What privileges do I need?
Using WMI for discovering your network requires that you specify WMI credentials for an account with administrative privileges for the target server.
WMI Account Requirements
-
Use an administrator account with administrative privileges on the target server because you need to access the target server's WMI services.
If you don't have an administrator account, see "How to create a non-administrator user for SAM polling" for a workaround.
-
If the administrator account is a domain member, specify both the user name and the domain in the Microsoft syntax, such as:
-
If you are using the Kerberos protocol for WMI authentication, make sure to provide credentials using the fully qualified domain name, such as:
FQDN\username
See Configure Kerberos for WMI authentication in the SolarWinds Platform.
DOMAIN\Administrator
Agent
If you want to deploy agents from the SolarWinds Platform server, the following requirements must be met.
Windows
- The account used for remote deployment must have access to the administrative share on the target computer:
\\<hostname_or_ip>\admin$\temp
. - User Account Control (UAC) must either be disabled on the target computer, or the built-in Administrator account must be used.
- You may need to disable UAC remote restrictions.
- Other remote or mass deployment methods do not have the same requirements.
Linux/Unix
- An account that can connect remotely through SSH.
- An account that can install software and create a user and group.
See Credentials and privileges used on Linux/Unix-based computers for more information.
UDT
For UDT to poll for user login data, the account that UDT uses must be a member of Event Log Readers on a AD Domain Controller.
IPAM
Provide the account name in the following syntax: domainOrComputerName\userName
for domain level authentication or userName
for workgroup level authentication.

If you have already defined a set of WMI credentials for a discovery, it is automatically provided in the Choose Credential list. Select the appropriate set and click Add.

- Type a name for the set into Credential Name.
- Fill in the user name:
- For domain level authentication, use the following syntax:
domainOrComputerName\userName
- For workgroup level authentication, use
userName
.
- For domain level authentication, use the following syntax:
- Enter the appropriate password and retype the password in appropriate fields.
- Click Add to apply the credentials in the Network Sonar Discovery.
When creating new discoveries, the new set of credentials will be added into the drop-down list.