ITOptimize Server Discovery

DCIM_Support · ‎2020-07-05

Hi Team,

Kindly we've installed ITOptimize license on customer DCO, they are in an Active Directory setup.

We however can't discover some servers even with the right subnet entered.

Please advise what level of precise privilege's are required to the account used in the discovery.

Is this the same account used to discover windows, Linux and Virtual machine servers.

Thank you.

Regards.

DCIM_Support · ‎2020-07-05

Hello Mashwiz

Some of what I'm stating can be found here: https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/StruxureWare+Data+Center%3A+IT+Optimize+secu...

To discover a windows server using WMI, ITO connects to the WMI interface on the ITO server, then uses the credentials specified in the discovery window to make a remote WMI connection to the target server(s). ITO queries the WMI namespace on the target servers so the user account used for discovery needs to be able to probe the WMI namespace. This means the user account used for discovery usually has local administrator access on the target server(s) and may need the distributed com users group depending on how windows security is configured.

The above information means, ITO is not natively making the WMI connections itself. The WMI connection is being made from the ITO server to the target servers using the windows WMI framework, so you can pre-check access/connectivity using windows commands to troubleshoot discovery problems.

For example, if you logon to the ITO server as the user account used to install ITO, open a windows command window and execute this command:

wmic /node: /user: path Win32_ComputerSystemProduct

You'll be asked for the password when you hit enter. That command should return some basic info about the server. If you get a response like "access denied" or some other error then there is most likely a security problem with the user account.

Regards

Greg Sterling

See Answer In Context

DCIM_Support · ‎2020-07-05

Hi!

It depends of customer environment.

You should use account which is configured on discovered system.

Linux account should have rights to connect to server via ssh for example.

DCIM_Support · ‎2020-07-05

Hello Mashwiz

Some of what I'm stating can be found here: https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/StruxureWare+Data+Center%3A+IT+Optimize+secu...

To discover a windows server using WMI, ITO connects to the WMI interface on the ITO server, then uses the credentials specified in the discovery window to make a remote WMI connection to the target server(s). ITO queries the WMI namespace on the target servers so the user account used for discovery needs to be able to probe the WMI namespace. This means the user account used for discovery usually has local administrator access on the target server(s) and may need the distributed com users group depending on how windows security is configured.

The above information means, ITO is not natively making the WMI connections itself. The WMI connection is being made from the ITO server to the target servers using the windows WMI framework, so you can pre-check access/connectivity using windows commands to troubleshoot discovery problems.

For example, if you logon to the ITO server as the user account used to install ITO, open a windows command window and execute this command:

wmic /node: /user: path Win32_ComputerSystemProduct

You'll be asked for the password when you hit enter. That command should return some basic info about the server. If you get a response like "access denied" or some other error then there is most likely a security problem with the user account.

Regards

Greg Sterling

DCIM_Support · ‎2020-07-05

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.