Support Center
Knowledgebase Contact Support
Search our knowledgebase

Windows domain scanning requirements

Last updated on June 22 2015

There are two main ways you can scan a Windows computer: with a scanning agent or without a scanning agent. Both options return the same data, but the scanning agent allows for offsite scanning and is immune to credential and firewall issues. Outlined below are the requirements for scanning Windows domain computers with or without an agent.

Regardless of which option you choose, Lansweeper will pull most Windows computer data from WMI (Windows Management Instrumentation), a framework built into Windows computers. Some data is pulled directly from the client machine's registry as well.

Requirements for scanning without a scanning agent

To scan a Windows domain computer without an agent, the computer must meet the following requirements:

  • Architecture
    32-bit or 64-bit
  • Operating system
    Windows 2000 or any more recent Windows operating system
  • Firewall
    As Lansweeper pulls most Windows computer data from WMI (Windows Management Instrumentation), you need to ensure that WMI traffic is allowed through your client machine's and other firewalls.
    By default, Windows sends WMI data over random ports, as explained in this Microsoft knowledge base article. You need to either:
    • Configure your firewalls in such a way that *all* WMI traffic (over random ports) is allowed. Windows Firewall includes a remote administration exception that you can enable to allow WMI traffic, as explained in this knowledge base article. For third-party firewalls, you'll need to consult your firewall documentation.
    Configure a fixed WMI port and allow traffic through that port. Setting up a fixed port is supported by Windows Vista and more recent operating systems.
    • If you are unable to allow WMI traffic through your firewalls, scan your computers with the LsPush scanning agent instead, which does not require firewall reconfiguration.
  • Credentials
    You must provide Lansweeper with a username/password combination that has administrative privileges on the client machine and, for scanning Active Directory information, read-only access to Active Directory.
  • Installed software
    No Lansweeper software is required on the client machine you're scanning. You do need to ensure that the Windows Management Instrumentation service is running on the machine, as this is what Lansweeper will use to retrieve data, but this service should already be running by default.

Requirements for scanning with a scanning agent

To scan a Windows domain computer with an agent, the computer must meet the following requirements:

  • Architecture
    32-bit or 64-bit
  • Operating system
    Windows 2000 or any more recent Windows operating system
  • Firewall
    No firewall reconfiguration required!
  • Credentials
    No credentials required!
  • Installed software
    No Lansweeper software is required on the client machine you're scanning. You do need to ensure that the Windows Management Instrumentation service is running on the machine, as this is what Lansweeper will use to retrieve data, but this service should already be running by default.