Thank you for your feedback.
Form temporarily unavailable. Please try again or contact docfeedback@servicenow.com to submit your comments.
Versions
  • London
  • Kingston
  • Jakarta
  • Istanbul
  • Helsinki
  • Geneva
  • Store
Close

Windows discovery

Windows discovery

Discovery identifies and classifies information about Windows computers.

Warning: DO NOT switch from probes to patterns if you are already running Discovery with probes, and your CMDB is already populated. If you do so, it is possible that the pattern Discovery process does not synchronize on the same values that the probe Discovery process does. This could result in duplicate CIs in your CMDB.

Supported Windows versions

  • Windows Workstation 7, 8, 10
  • Windows Server NT, 2000, 2003, 2008, 2008R2, 2012R2, 2016
Note: For fiber channel discovery on a Windows 2008 host, the Microsoft Fibre Channel Information Tool (fcinfo.exe) must be installed on that machine. The fcinfo executable should be available on the environment path. The Microsoft Fibre Channel Information Tool tool is available for download at http://www.microsoft.com.

Credentials

Configure Windows credentials. The user configured in the credentials must have local admin access to the Windows machine.

The credential that you configure must have the following:
  • Access to the WMI service to the current namespace and sub-namespaces.
  • Access to the Powershell service.
  • Membership in the Distributed COM Users local security group.

Classifiers, probes, and patterns

Classifiers Probes Patterns
  • Windows
  • Windows 2000 Server
  • Windows 2003 Server
  • Windows 2008 Server
  • Windows 2012 Server
  • Windows 2016 Server
  • Windows NT Server
  • Horizontal discovery probe: launches patterns
  • WMIRunner-Windows - Installed Software^
  • MultiProbe-Windows - ADM^
  • Windows - Identity*
  • Windows - Network ARP Table*
  • Windows - OS Information*
  • Windows - Cluster*
  • Windows - CPU/Memory*
  • Windows - Installed Software*
  • Windows - Printers*
  • Windows - Storage 2008*
  • Windows - Storage 2012*
  • Windows - Amazon EC2*
  • Windows - Azure*
  • DNS*
  • SNMP - Routing*
  • Windows OS - Server
  • Windows OS - Desktops
*For new instances, these probes are inactive on the classifier. Discovery uses patterns for discovery.

^These probes remain active by default, even when Discovery uses pattern discovery.

To use patterns, verify that the correct pattern is specified in the horizontal pattern probe on the classifier. See Add the Horizontal Pattern probe to a classifier for instructions.

Data collected

Label Table name Field name Source
Assigned to cmdb_ci_win_server assigned_to wmi
Chassis type cmdb_ci_win_server chassis_type wmi
Command cmdb_running_process command wmi
Connects to cmdb_running_process connects_to wmi
CPU core count* cmdb_ci_computer cpu_core_count wmi
CPU core thread* cmdb_ci_computer cpu_core_thread wmi
CPU count* cmdb_ci_computer cpu_count wmi
CPU manufacturer cmdb_ci_computer cpu_manufacturer wmi
CPU name cmdb_ci_computer cpu_name wmi
CPU speed (MHz) cmdb_ci_computer cpu_speed wmi
Default gateway cmdb_ci_hardware default_gateway wmi
Department cmdb_ci_win_server department Internal (User)
Description cmdb_ci_disk short_description wmi
Disk space (GB) cmdb_ci_computer disk_space wmi
Disk space (GB) cmdb_ci_disk disk_space wmi
DHCP enabled cmdb_ci_network_adapter dhcp_enabled wmi
DNS domain cmdb_ci_win_server dns_domain DNS
Free space (GB) cmdb_ci_file_system free_space wmi
Hostname cmdb_ci_win_server host_name DNS, NBT
IP address cmdb_ci_network_adapter ip_address wmi
Listening on cmdb_running_process listening_on wmi
MAC address cmdb_ci_network_adapter mac_address wmi
Manufacturer cmdb_ci_win_server manufacturer wmi
Model ID cmdb_ci model_id wmi
Name cmdb_ci_win_server name DNS, NBT
Name cmdb_ci_disk name wmi
Name cmdb_running_process name wmi
Name cmdb_ci_network_adapter name wmi
Netmask cmdb_ci_network_adapter netmask wmi
Operating System cmdb_ci_computer os wmi
OS domain cmdb_ci_computer os_domain NBT
OS service pack cmdb_ci_computer os_service_pack wmi
OS version cmdb_ci_computer os_version wmi
Parameters cmdb_running_process parameters wmi
PID cmdb_running_process pid wmi
RAM (MB) cmdb_ci_computer ram wmi
Serial number cmdb_ci_win_server serial_number wmi
Short description cmdb_ci_win_server short_description wmi
Type cmdb_ci_disk type wmi
Type cmdb_running_process type wmi
Vendor cmdb_ci_network_adapter vendor wmi
Volume serial number cmdb_ci_disk volume_serial_number wmi
* Core counts and threads per core might not be accurate, due to issues with Microsoft reporting.

The Windows registry

Discovery can find software that has been installed on a Windows machine by looking at the Windows Registry. Discovery can find the following attributes of discovered software:
  • Product Name, which is a combination of name and version, such as Windows Imaging Component 3.0.
  • Name, which is the name of the product only without the version.
  • Version
  • Uninstall String, such as C:\Program Files\Notepad++\uninstall.exe
  • Part of, which is the update that this a part, such as Windows Internet Explorer 8 - Software U.
  • Install Date
  • Installed on, which is the name of the asset it is installed on.