User`s guide

VMware, Inc. 43
Chapter 5 Discovery
8ClickOKtoreturntotheSecurityforRootwindow.
9EnsurethatthenewlyaddedusernameishighlightedintheGroupsorusernameslist.
10 ClickAdvanced.TheAdvancedSecuritySettingsforRoot(Rootinsomesystems)windowappears.
11 SelectthenewlycreatedusernamefromthelistandclickEdit(View/Editinsomesystems).
12 SetApplyontotoThisnamespaceandsubnamespacesfromthedrop‐downmenu.
13 SelectRemoteEnable fromthePermissionslistandsetittoAllow.
14 ClearallothercheckboxesandclickOK.
15 ContinuetoclickOKuntilallofthedialogboxesareclosedandthenclosetheWindowsManagement
Infrastructure(WMI)window.
16 ClickYesifyouencounterthefollowingmessage:
Save console settings to winmgmt?
Setting Execute Permissions for Used Executables
ADM6.0andlaterversionsdiscovermoreinformationthanpreviousversions.Setexecutepermissionsfor
eachmanagedserver,oneachofthesefiles(cmd.exe,cscript.exe,andnetstat.exelocatedinthesystem32folder
whereWindowsisinstalled)todiscovertheadditionalinformation.
To set execute permissions
1Right‐clickthefileandclickProperties.ThePropertiesdialog
boxappears.
2 SelecttheSecuritytab.
3FromtheGrouporusernameslist,selecttheuserwhowillbeperformingtheDetailDiscovery.
4 SelectRead&ExecuteandReadfromthePermissionsforuserlist,tograntthenecessarypermissions.
5ClickOKtoconfirm.
Telnet
TheTelnetprotocolisoneoftheoldestandmostcommonprotocolsforremoteshellaccess.However,inrecent
yearsitisreplacedinmanycaseswiththeSSHprotocol,whichencryptsitsnetworktrafficandisconsidered
moresecure.Still,somenetworkdevices,suchasnetworkroutersandswitches,support
remoteaccess
throughTelnetexclusively.Additionally,MicrosoftWindowshasabuilt‐inTelnetserver,anddoesnothavea
similarSSHserver.Therefore,TelnetisusedbyADMforDetailDiscovery,similarlytotheuseofSSH.
Detail Discovery with Telnet
Ingeneral,DetailDiscoverywithTelnetissupportedbyanymachinerunningaTelnetserverthat:
 Supportstheterminaltypeknownasdumb.
 Eitherallowssimplecommand‐lineauthenticationoracceptsNTLMauthentication.
Telnet Server Deployment Recommendations
ThissectionincludesTelnetrecommendationsfordeployment.
Firewall Settings
TelnetqueriesarenormallyperformedtoTCPport23ofthetargetdevice.Ifthereisafirewallbetweenthe
ADMapplianceandthemonitorednetwork,thisportneedstobeopenforconnectionsinitiatedbytheADM
appliance.Specifically,inWindowsXPPro
SP2,theinternalfirewallmustbeturnedoffforTelnetdiscovery
totakeplace.