Hello there, my Question is relativ straight forward.
At out firm we are in disagreement if the Windows-Agent should be installed on a Active Directory Controller and because of this disagreement, we are only pinging the host at this point in time.
Some colleagues however would rather use winrm for management of the host.
Is there some form of implementation or third-party extension that would allow for that?
Some feedback regarding the use of the monitoring-agent vs. snmp or winrm would also be nice to evaluate if I should continue to push for the installation of the agent or the use of snmp / winrm.
Thanks for any Feedback ^^
If you want a big security hole in your system then you use winrm.
The only known problem of the agent where local privilege escalation problems.
That means you need already someone on your machine with an valid account.
The actual version solved this now.
WinRM or other way to access local information, do open remote access problems if not completely secured.
SNMP on Windows don’t provide useful information.
Thanks for your answer ^^
Would you mind specifying the exact version number that fixed the local privilege escalation?
Starting with 2.2.0p24 this should be fixed.
2.2.0p24 does not seem to be availabe in the enterprise version according to the werks.
Last one was 2.2.0p23 and next one seems to be 2.2.0p26.
Can you help me out here? Not quite sure if enterprise has a slower udate cycle or something.
2.2.0p25 is the actual version
The werks display is a little bit broken i think.