topic Re: Agentless User-Id integration in General Topics

Agentless User-Id integration

Doyenadmin — Tue, 05 Dec 2023 08:12:24 GMT

Dear Team,

I will be integrating User-id agentless method, can i integrate with multiple AD servers to achieve this or is there some challenges to integrate agentless with multiple ad servers?

regards,

Doyen Admin

Re: Agentless User-Id integration

reaper — Tue, 05 Dec 2023 08:48:37 GMT

no issue at all

there are a few prerequisites:

make sure your mgmt interface has your internal domain name set in Device > setup > management

use your internal DNS servers in the DNS config of the mgmt interface Device > Setup > Services

also add NTP servers and make sure your system clock is accurate

then create a kerberos profile in Device > Server Profiles > Kerberos

now complete the agentless config in Device > User Identification > User Mapping > User-ID Agent Setup

then you can add all your ADs in Device > User Identification > User Mapping > Server Monitoring

You'll want to use WinRM as WMI is going to be patched to death on the AD

hope this helps

Re: Agentless User-Id integration

Doyenadmin — Tue, 05 Dec 2023 10:04:50 GMT

Its a windows server, can i do it with WMI ? if not then what challenges i will be facing, please give input on this as well.

Re: Agentless User-Id integration

reaper — Tue, 05 Dec 2023 13:05:22 GMT

you can, but you will need to configure your windows server to accept WMI as microsoft launched a bunch of patches that made WMI nearly impossible to use

WinRM over http runs out of the box and over https you need to add a certificate. So, far less challenging than WMI