ITOptimize Server Discovery

[DCIM_Support]

This question was originally posted on DCIM Support by Mashwiz on 2019-08-23

---

Hi Team,

Kindly we've installed ITOptimize license on customer DCO, they are in an Active Directory setup.

We however can't discover some servers even with the right subnet entered.

Please advise what level of precise privilege's are required to the account used in the discovery.

Is this the same account used to discover windows, Linux and Virtual machine servers.

Thank you.

Regards.

(CID:148342396)

[DCIM_Support]

This answer was originally posted on DCIM Support by Valentin Kozlov on 2019-08-23

---

Hi!

It depends of customer environment.

You should use account which is configured on discovered system.

Linux account should have rights to connect to server via ssh for example.

(CID:148342449)

[DCIM_Support · Accepted solution]

This answer was originally posted on DCIM Support by Greg Sterling on 2019-08-23

---

Hello Mashwiz

Some of what I'm stating can be found here: https://sxwhelpcenter.ecostruxureit.com/display/UADCO8x/StruxureWare+Data+Center%3A+IT+Optimize+secu...

To discover a windows server using WMI, ITO connects to the WMI interface on the ITO server, then uses the credentials specified in the discovery window to make a remote WMI connection to the target server(s). ITO queries the WMI namespace on the target servers so the user account used for discovery needs to be able to probe the WMI namespace. This means the user account used for discovery usually has local administrator access on the target server(s) and may need the distributed com users group depending on how windows security is configured.

The above information means, ITO is not natively making the WMI connections itself. The WMI connection is being made from the ITO server to the target servers using the windows WMI framework, so you can pre-check access/connectivity using windows commands to troubleshoot discovery problems.

For example, if you logon to the ITO server as the user account used to install ITO, open a windows command window and execute this command:

wmic /node:<ip-address-of-target-host>  /user:<user-name>  path  Win32_ComputerSystemProduct

You'll be asked for the password when you hit enter. That command should return some basic info about the server. If you get a response like "access denied" or some other error then there is most likely a security problem with the user account.

Regards

Greg Sterling

(CID:148342828)

[DCIM_Support]

This question is closed for comments. You're welcome to start a new topic if you have further comments on this issue.