Discovery Server scans user computers and data stores, applying configurable rules to discover certain content. Scanning can be accompanied by various actions depending upon the discovery settings, for example, it can grant or deny access to content, delete or encrypt content, alert administrators, or notify computer users.

The basis of the discovery settings is the so-called “units” that determine the scan area. This area can be configured to include local computer disks and folders, as well as SMB network shares. Units are assigned discovery rules along with the actions to perform when content matching those rules is discovered.

After configuring units, rules, and actions, the administrator can set up and run discovery tasks. When running, such a task scans its units, and applies the rules and actions specified. In addition, the task creates reports and logs events, making it possible to view and analyze the results of discovery and the actions performed.

The discovery setup procedure can be summarized as follows: