Discovery authentication failure - WMIRunner

[Scott90]

Hello all,

I’m working on fixing a WMIRunner authentication error.  I’ve verified that the password for the credential is correct and it is in the domain admins group.  I use the "Test credential" link and I get an “Authentication Failed” error. 

I’ve logged onto the mid server and ran the following command successfully:

wmic /node:"10.10.10.10" /user:"someDomain\someUser" /password:"****" path win32_operatingsystem

I also ran the following from a PowerShell session successfully:

gwmi win32_operatingsystem -computer 10.10.10.10 -credential 'someDomain\someUser'

Any ideas why I can run the commands from the MID server using the credentials that discovery uses successfully, but authentication fails when discovery tries to do this?

[Alex248]

Hi, Scott

1. Make sure that MID service(services.msc) on your MID server has been runned from account that you are using in Credentails table.

2. Also try to add MID Server service credentials

Please, let me know if it was useful for you.

[Scott90]

Hello,

Yes, the MID server service is running with an account that is listed in the credentials table.  However, the error referenced in my post is from a server in a different domain than the account running the MID server service.  In the credentials table, we do have an account added for the other domain.

There are several servers giving the same error and I have tested logging into each of them with the account in the credentials table and that works fine.  I've also ran those test commands against these servers from the MID server using the account from the credentials table and that works too.  It seems like the discovery process is not using the account in the credentials table though.

I thought the process used the account running the MID server service when attempting to access a machine and if that fails, the process would go to the credentials table and use accounts listed there.  Am I misunderstanding this? 

[Ryan Zulli]

Retype in the credential within SN - you can also remove any credential affinities for that particular IP address and have it scan all of them.

[Scott90]

We have cleared the credentials table and re-entered all of the credentials.  For the credential that should be used to access these servers, there aren't any affinities listed.