To enable the Windows (WMI) Protocol in your environment: To support LDAPS in discoveries, this protocol must be configured in the Active Directory. The following protocols are supported when accessing the Active Directory: To discover IIS Application Pool accounts, IIS Directory Security (Anonymous Access) accounts and COM+ Applications accounts, IIS 7.5 or 8.5 must be installed. Target servers for discovering dependencies The domain user must belong to the Administrators group or to a group nested within the Administrators group.
User with permissions to logon remotely to the target machine User with local administrative rights for Windows on the target machine User with read permissions on the Active Directory Read permissions in the OU to scan and all sub-OUs Microsoft Active Directory 2012, 2016, and 2019ĭiscovery does not support scanning Active Directory domain controllers.Specifically, the discovery only retrieves information about Windows Services dependencies and Scheduled Tasks dependencies from trusted domains. When scanning a specified domain, the discovery automatically retrieves information about discovered accounts that is stored in trusted domains without requiring additional permission. IIS Directory Security (Anonymous Access) accounts.Windows accounts and dependenciesĭiscovery processes can detect the following Windows accounts and dependencies.Accounts: This topic lists the target machines that can be scanned using Accounts feed discovery.
0 kommentar(er)
