The Service Account used by CloudSphere to scan windows devices does not expressly require administrative credentials to conduct our inventory and performance metrics collection, provided we have access to the required protocols and services for windows inventory (RPC. SMBv2 or SMB v3, WMI).
The Service Account MUST HAVE privileges to read the following WMI tables and Registry entries. The lack of access will lead to a failed scan or partial scan.
WMI Tables:
| Win32_ComputerSystem |
| ROOT\virtualization\Msvm_ComputerSystem |
| ROOT\virtualization\v2\Msvm_ComputerSystem |
| Win32_BIOS |
| Win32_SystemEnclosure |
| ROOT\MSCluster\MSCluster_Cluster |
| Win32_OperatingSystem |
| Win32_Processor |
| Win32_DiskDrive |
| Win32_DiskDriveToDiskPartition |
| Win32_LogicalDiskToPartition |
| Win32_LogicalDisk |
| Win32_NetworkAdapter |
| Win32_NetworkAdapterConfiguration |
| Win32_Process |
| Win32_Service |
| ROOT\virtualization\Msvm_VirtualSystemSettingData |
| ROOT\virtualization\v2\Msvm_VirtualSystemSettingData |
| ROOT\cimv2\cim_datafile |
| ROOT\MSCluster\MSCluster_ClusterToNode |
| ROOT\MSCluster\MSCluster_ClusterToResource |
| ROOT\MSCluster\MSCluster_Resource |
Registry Entries:
| HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters |
| HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion |
| HKLM\SYSTEM\CurrentControlSet\Control\ProductOptions |
| HKLM\Cluster |
| HKLM\SYSTEM\CurrentControlSet\Services\W3SVC\Parameters |
| HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<param>\Names\SQL |
| HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<param>\MSSQLServer\CurrentVersion |
| HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<param>\Setup |
| HKLM\SOFTWARE\Microsoft\Microsoft SQL Server\<param>\Cluster |
| HKLM\SOFTWARE\IBM\Cognos\TM1\Install |