Discovering under local admin (not domain admin)

[stryker129]

Hello all,

In my company there are computers in a domain as well as computers which are not in domain.

While discovering network using domain administrator we have all needed data and all is fine.

But in case of using local administrator in a computers which are in domain - discovery doesn't work.

We are using local admin credentials in the following format: ".\administrator"

DCOM and WMI are enabled on those PCs.

In case of switching off User Access Control (UAC) on local PCs - credentials are passed and discovery works.

How can we discovering these PCs using local admin credentials and NOT switching off UAC ?

Can anyone advise on this matter?

Thanks.

[JBark]

Interesting concept, but wouldn't it be easier to just add a domain user account to the local admin group and use that account as your discovery account?

[stryker129]

We cannot add domain user account to the local admin group because computer(s) is/are not on domain.

[doug_schulze]

Unfortunately there isn't.   To make remote queries to windows hosts with a local (admin) account UAC must be disabled... Maybe consider using the WMI script?

Help the Help Desk

[stryker129]

using the WMI script

You mean using orchestration? Is that only one way to resolve my issue? Or there are some another ways?

Thanks