Techzone
© GHIT ApS
DomainScan Server Monitoring
 
   
DomainScan (Pro) and Windows Vista / Server 2008
Tech doc #8

Revision v1.11

Last Update
June 9 2008

Published
July 29 2007

Affected versions
All




Windows Vista and Windows Server 2008 is supported by DomainScan Pro right out of the box.

However due to security changes in Windows Vista and Windows Server 2008, one may have problems monitoring Windows Vista and Windows Server 2008 based devices, which is addressed in this document.

Security warning

The information in this document is of a general nature, and is not specific to DomainScan.

Therefore, opening Windows Vista and Windows Server 2008 for DomainScan Pro will also open Windows Vista and Windows Server 2008 for other programs, so it is not recommended to follow these instructions in an unsafe network environment.

Installation up

The installation of DomainScan Pro is normal in comparison with installation on earlier versions of Windows.

Run the installation file, with privileges that allows you to install programs and services (most likely Administrator privileges), and perform a normal installation.

If the installation file has been downloaded from the Internet, Windows Vista and Windows Server 2008 may warn you that

"An unidentified program wants access to your computer"

Click Allow to continue the setup.


Client up

DomainScan Pro Client must run with administrative rights on Windows Vista and Windows Server 2008. Otherwise it will not start.

To do so, right click on the DomainScan Pro icon and select Run as administrator, and select Allow if Windows Vista and Windows Server 2008 asks for confirmation.

Tip: Due to the fact that DomainScan Pro runs with administrative privileges, so will programs that are started by DomainScan. Therefore, one can avoid the UAC popping up all the time, simply by launching the commonly used [link]tools from within DomainScan.

Note: If one is running DomainScan Pro Client on a remote device, and DomainScan Pro Service is installed on a Windows Vista and Windows Server 2008 based device, then DomainScan Pro cannot access the registry, and will therefore default to a read-only connection.


Scanning engine (Services) up

As in all other editions of Windows, DomainScan Pro must be set to run with privileges that allow DomainScan Pro to access both the local device, but also access other devices on the network.

However, the default Windows Vista and Windows Server 2008 installation will place Windows Vista and Windows Server 2008 in a highly secured mode, which will prevent DomainScan Pro (and any other program) from accessing Windows Vista remotely.

Therefore, one must lower the fences in Windows Vista and Windows Server 2008 in order for DomainScan Pro to be able to monitor:

Windows Vista

1) Open Network and sharing center
2) Click Customize
3) Change network to Private Network
4) In Windows Firewall: Enable File Sharing
5) In Windows Firewall: Enable Network Discovery

Finally, one must enable a true administrator account, that is, one that also enables remote access.

Because, by default, normal user accounts cannot be used to access Windows Vista from a remote device (for instance, one cannot access the default shares, ie. c$, with a normal account).

The easiest way to allow full remote access to Windows Vista is by enabling the administrator account (with a properly secure password), and then use this account to log into Windows Vista.

Note: This is not needed if Windows Vista is a member of a domain, due to the fact that the Domain Administrator group has the necessary security rights to access the computer

Windows Server 2008

1) Open Network and sharing center
2) Click Customize'
3) Change network to Private Network
4) In Windows Firewall: Enable File and Printer Sharing
5) In Windows Firewall: Enable Network Discovery
6) In Windows Firewall: Enable Windows Management Instrumentation (WMI)


  2003 - 2018 GH Software aka GHIT ApS. Contact