Agentless User-Id integration

[Doyenadmin]

Dear Team,

I will be integrating User-id agentless method, can i integrate with multiple AD servers to achieve this or is there some challenges to integrate agentless with multiple ad servers?

regards,

Doyen Admin

[reaper · Accepted solution]

no issue at all

there are a few prerequisites:

make sure your mgmt interface has your internal domain name set in Device > setup > management

use your internal DNS servers in the DNS config of the mgmt interface Device > Setup > Services

also add NTP servers and make sure your system clock is accurate

then create a kerberos profile in Device > Server Profiles > Kerberos

now complete the agentless config in Device > User Identification > User Mapping > User-ID Agent Setup

then you can add all your ADs in Device > User Identification > User Mapping > Server Monitoring

You'll want to use WinRM as WMI is going to be patched to death on the AD

hope this helps

[Doyenadmin]

Its a windows server, can i do it with WMI ? if not then what challenges i will be facing, please give input on this as well.

[reaper]

you can, but you will need to configure your windows server to accept WMI as microsoft launched a bunch of patches that made WMI nearly impossible to use

WinRM over http runs out of the box and over https you need to add a certificate. So, far less challenging than WMI