Using JEA - Just Enough Administration for Discovery

[Hanumant Madan1]

Hello team,

We are trying to discover Windows servers in restricted security zone into ServiceNow CMDB.

We have been trying to setup JEA along with Windows team but without luck so far.

We have followed all the prerequisite documents and tested this using PowerShell test command but we see error still on Powershell connection.

Has anyone done this config successfully and discovered the servers?

Would appreciate step by step procedure followed.

Look forward for your response.

Regards,

Hanumant

[Anmol0496]

Hi @Hanumant Madan1 

Attaching this thread for your reference please have a look:

Community : https://www.servicenow.com/community/itom-forum/just-enough-administration-jea-for-windows-discovery...

Product docs : https://docs.servicenow.com/en-US/bundle/vancouver-it-operations-management/page/product/discovery/c...

Please mark my answer helpful, if its useful to you

Thanks and Regards,

Anmol 

[Hanumant Madan1]

Hi Anmol,

I have gone through this documents already as well.

One question, is this configuration needs to be done on AD servers?

Regards,

Hanumant

[Anmol0496]

Hi @Hanumant Madan1 

Answer to your question is probably no. A JEA endpoint is registered on a system by creating and registering a PowerShell session configuration file. Below are the requirements  :

Requirements for Discovery with JEA

• A ServiceNow instance running on the Rome release or later.
• The MID Server and target server must be part of a Windows domain.
• The JEA credentials with non-administrator rights must be domain level credentials.
• PowerShell 5.0 or Windows Management Framework 5.1 must be installed on the target Windows machines.
• PowerShell Remoting must be enabled on the target Windows machines.

Thanks and Regards

Anmol

[Hanumant Madan1]

Hi Anmol,

We do have all the prerequisites set and met.

We are still facing connection error.

Regards,

Hanumant