on - edited on by
Nils
Learn how to use the LsPush scanning agent to scan Windows computers in a group policy.
Lansweeper includes several scanning methods to scan the assets in your network. You can scan the Linux, Unix, Mac and Windows computers, VMware servers and other devices in your network without installing any Lansweeper software on the machines you're scanning.
For Windows computers, however, you can choose to perform your scans with a scanning agent. Lansweeper's scanning agent is called LsPush. One of the ways it can be implemented is by using a scheduled task. LsPush is a small executable that scans the computer locally when run on a Windows computer. LsPush cannot and does not need to be installed on the computer you're scanning. The LsPush executable must simply be executed on the computer whenever you want to scan the machine. The LsPush scan results can be sent directly to your Lansweeper server for automatic processing or stored in a file that can be imported into your Lansweeper installation later on.
There are many ways to run LsPush on your machines. Any process that can run the LsPush executable, preferably with a parameter, can trigger LsPush scans of your machines. For instance, LsPush scans can be fully automated by integrating the scanning agent into logon scripts, group policies, or scheduled tasks.
This article explains how to scan Windows computers with the LsPush agent in a group policy and have the scan results automatically sent back to your Lansweeper server. This scanning approach allows you to scan your domain computers as soon as users log into them.
Scanning with LsPush in a group policy
To scan Windows computers with the LsPush scanning agent in a group policy, follow these steps:
-
On the machine hosting your Lansweeper installation, browse to
Program Files (x86)\Lansweeper\Clientand copy the LsPush executable contained within. - On one of the domain controllers in your domain, paste the LsPush executable into the
%logonserver%\netlogonfolder. -
For testing purposes, open Command Prompt on a computer you want to scan and run the command below, replacing
LansweeperServerwith the name of your Lansweeper scanning server, i.e. a server hosting the Lansweeper Server service.
This command triggers a local scan of the computer and sends the scan results directly to your Lansweeper server for import. After a short while, you will receive visual feedback in a pop-up window indicating whether the connection to the Lansweeper server succeeded. This test is just to confirm the command works prior to implementing it in a group policy."%logonserver%\netlogon\LsPush.exe" LansweeperServer /showresult
- Open Notepad and copy/paste the script below, replacing
LansweeperServerwith the name or IP address of the Lansweeper scanning server you want to send the LsPush data to. The "0" at the end of the script makes the script run asynchronously, so users don't have to wait for the LsPush scan to finish to be able to log into their computers.
Set WshShell = CreateObject("Wscript.Shell")
WshShell.run "%logonserver%\netlogon\LsPush.exe LansweeperServer",0 -
From the File menu, select Save As... and save the file with a name ending in the .vbs extension.
- On one of the domain controllers in your domain, open your Start menu and open Run.
-
In the input box, type "gpmc.msc" and select OK. This opens the Group Policy Management Console (GPMC).
-
Under your domain, right-click Group Policy Objects, select New and give your policy a name. After clicking OK, a new policy object appears in the list of group policies.
- Right-click your newly created group policy and select Edit.
-
In the resulting pop-up, navigate to
User Configuration\Policies\Windows Settings\Scripts (Logon/Logoff). - In the right pane, right-click Logon and select Properties.
-
Click the Show Files... button and copy and paste the .vbs script you created earlier in the folder that's opened.
-
Back in the Logon Properties window, click Add..., then Browse... and select your .vbs script in the resulting pop-up. Select Open afterwards and OK twice to close all pop-ups.
-
Apply your group policy to your domain computers by right-clicking your domain name or a specific OU, selecting Link an Existing GPO... and choosing your newly created policy from the resulting pop-up.
- Once your group policy has become active and a user has logged into a computer to be scanned, perform a search for the name of the computer in the web console search bar, which takes you to the machine's Lansweeper webpage. The Scan time tab of the machine's asset page should also indicate an LsPush scan has taken place.
If the search bar finds no asset for the scanned computer, the LsPush scan may have failed for any of the following reasons: you've reached your Lansweeper license's asset limit, your Lansweeper database is full, the Windows computer is excluded from scanning.
Was this post helpful? Select Yes or No below!
Did you have a similar issue and a different solution? Or did you not find the information you needed? Create a post in our Community Forum for your fellow IT Heroes!
More questions? Browse our Quick Tech Solutions.
