6.1
Table Of Contents
- Application Discovery Manager User’s Guide
- Contents
- About This Book
- Architecture Overview
- Getting Started
- Managing ADM
- Groups
- Discovery
- Application Patterns
- Report
- Connectors
- Solver
- Index
VMware, Inc. 43
Chapter 5 Discovery
Forexample,MYDOMAIN\DOMAINUSER
8ClickOKtoreturntotheSecurityforRootwindow.
9EnsurethatthenewlyaddedusernameishighlightedintheGroupsorusernameslist.
10 ClickAdvanced.TheAdvancedSecuritySettingsforRoot(Rootinsomesystems)windowappears.
11 Selectthenewlycreatedusernamefromthe
listandclickEdit(View/Editinsomesystems).
12 SetApplyontotoThisnamespaceandsubnamespacesfromthedrop‐downmenu.
13 SelectRemoteEnable fromthePermissionslistandsetittoAllow.
14 ClearallothercheckboxesandclickOK.
15 ContinuetoclickOKuntilallofthedialogboxesareclosedandthenclosetheWindowsManagement
Infrastructure(WMI)window.
16 ClickYesifyouencounterthefollowingmessage:
Saveconsolesettingstowinmgmt?
Setting Execute Permissions for Used Executables
ADM6.0andlaterversionsdiscovermoreinformationthanpreviousversions.Todiscoverthisadditional
information,foreachmanagedserver,oneachofthesefiles(cmd.exe,cscript.exe,
andnetstat.exelocatedin
thesystem32folderwhereWindowsisinstalled),performthefollowingsteps:
1Right‐clickthefileandclickProperties.ThePropertiesdialogboxappears.
2 SelecttheSecuritytab.
3FromtheGrouporusernameslist,selecttheuserwhowillbeperformingtheDetailDiscovery.
4 SelectRead&Executeand
ReadfromthePermissionsforuserlist,tograntthenecessarypermissions.
5ClickOKtoconfirm.
Telnet
TheTelnetprotocolisoneoftheoldestandmostcommonprotocolsforremoteshellaccess.However,inrecent
yearsitisreplacedinmanycaseswiththeSSHprotocol,whichencryptsitsnetworktrafficandisconsidered
moresecure.Still,somenetworkdevices,suchasnetworkroutersandswitches,support
remoteaccess
throughTelnetexclusively.Additionally,MicrosoftWindowshasabuilt‐inTelnetserver,anddoesnothavea
similarSSHserver.Therefore,TelnetisusedbyADMforDetailDiscovery,similarlytotheuseofSSH.
Detail Discovery with Telnet
Ingeneral,DetailDiscoverywithTelnetissupportedbyanymachinerunningaTelnetserverthat:
Supportstheterminaltypeknownasdumb.
Eitherallowssimplecommand‐lineauthenticationoracceptsNTLMauthentication.
Telnet Server Deployment Recommendations
ThissectionincludesTelnetrecommendationsfordeployment.
Firewall Settings
TelnetqueriesarenormallyperformedtoTCPport23ofthetargetdevice.Ifthereisafirewallbetweenthe
ADMapplianceandthemonitorednetwork,thisportneedstobeopenforconnectionsinitiatedbytheADM
appliance.Specifically,inWindowsXPPro
SP2,theinternalfirewallmustbeturnedoffforTelnetdiscovery
totakeplace.
N
OTETypetheusernameoftheuserwhowillbeperformingtheDetailDiscovery.