Visit Freshworks.com Visit Freshworks
Question

FreshService Discovery Probe Permissions

  • 24 June 2021
  • 1 reply
  • 355 views
H
Rank

Hi,

Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

I tried this guide but couldn’t find a working combination.

1 reply

W
Rank

Hi,

Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

I tried this guide but couldn’t find a working combination.

 

I wrote a script to do just this very thing.  Just specify the AD group variable and the DCOM permissions, WMI permissions, Local Group Membership, and Service Control Manager permissions all get automagically configured.  Depending on how UAC is configured in your environment, you’ll likely need to run the script interactively on the server in an elevated Powershell instance.

 

https://github.com/warrentc3/AzureO365Automation/blob/3cd712dc73cf5b384f658f110ce66374f414915a/Set-WindowsRemoteMonitoringPermissions.ps1

Reply


Terms of UseCookie settings