Skip to main content
Question

FreshService Discovery Probe Permissions

  • June 24, 2021
  • 1 reply
  • 445 views
H
Apprentice

Hi,

Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

I tried this guide but couldn’t find a working combination.

    1 reply

    W
    Community Debut
    • WarrenC
    • Community Debut
    • September 15, 2021

    Hi,

    Has anyone found a way of restricting permissions for the Discovery Probe to access WMI resources on Windows Machines in the IP Scope without assigning full local administrator access?

    I tried this guide but couldn’t find a working combination.

     

    I wrote a script to do just this very thing.  Just specify the AD group variable and the DCOM permissions, WMI permissions, Local Group Membership, and Service Control Manager permissions all get automagically configured.  Depending on how UAC is configured in your environment, you’ll likely need to run the script interactively on the server in an elevated Powershell instance.

     

    https://github.com/warrentc3/AzureO365Automation/blob/3cd712dc73cf5b384f658f110ce66374f414915a/Set-WindowsRemoteMonitoringPermissions.ps1

      Terms of UseAccessibility statement