Skip to content
Sam360 Logo Sam360 Logo Sam360 Logo
  • Support
    • Documentation
    • Submit Ticket
  • Contact
  • Support
    • Documentation
    • Submit Ticket
  • Contact

Introduction

  • Overview
  • Collecting Inventory
  • Software Metering
  • What Data Is Collected?
  • Data Security
  • Quick Start Guide (Software Baseline Clients)

Portal

Introduction
  • Grid – Quick Filters
  • Notes – Markdown Guide
  • Grid – Introduction
Configuration
  • Forgot Your Password
  • Reset User Password
  • Add Portal User
  • Grant Portal Access To Existing User
  • Manage Client Permissions
Sample Reports
  • CyberSecurity Excel Overview
Importing/Exporting Data
  • Import Inventory And License Data
  • Import Device Data (CSV file)
  • Import Software Inventory Data (CSV file)
  • Import VMware Data
  • Import SCCM Data
  • Import Hyper-V Data
  • Import Office 365 Data
  • Import Sam360 Inventory Data (s3tools)
  • Import License Data
  • Exporting To Microsoft Universal Inventory

Data Collection

Management Point
  • Sam360 Management Point Introduction
  • Install Management Point
  • Management Point Service Account Requirements
  • How the Remote Scan works
  • Start Management Point Configuration Tool
  • 3rd Party & Cloud Integration
    • VMware Integration
    • XenServer Integration
    • Microsoft 365 Integration
    • Install/Update Required PowerShell Modules
    Technical Notes
    • Management Point Footprint
    • Improve Remote Scan Coverage
    • Configure Windows Firewall with Group Policy
    • Disable Communication With Sam360 Servers
    • Inspecting Inventory Data
    • Management Point Change Log
    • Update Management Point Credentials
Agent
  • Sam360 Agent Introduction
  • Deploy Agent Manually
  • Deploy Agent with Group Policy
  • Deploy Agent Using Management Point
  • Enable logging
  • Locate Sam360 Discovery Agent Log Files
  • Agent and Management Point Proxy
Web Scan
  • Sam360 Web Scan Introduction
  • Upload Inventory Data Files To Sam360
  • Gather Inventory From Offline Networks
  • Gather Inventory From An Offline Computer
  • Export List Of Devices From Active Directory

Data Model

  • Overview
Hardware
  • ActiveSync Device
  • Device
  • Terminal Device
  • Wireless Network
  • Network Card
  • Logical Drive
  • Physical Drive
Licensing
  • Agreement
  • Contact
  • License Position Record
  • License
Software
  • Application File Instance
  • Application File
  • Product
  • Product Installation
  • SQL Server Instance
  • Vendor
Settings
  • Rule
  • Client File
  • Entity History Event
  • Management Point
  • Management Point Task
  • Product Name Modifier
  • Report
  • Tenant
  • Report Task
Usage
  • Software Usage Record
  • Document
  • Hourly Software Usage Record
  • Netstat Connection
  • Performance Snapshot
  • IP Address
Configuration
  • Exchange Server Instance
  • Group
  • Web Application
  • OEM Warranty
  • Security Info Product
  • Site Collection
  • Site
  • SQL Server Database
  • SQL Server Service
  • User Permission
  • Web Site
  • Windows Domain
  • Windows Service
  • Windows Update
  • Device Certificate
  • Device VPN
  • Security Product Info
  • IIS Web Application
Users
  • User
Cloud
  • Azure Tenant
  • Azure Sign In Audit Log
  • Azure Application
  • Azure Sign In Auth Method
  • Home
  • Support Documentation
  • Data Collection
  • Management Point
  • Technical Notes
  • Improve Remote Scan Coverage

The Sam360 Management Point gathers inventory from remote devices by querying the WMI service on the device to be scanned. If the WMI service is unavailable (e.g. Blocked by firewall, Service disabled, Access denied, Computer switched off etc.) the Management Point will attempt to gather inventory data using the 'Remote Registry' service.

If both services are unavailable, the Management Point attempts to connect to the 'File Share' service and the 'Service Control Manager' service on the remote device to help determine the state of the device. The Management Point also pings the remote device.

By combining the responses to each attempted connection, the Management Point determines the 'Connection Status' of the remote device. The 'Connection Status' has 8 possible values.
 

