Application Insights die Active Directory without Agent

Hi All,

Curently I am facing a serious problem with getting Windows Domain Controllers Into SolarWinds.

In the Description of the SolarWinds Agent is written that the Agent "just" runs with the "Local System" Account , which ia quite sufficent.

Unfortunatley , this a quite big Security breach since everyone who can write a Service Check, will BE able to elevate him self as Domain Admin or Enterprise Admin.

When we try to Run everything over WMI , the SAM / Appinsight for AD is not operational due some curios Bugs Like Not getting the DNS Server Service oder identifiying the ADWS Service correct.

So is there a Safe and easy way to get AD Insights/ Domain Controller Into SolarWinds without Handing out a golden Key ?

Find more posts tagged with

Agent

appinsight for active directory

Accepted answers

All comments

christopher.t.jones123

Just to ensure I understand clearly when you poll via an agent it finds the DNS and ADWS services correctly, but when you use WMI it does not?

vnematthias

Yes, that's correct.

When the agent is installed, an we are try to poll over the Agent, all services are found.
When we try WMI polling, it's not working.
Unfortunately, since the Agent service is running as Local System, it's a to big security concern when its happening on a Domain Controller.

christopher.t.jones123

given that I would imagine that the credential you are using for WMI is lacking some permissions have you looked at this article?

Success Center- How to create a non-administrator user for SAM polling

serena

christopher.t.jones123 wrote:
given that I would imagine that the credential you are using for WMI is lacking some permissions have you looked at this article?
Success Center- How to create a non-administrator user for SAM polling

An agent is by no means necessary for AppInsight for Active Directory to work. if it's not working - have you filed a support case with us yet? Submit a Ticket | SolarWinds Customer Portal