Skip to content

Commit 62ecaf0

Browse files
committed
1033: non-admin user permission; windows-and-hyper-v-auto-discovery
1 parent b6d5d6a commit 62ecaf0

File tree

1 file changed

+15
-1
lines changed

1 file changed

+15
-1
lines changed

docs/auto-discovery/windows-and-hyper-v-auto-discovery.mdx

Lines changed: 15 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -374,7 +374,7 @@ If you discover servers that do not belong to a domain, your User Account Contro
374374

375375
### Windows ADM Minimum Permissions
376376

377-
There are two options for configuring ADM permissions. The first option uses local administrative permissions and the `IPC$` and `ADMIN$` shares. The second option lets users configure their own shares.
377+
There are two options for configuring ADM permissions for admin users. The first option uses local administrative permissions and the `IPC$` and `ADMIN$` shares. The second option lets users configure their own shares.
378378

379379
For the local administrator method:
380380

@@ -398,6 +398,20 @@ sources={{
398398
}}
399399
/>
400400

401+
While it's best to use an admin account for complete discovery, you can try the following workaround to grant a non-admin user permission for service discovery.
402+
403+
Use the `sc.exe sdset scmanager` command to grant `SC_MANAGER_CONNECT` permission to the user:
404+
405+
- First, [find the SID](https://www.ninjaone.com/blog/how-to-find-user-security-identifier/) of the non-admin user account you want to grant permission to.
406+
407+
- Next, as an admin user, add the non-admin user account’s SID to the following command and execute it in PowerShell:
408+
409+
```bash
410+
sc.exe sdset scmanager "D:(A;;CC;;;AU)(A;;CCLCRPRC;;;IU)(A;;CCLCRPRC;;;SU)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)(A;;CC;;;AC)(A;;CCLCRPRC;;;SID_OF_DISCOVERY_USER)"
411+
```
412+
413+
- Then try running the discovery process again as the non-admin user.
414+
401415
### Port Matrix
402416

403417
| Ports | Protocol | Application Protocol | Notes |

0 commit comments

Comments
 (0)