MAP toolkit: Credentials required

Return to the MAP Toolkit Getting Started Guide

In this phase, you will identify which credentials you will need for discovering computers in your environment as well as those required to gather the necessary information to support your goal. Most of the credentials required must have administrative rights to the computer being inventoried for the specific collector technology required.

Collector Technology Required:

Requirements:

WMI

Account Name and Passwords for Accounts with local computer administrative rights

The WMI collector is used to gather hardware, device, and software information from remote Windows-based computers. This collector technology is used for the following inventory scenarios and must be enabled on the remote target computers.

  • Windows computers
  • Active Devices and Users
  • Exchange Server
  • Forefront Endpoint Protection Server
  • Lync Server*
  • SQL Server*
  • SQL Server with Database Details*
  • Windows Azure Platform Migration
  • Oracle
  • Windows Volume Licensing
  • Client Access Tracking for Windows Server 2012
  • Client Access Tracking for SQL Server 2012
  • Client Access Tracking for Configuration Manager
  • Client Access Tracking for SharePoint Server 2013
  • Client Access Tracking for Remote Desktop Services

*This scenario uses a modified WMI collection query that returns a subset of the data gathered by the WMI collector in the other scenarios.

The Inventory and Assessment Wizard will not provide an option to enable WMI: You must enable it through Group Policy settings, logon scripts, or manually on each computer.

  • To connect remotely and perform the inventory, you must provide accounts that are members of the local Administrators group on the computer being inventoried.
  • For most networks, the network administrator will have a domain or local account that is a member of the local Administrators group on all the computers in the environment. These are the accounts you should enter on the Active Directory Credentials page in the Inventory and Assessment Wizard to perform the inventory.
  • By default, in Windows domain environments, the Domain Admins security group is added to the local Administrators group on a computer when it is joined to a domain.

 

SQL Server Authentication (Native and Windows)

Account Name and Passwords for Accounts with administrative rights to the SQL Server databases

The SQL Native and SQL Windows Collectors are the same except for the credentials used. They are used to collect additional in-depth SQL Server database information from remote Windows based computers. This collector technology is used for these inventory scenarios.

  • Lync Server
  • SQL Server with Database Details
  • Windows Azure Platform Migration

MAP can use either SQL Server Authentication or Windows Authentication to query the database engines. MAP refers to these methods as SQL Native and SQL Windows respectively. Although they are listed separately in the Inventory Wizard, you only need to provide administrator credentials for one.

SSH

Account Name and Passwords for Accounts with logon rights to the target computer. For Linux, the account must have rights to access HAL or dmidecode information.

The SSH collector is used to collect hardware and software information from remote Linux and HP-UX based computers. It is also used to gather device performance data for Linux computers. This collector technology is used for these inventory scenarios and must be enabled on the target computers.

  • Linux/UNIX computers
  • Oracle

Note: MAP cannot connect to your Linux computers if you use SSH Keys.

Oracle

Account Name and Passwords for Accounts with Oracle database administrative rights

The Oracle Collector is used to collect Oracle SQL Server schema information from remote Windows, Linux, and HP-UX based computers. This collector technology is used for this inventory scenario.

  • Oracle

The 64-bit Oracle client must be installed on the computer that is running MAP in order to connect directly to the database engine and collect the schema information. If the 64-bit Oracle client is not installed MAP will still collect some basic information about the Oracle server from WMI or SSH.  MAP will not collect schema information if the 32-bit Oracle client is installed.

VMware

Account Name and Passwords for Accounts with local computer administrative rights

The VMware Collector is used to collect hardware, device, and software information from remote VMware computers. This collector technology is used for this inventory scenario.

  • VMware computers

Powershell

Account Name and Passwords for Accounts with local computer administrative rights.

The PowerShell Collector is used to collect software information from remote Windows based computers. PowerShell 2.0 or higher must be installed and remote PowerShell must be enabled on the target computers. This collector technology is used for these inventory scenarios.

  • Forefront Endpoint Protection Server*
  • Lync Server*
  • Windows Volume Licensing
  • Software ID (SWID) Tags
  • Exchange Server
  • Client Access Tracking for Remote Desktop Services

*Administrator rights are additionally required for either the Lync server or the ConfigMgr server with FEP components that you are attempting to collect from.

Active Directory

Account Name and Password for an Account that is domain-authenticated.

For Exchange, the Account must have Exchange Admin or Domain Admin privileges.

The Active Directory Collector is used to collect device and user information from Active Directory Domain Services. This collector technology is used for these inventory scenarios.

  • Active Devices and Users
  • Exchange Server

Return to the MAP Toolkit Getting Started Guide