How do you add standalone servers (no Domain membership) to Orion/NPM?

Salutations,

We've just started using Orion to monitor our network and we've run into a bit of a snag. When adding nodes to the system, it always asks for a Domain username and password. The problem is that we have several servers that have no Domain membership, so all the logons are local. How do we authenticate to those machines to add them for monitoring?

Find more posts tagged with

nodes

network_monitoring

standalone

network_management

npm

Accepted answers

All comments

rob.hock

Hi Brian, you should be able to just use a local account for polling. When configuring WMI polling, just enter the username with no domain prefix:

12-30-2013 9-37-00 AM.png

bbrehart

It's true that it will discover them, but not using WMI. Any way to get this functionality?

aLTeReGo

Have you considered using just a period as the username in the ".\username" format? That will force Windows to assume the username is a local credential.

bbrehart

I had not and I'll try it and let you know what happens.

bbrehart

That did not work.

rharland2012

Perhaps you could enable SNMP on these standalone servers and set up communities, etc.

solaradmin

I just did this in my lab, used servername\administrator as username. Worked fine.

I do not have a firewall on the server I used for testing.

aLTeReGo

This sounds like a permissions or firewall issue. Ensure that you can connect to that host from the Orion server via WMI using those same credentials with wbemtest.exe

LGarvin

There are also Local Security Policy settings that can interfere with the ability to authenticate remote accounts for WMI.

In Security Settings \ Local Policies \ Security Options check these settings.

Network access: Do not allow storage of passwords and credentails for network authentication must be DISABLED.
Network access: Sharing and security model for local accounts must be set to CLASSIC.

Typically we see these settings configured via Group Policy, but since these are standalone non-domain member systems, and virtual machines, it's possible these settings were 'cloned'.