Connection Status Description
Blank No connection errors were encountered. The scan was successful.
Access Denied None of the credentials available to the Management Point had permission to remotely scan the target device
Blocked by Firewall The Management Point was unable to connect to the WMI and Remote Registry services on the target device. However, the Management Point was able to connect to the 'Service Control Manager' service or the 'File Share' service or it was able to ping the target device. This suggests the target device is switched on and contactable, but the WMI and Remote Registry services are blocked by Windows firewall or another firewall between the Management Point and the target device
No Response No response was received to communication attempts made by the Management Point. The target device may be switched off, on a different network that can't be accessed by the Management Point or behind a firewall that blocks access to the WMI, 'Remote Registry', 'File Share', 'Service Control Manager' and Ping services.
No Response – Host Unreachable This is similar to the connection status 'No Response' with one difference. Ping has returned 'Destination Host Unreachable' when pinging the target device. This reduces the likelihood that the problem is caused by a firewall and increases the likelihood that the problem is related to networking issues.
Possibly Decommissioned This is similar to the connection status 'No Response' with one addition. According to Active Directory, the device has not been active for over 60 days. It is likely that the target device is no longer in use
Name Not Found The DNS server used by the Management Point does not have a record for the target device. An error of 'Unsuccessful Address Resolution' was returned when the target device was pinged. No IP address could be found for the target device.
Error An error has occurred when connecting to the target device. The most common error is that a certain activity has taken over its allowed time – e.g. Querying the network for the devices domain name (30 seconds), Attempting to connect to remote WMI service (15 seconds) etc.

Resolving Scan Issues

The following table outlines how scan connectivity problems can be resolved.

 

Connection Status Resolution
Access Denied By default, the Management Point uses its 'Primary Credentials' to scan remote devices. It can be configured to use one or more sets of additional credentials if the 'Primary Credentials' do not have sufficient privileges on one or more of the target devices.

Option 1
In the credentials section of Management Point configuration tool, add the credentials of a user account that has administrator privileges on the devices to be scanned.

Option 2
Update the permissions of the Management Point 'Primary Credentials' user to include administrator privileges on the devices to be scanned.

Blocked by Firewall The target device appears to be switched on and contactable, but access to WMI and 'Remote Registry' services is blocked.

Option 1
If the target devices are part of a Windows domain and Windows firewall is blocking access to WMI (Port 135) and Remote Registry ports (Ports 139 & 445 respectively), update Windows firewall configuration for target devices to enable WMI and/or 'Remote Registry' access by updating Group Policy.

Option 2
Deploy the Sam360 software metering agent to the affected devices using the preferred software deployment mechanism. The metering agent uploads the devices inventory to the Sam360 server on a scheduled basis.

Option 3
Use 's3tools' standalone inventory gathering tool through a network file share, USB key, email, web download etc to manually gather inventory data from the affected devices.

Option 4
Import existing inventory data for the affected devices by configuring the Management Point to import data from System Center Configuration Manager, MAP Toolkit, Altiris, Lansweeper, Snow inventory etc.

Option 5
f the affected machine(s) use a standard profile of hardware configuration and software inventory, it's possible to use the inventory of a scanned device as a template for other devices. The template data is extracted from the scanned device and applied to selected non scanned devices.

No Response
No Response – Host Unreachable
Name Not Found
Possibly Decommissioned
The target device was not contactable. Ensure that it is turned on and can access the network.

If the device is on a different network to the Management Point and traffic on ports 135,139 & 445 cannot traverse the networks, it may be necessary to install an additional Management Point on the target device network.

If traffic on ports 135, 139 & 445 cannot be enabled between the Management Point and target device, Options 2, 3, 4 & 5 from the previous section can be used to gather inventory from the affected devices.

Error Rescan the affected device(s) If the error persists, detailed error information should be available in the devices 'WMI status' and 'Registry status' fields. If it is not simply a timeout error, contact Sam360 for further support.
Rate This Article :
Share This Article :
  • Facebook
  • Twitter
  • LinkedIn
  • Pinterest
Updated on March 13, 2020

Leave A Comment Cancel reply

Partner First

Enabling data driven IT projects
  • Download

Get Support

    support@sam360.com
    Mon-Fri: 09:00 – 18:00 UTC
  • +353 1 566 6390‬

Find Us

NCI Research Centre, IFSC Dublin 1, Ireland
  • Check maps
© Copyright 2012 - | Sam360 | All Rights Reserved
TwitterLinkedInEmail