Notification

Icon
Error

How do you scan your assets on your network? - What methods do you use?

Posted: Tuesday, June 25, 2019 8:48:11 PM(UTC)
OycAdmin

OycAdmin

Member Original PosterPosts: 1
0
Like
Hello all,

I just recently purchased a license for Lansweeper and am enjoying it so far. My intention is to make sure that I'm keeping it as secure as possible.

What are you scanning setups? Do you have Lansweeper on a server segmented off on its own network and maybe firewalled down to what you need?

For Windows environments with AD - do you have a Lansweeper AD account you use for the credentials to scan?

Any tips or input is welcome. I'd just like to have a discussion about how everyone uses Lansweepers scan and what security methods they employ.

Thanks.
CyberCitizen
#1CyberCitizen Member Posts: 266  
posted: 6/27/2019 1:14:18 AM(UTC)
We are running it on a vm server on the same network. We setup a separate domain admin account for Lansweeper.

The package share directory though we did a little different. That isn't on the Lansweeper server but a hidden $ share on our file server (Apps$).

We pointed Lansweepers (PackageShare) to this new location which has read and execute rights to all users. For the share username we are using a local user account .\lsshare so should it be discovered it doesn't really give them much access.

Deployments we are using SYSTEM or Scanning Credentials (Domain Admin) or the odd as logged on user.
MakeBug
#2MakeBug Member Posts: 56  
posted: 6/27/2019 3:39:14 PM(UTC)
We're running it on a vm server as well. The server is in the same network as the clients, so there is no real need for a firewall between them (we simply don't scan the clients from outside at the moment). The scanning user is an AD account without access to anything and has been added to the administrators group on each client (via GPO).

The Lansweeper-server also hosts the package-share for most of these locations, only some have their own shares on one of their local servers because the line between us and them isn't that great (China and the US for example). All users have full access to the share, to make sure noone finds and deletes any content, it's hidden with $. If someone still manages to delete/change something then A) we have a history of the folder changes so we can go after them and rip their head of and B) We have daily backups of the whole server so we can restore it within 5 minutes.
The deployment jobs use the scanning user, it's already a local admin on each client and the packageshare is public anyways so no need for an additional user there.

So far this setup has been more than successfull. It's working almost too well so my boss now expects all updates to be installed on about 90% of the environment within 2 weeks. This basically means I have only 2 weeks to organise every last one of our ~1500 clients (randomly distributed worldwide) d'oh!

Active Discussions

Lansweeper HP Warranty scan - broken for some products
by  M Redfern   Go to last post Go to first unread
Last post: Today at 12:30:44 PM(UTC)
Lansweeper Worked time
by  Imrane DESSAI  
Go to last post Go to first unread
Last post: Today at 7:14:40 AM(UTC)
Lansweeper Adding Owner/User information to Assets:All column report
by  ssmarr5   Go to last post Go to first unread
Last post: Today at 12:15:01 AM(UTC)
Lansweeper Send users email about low disk space
by  DontByteMe  
Go to last post Go to first unread
Last post: Yesterday at 10:02:43 PM(UTC)
Lansweeper Can reports be directed to a file server
by  RKCar   Go to last post Go to first unread
Last post: Yesterday at 9:40:18 PM(UTC)
Lansweeper Monitor Model- Generic PnP Monitor
by  Roger D.  
Go to last post Go to first unread
Last post: Yesterday at 7:22:01 PM(UTC)
Lansweeper Are Deleted Dashboard Tabs Retrievable?
by  Rob-CD   Go to last post Go to first unread
Last post: Yesterday at 4:04:45 PM(UTC)
Lansweeper Assets Not Seen in 90 Days not Automatically becoming Inactive
by  Rob-CD  
Go to last post Go to first unread
Last post: Yesterday at 4:00:00 PM(UTC)