Thank you for your feedback.
Form temporarily unavailable. Please try again or contact to submit your comments.

Windows discovery

Log in to subscribe to topics and get notified when content changes.

Windows discovery

Discovery identifies and classifies information about Windows computers.

Supported Windows versions

  • Windows Workstation 7, 8, 10
  • Windows Server NT, 2000, 2003, 2008, 2008R2, 2012R2, 2016
Note: For fiber channel discovery on a Windows 2008 host, the Microsoft Fibre Channel Information Tool (fcinfo.exe) must be installed on that machine. The fcinfo executable should be available on the environment path. The Microsoft Fibre Channel Information Tool tool is available for download at


Configure Windows credentials. The user configured in the credentials must have local admin access to the Windows machine.

The credential that you configure must have the following:
  • Access to the WMI service to the current namespace and sub-namespaces.
  • Access to the Powershell service.
  • Membership in the Distributed COM Users local security group.


Several classifiers trigger probes that perform the discovery:
  • Windows
  • Windows 2000 Server
  • Windows 2003 Server
  • Windows 2008 Server
  • Windows 2012 Server
  • Windows 2016 Server
  • Windows Cluster VIP
  • Windows NT Server

Open these classifiers for the full list of probes that can be triggered.

Data collected

Label Table name Field name Source
Operating System cmdb_ci_computer os wmi
OS version cmdb_ci_computer os_version wmi
OS service pack cmdb_ci_computer os_service_pack wmi
Name cmdb_ci_win_server name DNS, NBT
Hostname cmdb_ci_win_server host_name DNS, NBT
DNS domain cmdb_ci_win_server dns_domain DNS
OS domain cmdb_ci_computer os_domain NBT
Assigned to cmdb_ci_win_server assigned_to wmi
Department cmdb_ci_win_server department Internal (User)
Short description cmdb_ci_win_server short_description wmi
Manufacturer cmdb_ci_win_server manufacturer wmi
Serial number cmdb_ci_win_server serial_number wmi
CPU name cmdb_ci_computer cpu_name wmi
CPU manufacturer cmdb_ci_computer cpu_manufacturer wmi
CPU speed (MHz) cmdb_ci_computer cpu_speed wmi
CPU count* cmdb_ci_computer cpu_count wmi
CPU core count* cmdb_ci_computer cpu_core_count wmi
CPU core thread* cmdb_ci_computer cpu_core_thread wmi
Model ID cmdb_ci model_id wmi
RAM (MB) cmdb_ci_computer ram wmi
Disk space (GB) cmdb_ci_computer disk_space wmi
Type cmdb_ci_disk type wmi
Description cmdb_ci_disk short_description wmi
Disk space (GB) cmdb_ci_disk disk_space wmi
Name cmdb_ci_disk name wmi
Volume serial number cmdb_ci_disk volume_serial_number wmi
Free space (GB) cmdb_ci_file_system free_space wmi
Name cmdb_running_process name wmi
Command cmdb_running_process command wmi
Connects to cmdb_running_process connects_to wmi
Listening on cmdb_running_process listening_on wmi
Type cmdb_running_process type wmi
PID cmdb_running_process pid wmi
Parameters cmdb_running_process parameters wmi
Name cmdb_ci_network_adapter name wmi
IP address cmdb_ci_network_adapter ip_address wmi
MAC address cmdb_ci_network_adapter mac_address wmi
Netmask cmdb_ci_network_adapter netmask wmi
DHCP enabled cmdb_ci_network_adapter dhcp_enabled wmi
Vendor cmdb_ci_network_adapter vendor wmi
Default gateway cmdb_ci_hardware default_gateway wmi
* Core counts and threads per core might not be accurate, due to issues with Microsoft reporting.

The Windows registry

Discovery can find software that has been installed on a Windows machine by looking at the Windows Registry. Discovery can find the following attributes of discovered software:
  • Product Name, which is a combination of name and version, such as Windows Imaging Component 3.0.
  • Name, which is the name of the product only without the version.
  • Version
  • Uninstall String, such as C:\Program Files\Notepad++\uninstall.exe
  • Part of, which is the update that this a part, such as Windows Internet Explorer 8 - Software U.
  • Install Date
  • Installed on, which is the name of the asset it is installed on.