Important Notice: On February 29th, this community was put into read-only mode. All existing posts will remain but customers are unable to add new posts or comment on existing. Please feel to join our Community Discord for any questions and discussions.

PDQ Inventory & non-domain machines

Brandon Carder

November 03, 2015 15:25

Hi guys,

I've successfully added several machines that are apart of a domain that is not synced with PDQ Inventory. I've added them successfully with working credentials, but the inventory shows "access denied to service manager".

I have a feeling it's trying to scan these machines with our corporate domain credentials but I can't find out how to create a scan profile with the other domain credentials.

Comments

1 comment

Shane Corellian
November 03, 2015 19:08

Hi Brandon,

Scan Profiles aren't attached to credentials. Each computer can have a specific set of credentials selected as the Scan User but not Scan Profiles.

If you are seeing Access is Denied to the Service Manager" the chances are pretty good that you have the correct credentials however this error often occurs after the initial authentication (connecting from the console to the target) has succeeded but then craps out connecting to the Service Manager. This is why it can be such a pain to troubleshoot.

First thing I would try is to create a new set of credentials in Inventory. Use the same user account BUT change the domain from either FQDN to short or vice versa.

For example, let's say you have a remote domain called southpark.local. The admin account you are using is called Randy.

Have two sets of credentials for Randy.

southpark.local\randy

southpark\randy

Sometimes the remote computers can't resolve one of the domain names (either fqdn or short). If this happens across all of the remote computers then you will want to create a Name Resolution policy (usually via GPO) that contains the appropriate suffixes to try.

0