Documentation for risk or lack there-of for providing Domain Admin right for Windows Discovery?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-09-2023 03:32 PM
I am working with an organization that is starting their CMDB / Discovery Journey, and my project sponser let me know that they expect pushback from the System Administration team when we request a Domain Admin account in order to perform Windows Discovery. I've done these implementations 10s of times, and never had an issues caused by Discovery, but wondered if there was documentation or information on the ServiceNow side that could help ease the concern for teams like this?
In the past, I have done things like:
-Convince them to only give access to a few Servers that we could run the Discovery on as a POC that it will not cause load issues, change config, etc.
-Stepped through the Patterns with them to show the specific commands that Discovery accesses, and why
-Give my personal experience having done this many times and never having a team highlight an issue caused by discovery
If anyone has any documentation, or other ideas for what I could provide during a call with the Windows team, I would greatly appreciate it!