Agentless windows configuration on Stand alone servers

[RSAAdmin]

I have created a domain with computer name for agentless windows configuration for a standalone server.

And added the device to windows service to collect logs.

But the log collection is not happening.

Below are the details:

I am able to ping the standalone server from RSA collector.
Able to telnet the server with ports 135,139 and 445.
Remote login is not enabled on the server.
service account is created locally on the server.

What are the other steps to be performed for this server to send logs to RSA collector?

Please advice.

[NathanFurze1]

If you haven't already done so I would contact RSA enVision Support who can help assist with next steps or troubleshoot any issues. Nathan

[RSAAdmin]

Hi Nathan, Thank you for the response. Could you please help me in this. Regards Sivaram Jayaraj

[RSAAdmin]

Hi,

When you created the Doman within enVision, did you prepend '$' before the domain name? Adding this character tells enVision to look in the local SAM.

So for example, create a dummy Domain within enVision called $WORKGROUP and then supply the local Username and Password created for event log collection.