink\Collector\AnonymizedData

value type

DWORD

value

UserName=1

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the registry.

  3. Start the Collector.

macOS configuration file

Use the Mac Collector configuration file config.json located in the folder/Library/Application Support/Nexthink to add the following parameter on a new line at the end of the file before the closing curly bracket:

"AnonymizeUserName": true

Here is an extract of the end of a configuration file.

...
"proxy_address": "",
"AnonymizeUserName": true
}
CODE

(info) The first lines have been hidden and are shown as … on line number 1.

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the configuration file.

  3. Start the Collector.

Focus time

By default, reporting the focus time is disabled. Use one of the following solutions to enable it:

Windows remote action

The remote action labeled Set Collector Configuration allows you to change the Collector configuration parameter for the focus time feature.

Windows installer

For new installations, use the following Windows Installer optional parameter:

WINDOW_FOCUS_TIME_MONITORING=enable

Windows registry

Use the Windows registry to create the following key:

registry key

HKLM\SOFTWARE\Nexthink\Collector\WindowFocusTimeMonitoring

value type

DWORD

value

Enabled=1

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the registry.

  3. Start the Collector.

macOS configuration file

Use the Mac Collector configuration file config.json located in the folder /Library/Application Support/Nexthink to add the following parameter on a new line at the end of the file before the closing curly bracket:

"EnableWindowFocusTimeMonitoring": true

Here is an extract of the end of a configuration file.

...
"proxy_address": "",
"EnableWindowFocusTimeMonitoring": true
}
CODE

(info) The first lines have been hidden and are shown as … on line number 1.

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the configuration file.

  3. Start the Collector.

User activity

By default, the Collector reports the user activity. Use one of the following solutions to disable it.

Windows installer

For new installations, use the following Windows Installer optional parameter:

USER_INTERACTION_TIME_MONITORING=disable

Windows registry

Use the Windows registry to create the following key:

registry key 

HKLM\SOFTWARE\Nexthink\Collector\UserInteractionTimeMonitoring

value type

DWORD

value 

Disabled=1

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the registry.

  3. Start the Collector.

macOS configuration file

Use the Mac Collector configuration file config.json located in the folder /Library/Application Support/Nexthink to add the following parameter on a new line at the end of the file before the closing curly bracket:

"DisableUserInteractionTimeMonitoring": true

Here is an extract of the end of a configuration file.

...
"proxy_address": "",
"DisableUserInteractionTimeMonitoring": true
}
CODE

(info) The first lines have been hidden and are shown as … on line number 1.

For the changes to take effect, follow this sequence:

  1. Stop the Collector.

  2. Modify the configuration file.

  3. Start the Collector.