Required Permission to Run Remote Execution Inventories Against Windows Devices

<< Click to Display Table of Contents >>

RayVentory Scan Engine > 12.6 u4 > User Guide > Appendix I: Prerequisites Inventory Methods > Remote Execution Inventory for Windows 

Required Permission to Run Remote Execution Inventories Against Windows Devices

All Remote Execution methods need administrative rights on the target machine. Furthermore, there are some method specific prerequisites:

 

ServiceManager/SMB local copy

Rights to create and start a temporary service on the target machine

SMB access (access to administrative share ADMIN$ on the target machine)

Disabled Remote UAC on the target device (only when the target device is not in the domain)

 

WMI/SMB local copy

Rights to execute remote commands via WMI

SMB access (access to administrative share AMIN$ on the target machine)

Disabled Remote UAC on target device (only when the target device is not in the domain)

 

ServiceManager/HTTP(S)

Rights to create and start a temporary service on the target machine

SMB access (access to a configured utility share)

Accessible RayVentory Scan Engine HTTP(S) service (default port 591

The target device needs to have a domain trust relationship with the RayVentory Scan Engine device

 

ServiceManager/SMB

Rights to create and start a temporary service on the target machine

SMB access (access to a configured utility share)

SMB access (access to a configured upload location)

Target device needs to have a domain trust relationship with the RayVentory Scan Engine device

 

WMI/HTTP(S)

Rights to execute the remote commands via WMI

SMB access (access to a configured utility share)

Accessible RayVentory Scan Engine HTTP(S) service (default port 591)

Disabled Remote UAC on the target device (only when the target device is not in the domain)

 

WMI/SMB

Rights to execute remote commands via WMI

SMB access (access to a configured utility share)

SMB access (access to a configured upload location)

Disabled Remote UAC on the target device (only when the target device is not in the domain)