Windows Domain Controllers

[RSAAdmin]

Hello,

I have set up a AS1, DS1 and LC1 and can not get my Windows Domain Controllers to report into envision. I have a Global Account setup that has correct permissions to my DC's and the account is configured correctly in manage widows domains. I checked manage services and the NIC Windows Service is not started. I try and start it and it will not start. Has anyone got any ideas why NIC Windows Service is failing?

Thanks,
John.

Message Edited by jstacey on08-07-200804:04 PM

[RSAAdmin]

Hi John:

Do a search in the Event Viewer for "Agentless" and select alert level filters 0-3 and see what enVision is recording as the errors for agentless collection.

You can post the errors here and we can take it from there.

Mark Nadir

[RSAAdmin]

Jedi I did what you said didn't pickup anyting filtering 0-3 but did pickup this when I didn't filter.

1 2008/08/05 16:18:06.045 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3876: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
2 2008/08/05 16:18:06.154 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3876: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
3 2008/08/05 16:18:06.154 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3876: Shutdown to winprocesses sent
4 2008/08/05 16:20:44.500 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1388: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
5 2008/08/05 16:20:44.610 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1388: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
6 2008/08/05 16:20:44.610 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1388: Shutdown to winprocesses sent
7 2008/08/05 16:22:46.142 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3020: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
8 2008/08/05 16:22:46.252 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3020: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
9 2008/08/05 16:22:46.252 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3020: Shutdown to winprocesses sent
10 2008/08/05 16:24:02.206 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3980: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
11 2008/08/05 16:24:02.315 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3980: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
12 2008/08/05 16:24:02.315 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3980: Shutdown to winprocesses sent
13 2008/08/06 09:59:13.956 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2412: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
14 2008/08/06 09:59:14.066 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2412: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
15 2008/08/06 09:59:14.066 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2412: Shutdown to winprocesses sent
16 2008/08/06 10:09:28.853 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 876: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
17 2008/08/06 10:09:28.947 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 876: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
18 2008/08/06 10:09:28.947 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 876: Shutdown to winprocesses sent
19 2008/08/06 10:10:34.790 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3448: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
20 2008/08/06 10:10:34.883 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3448: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
21 2008/08/06 10:10:34.883 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 3448: Shutdown to winprocesses sent
22 2008/08/07 16:00:18.604 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2420: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
23 2008/08/07 16:00:18.698 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2420: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
24 2008/08/07 16:00:18.698 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2420: Shutdown to winprocesses sent
25 2008/08/07 16:12:26.077 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1392: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
26 2008/08/07 16:12:26.187 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1392: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
27 2008/08/07 16:12:26.187 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1392: Shutdown to winprocesses sent
28 2008/08/07 16:13:32.906 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2300: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
29 2008/08/07 16:13:33.015 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2300: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
30 2008/08/07 16:13:33.015 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 2300: Shutdown to winprocesses sent
31 2008/08/07 16:14:34.060 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 796: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
32 2008/08/07 16:14:34.169 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 796: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
33 2008/08/07 16:14:34.169 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 796: Shutdown to winprocesses sent
34 2008/08/07 16:25:11.156 EDT xxx.xxx.xxx.xxx %NIC-5-606900: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1812: Started on Site NIEDOMAIN, Node NIEDOMAIN-LC1
35 2008/08/07 16:25:11.266 EDT xxx.xxx.xxx.xxx %NIC-5-606901: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1812: Stopped on Site NIEDOMAIN, Node NIEDOMAIN-LC1
36 2008/08/07 16:25:11.266 EDT xxx.xxx.xxx.xxx %NIC-5-606910: AgentlessWindows, Agentless Windows Service, -, -, -, -, Detail: 1812: Shutdown to winprocesses sent 

[RSAAdmin]

Hmm ... these series of events are usually indicative of no actual windows servers being defined for pulling logs using the Agentless method.

Did you set up the Windows Servers under  "Device Services, Windows Servic, Manage Windows Service?" If there are servers defined, are they enabled?

Message Edited by nie-jedi on08-08-200803:04 PM

[RSAAdmin]

Is there a command to bulk add the systems into Manage Windows Service - Add/Modify Windows System?

[RSAAdmin]

Two ways to do it:

1. Via the web gui, under "System Configuration > Services > Device Services > Windows Service > Manage Windows Service." From there you will see a button "Bulk Add." Once you click it, a pop up will appear telling you to ensure that NETBIOS over TCP/IP is enabled. Once you make sure that it is, you can go ahead, press ok, and select the Domain your Windows servers belong to. A list should be enumerated, where you can select the servers you want.

2. Via a flat file import, using the db_import_windows_clients.cmd command from e:\nic\<version>\<site>\database\cmd. The file containing the windows servers must be specified as follows:

domain     host(fqdn)      ipaddress

[RSAAdmin]

As a follow-up, be sure to add the domain(s) via the Device Services -> Windows Service -> Manage Windows Domains BEFORE trying to import a large number of servers. 

Also, once you have bulk imported the servers, you aren't done yet -- you may still need to add/subtract the logs that are collected from each device.  Additionally, it is helpful to run the wintool command on the responsible LC a to verify that there aren't any remnant firewall/routing/permissions issues.