Mid server Service Account - Generating Failed Logged on Alerts

[SK Chand Basha]

Hello Everyone,

1. During discovery, does the MID Server attempt to use its own service account for authentication instead of the credentials configured in ServiceNow? If so, at what stage does it use the service account?

2. Can the MID Server service account be a domain user with local administrator privileges on the MID Server host?

3. Does the MID Server service account log in to the target systems during the discovery process?

[palanikumar]

Hi,

1. During discovery, does the MID Server attempt to use its own service account for authentication instead of the credentials configured in ServiceNow? If so, at what stage does it use the service account? - It will never use its service account on target system unless it is configured as one of the Windows / Linux Credentials

2. Can the MID Server service account be a domain user with local administrator privileges on the MID Server host? - Yes

3. Does the MID Server service account log in to the target systems during the discovery process? - MID Server runs commands in target system like WMI, Powershell, SSH commands

Thank you,

Palani

[Harish Bainsla]

Hi @SK Chand Basha 

1. No, during discovery, the MID Server does not use its own Windows service account to authenticate to target systems. Instead, it uses credentials stored in the ServiceNow instance, which are associated with Discovery Credentials (found under Discovery > Credentials).

2.Yes, it is a common best practice to run the MID Server Windows service using a domain user account that has local administrator privileges on the host machine.

3.No, the MID Server service account does not log in to the target systems.

The MID Server only executes probes/scripts using the credentials provided in ServiceNow

for more learning ITOM Follow bellow channel.

https://youtu.be/-5QkJ4B300c?si=iLm8Bh8NRDxRuNc8

if my answer helps you mark helpful and accept solution.