WinRM for Node polling (least privilege planning)

tdowns

Hello - I need to get our Windows credentials to a place of least privilege (remove from Domain Admins etc.).   I think that I can do this with service account/groups and GPO.  My question is: Can I replace WMI Windows server polling with WinRM?   or do I need to use WMI for NPM and WinRM for SAM?

marcrobinson

WMI for NPM/SAM/server metrics. WinRM for SAM application monitoring. I wish they would swap WinRM in for WMI overall, but I believe there are some pain points to that approach. 

Use WinRM for application monitor polling in SAM (solarwinds.com)

you can create a least privileged account to use for WMI polling. It can be done, but Microsoft has not made the permissions easy to uncover, especially between OS versions. 

WMI requirements for SolarWinds accounts

Tips for creating a non-administrator user for SAM application monitor polling to aid in troubleshooting by SolarWinds Support

Create your script, test it, and deploy it via your favorite method. 

Last method, run screaming from this conversation, and use one of the following:  go back to admin accounts, agents, snmp (still has not been completely deprecated in windows!), or some sort of evil powershell scripts and build everything from scratch. Please do not do the last two options, just don't. Not that admin accounts are good... Good luck and may the blue screens avoid you!