Windows credentials failing on some servers

[Rawel]

Hi There,

On few of our servers the Windows credentials are failing and we get error "Adding target to blacklist. No valid credential found for type [Windows]".

When we check credentials it says "Authentication Failed", but we have checked the event logs and can see that the login happens on the target server.

We are able to discover the same server from our Dev environment with same credentials.

We are able to run the WMI commands from mid server using PS and are getting the desired output.

We have tried adding the target server into trusted hosts as well, but no luck.

Anything else we can try here?

Thanks in Advance !

[Prasad Pagar]

Hi @Rawel 

Have you made sure you added correct windows credential in ServiceNow Cred repository and tested them against those hosts locally first?

Thank you
Prasad

[johnhardesty_wo]

So if your windows credentials works for some devices and not others

1 - is the account on the servers that are not getting discovered 

2 - Can you explicitly test the credential for those devices

3 - is there a firewall / network restriction on the ip subnets for the server that are unreachable

4 - are they all on the same windows domain

5 - are the ones that are not being discovered - domain controllers

[Anshu_Anand_]

I had face similar issue.

If you are able to discover the same device from DEV and not from other device.

Try to export xml of that credential from dev to target instance.

select correct mid server (in my case dev and test mid server were on different host)

check the mid server and test your credentials then.

In my case mid server was not reachable to that device. After adding firewall rules to allow traffic,

the device was discovered.

Hope this is helpful.

[Bobin]

Hi Rawel,

Apart from the WMI port 135, have you enabled the dynamic ports ranges: 49152-65535 for both TCP and UDP? RPC sets up the session on TCP 135, but will try to utilize a high port between 49152 & 65535.

Try it out if not already and do update.

Would be interesting to know the RC.

Thanks,

Bobin