Question

FreshService Discovery Probe Permissions

  • 24 June 2021
  • 1 reply
  • 68 views

Hi,

Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

I tried this guide but couldn’t find a working combination.


1 reply

Hi,

Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

I tried this guide but couldn’t find a working combination.

 

I wrote a script to do just this very thing.  Just specify the AD group variable and the DCOM permissions, WMI permissions, Local Group Membership, and Service Control Manager permissions all get automagically configured.  Depending on how UAC is configured in your environment, you’ll likely need to run the script interactively on the server in an elevated Powershell instance.

 

https://github.com/warrentc3/AzureO365Automation/blob/3cd712dc73cf5b384f658f110ce66374f414915a/Set-WindowsRemoteMonitoringPermissions.ps1

Reply