CA PAM Account Discovery Windows

[Juan Cruz]

Good day:

I have 100 Windows devices, on some servers I can discover accounts, but on others I cannot.

What commands does CA PAM use to make account discovery in Windows "rcp, wmic, etc"?

Do I have to add exceptions in the Firewall or in the antivirus?


------------------------------
Consultant
Root Technologies
Mexico City
------------------------------

[Ralf Prigl]

Hi Juan, You didn't say what type of target application you are using. I assume it is either the Windows Remote target connector, or the Windows Proxy, and you are trying to discover local machines on remote hosts. This uses a WMI connection. If the connection is allowed, but the discovery fails, you should find some information in the Windows Event (Security) logs on why the listing of local users was denied.

[Juan Cruz]

Good day Ralf:

I am using:

• Windows Remote
• Domain account with privileges to discover accounts
• The account is the same that you discover on all devices
• Only in some windows it does discover but in others it doesn't

Can you give me an example of how WMI does or works in CA PAM?

I already checked the logs but it sent me a timeout.

------------------------------
Consultant
Root Technologies
Mexico City
------------------------------

[Juan Cruz]

I did the following tests:

1. Since CA PAM I cannot discover an account on the server.
2. From my physical machine I could discover accounts, with the following command "wmic /node:IP /user:"UserName" /password:"Password" useraccount list full".

------------------------------
Consultant
Root Technologies
Mexico City
------------------------------