Windows Inventory

<< Click to Display Table of Contents >>

RayVentory Scan Engine > 12.6 u4 > User Guide > Advanced Topics > Inventory Methods Overview 

Windows Inventory

These inventory methods gather basic hard- and software inventory data on the target device from the Windows OS. The inventory methods operate on targets of the type Device.

 

Zero-Touch Inventory by WMI / WINAPI on Windows

Description

The Zero-Touch OS / platform inventory for Windows hosts using WMI queries. Using WINAPI based Windows-Registry queries as a fallback for earlier Windows versions that do not provide the StdReg-WMI-Provider.

 

Usage and Recommendation

This is the least invasive inventory method for Windows.. The only requirements are sufficient privileges to run all required WMI queries to RayVentory Scan Engine. This inventory method can be customized to gather additional data, available via WMI or from the Windows registry.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oZero-touch

oWMI

Prerequisites:

oNone

 

Remote-Execution Inventory by Service Manager / SMB Local Files on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by a temporary local copy of NDTRACK pushed via SMB, executed by a temporary service, and inventory copied via SMB.

RayVentory Scan Engine mounts the target's built-in share ADMIN$, copies the NDTRACK files to a temporary subdirectory of ADMIN$\Temp\, and starts the NDTRACK via a temporary service. Eventually, the resulting inventory file is copied to the RayVentory Scan Engine host. Later, the temporary service and the temporary directory are deleted.

 

Usage and Recommendation

Use this as an alternative to the zero-touch inventory on Windows. This inventory method uses NDTRACK.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oAccess to the File System

oRemote execution

oWindows Service Manager

Prerequisites:

oNone

 

Remote-Execution Inventory by WMI / SMB Local Files on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by a temporary local copy of NDTRACK pushed via SMB, executed via WMI, and inventory copied via SMB.

RayVentory Scan Engine mounts the target's built-in share ADMIN$, copies the NDTRACK files to a temporary subdirectory of ADMIN$\Temp\, and starts the NDTRACK by via a temporary service. Eventually, the resulting inventory file is copied to the RayVentory Scan Engine host. Later, the temporary directory is deleted.

 

Usage and Recommendation

Use this as an alternative to the zero-touch inventory on Windows. This inventory method uses NDTRACK.

 

Technical details

Used credential type:

oWindows

Required capabilities:

oAccess to the File System

oRemote execution

oWMI

Prerequisites:

oNone

 

Remote-Execution Inventory by Service Manager Upload HTTP(S) on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by NDTRACK, loaded via SMB from the UNC path to the RayVentory Scan Engine utilities, executed by a temporary service, and inventory uploaded via HTTP(S).

RayVentory Scan Engine starts a temporary service that references the service executable, located on the RayVentory Scan Engine utilities share, which starts the NDTRACK, located on the same share. NDTRACK will upload its results to the RayVentory Scan Engine HTTP Service. Later, the temporary service is deleted.

 

Usage and Recommendation

Use this as an alternative to the zero-touch inventory on Windows. This inventory method uses NDTRACK.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oRemote execution

oWindows Service Manager

Prerequisites:

oConfigured and reachable RayVentory Scan Engine HTTP Service

 

Remote-Execution by Service Manager Upload SMB on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by NDTRACK, loaded via SMB from the UNC path to the RayVentory Scan Engine utilities, executed by a temporary service, and inventory uploaded via SMB to the UNC path for RayVentory Scan Engine inventories.

RayVentory Scan Engine starts a temporary service that references the service executable located on the RayVentory Scan Engine utilities share which starts the NDTRACK, located on the same share. NDTRACK will upload its results to the RayVentory Scan Engine inventories share. Later, the temporary service is deleted.

Usage and Recommendation

Use this as an alternative to the zero-touch ORATRACK inventory. You may need this if remote connections to the database are blocked by the host firewall and local connections are allowed.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oRemote execution

oUpload to the SMB shares

oWindows Service Manager

Prerequisites:

oSMB share to receive inventory files

oThe setting Save inventory results from target devices on the following UNC share must be configured in the Remote execution section of the Settings screen

 

Remote-Execution by WMI Upload HTTP(S) on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by NDTRACK, loaded via SMB from the UNC path to the RayVentory Scan Engine utilities, executed via WMI, and inventory uploaded via HTTP(S).

RayVentory Scan Engine starts the NDTRACK, located on the RayVentory Scan Engine utilities share via WMI (Win32_Process). NDTRACK will upload its results to the RVP HTTP Service.

 

Usage and Recommendation

Use this as an alternative to the zero-touch ORATRACK inventory. You may need this if remote connections to the DB are blocked by the host firewall and local connections are allowed.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oRemote execution

oWMI

Prerequisites:

oThe setting Execute RayVentory Scan Engine Utiliites from the follwing UNC shared path on target device must be configured in the Remote execution section of the Settings screen

oThe scan utilities must be present on the shared location (for example installed via the Install Scan Utilities button in the Remote execution section of the Settings screen)

oA configured and reachable RayVentory Scan Engine HTTP Service

 

Remote-Execution by WMI Upload SMB on Windows

Description

Remote-Execution OS / platform inventory for Windows hosts by NDTRACK, loaded via SMB from the UNC path to the RayVentory Scan Engine utilities, executed via WMI, and inventory uploaded via SMB to the UNC path for RayVentory Scan Engine inventories.

RayVentory Scan Engine starts the NDTRACK, located on the RayVentory Scan Engine utilities share, via WMI (Win32_Process). NDTRACK will upload its results to the RayVentory Scan Engine inventories share.

 

Usage and Recommendation

Use this as an alternative to the zero-touch ORATRACK inventory. You may need this if remote connections to the DB are blocked by the host firewall and local connections are allowed.

 

Technical Details

Used credential type:

oWindows

Required capabilities:

oRemote execution

oUpload to the SMB shares

oWMI

Prerequisites:

oThe SMB share to receive inventory files

oThe setting Execute RayVentory Scan Engine Utiliites from the follwing UNC shared path on target device must be configured in the Remote execution section of the Settings screen

oThe scan utilities must be present on the shared location (for example installed via the Install Scan Utilities button in the Remote execution section of the Settings screen)

oThe setting Save inventory results from target devices on the following UNC share must be configured in the Remote execution section of the Settings screen