Inventory Scanning not picking up Windows 7 machines

charliemaris · 2011-01-31T13:41:11.000Z

I have spiceworks set up on a machine running server 2003. All windows XP machines are picked up perfectly in the inventory when i run a scan, but the Windows 7 machines say “No open ports for this device were found to be responding.”

The machine they i am working with has no AV protection on it at the moment and the windows firewall is turned off along with UAC being disabled.

When I am on the machine that spiceworks in running on and i run the wmic /user:USER_NAME /password:PASSWORD /node:IP_ADDRESS sustemenclouser get serialnumber i get

ERROR:
code = 0x8007005
description = Access is denied
Facility = win32

I have been looking around the forum for several different things to try and i have tried several different fixes and nothing seems to work.

WMI is configured to allow connections from admins.

I am lost… i could use some help.

ralphjooste6226 · 2011-01-31T13:45:35.000Z

The Windows firewall is killing you, we have disabled it altogether and use Trend instead, for a quick fix- create a firewall rule in Group Policy allowing the spiceworks scan ports.

charliemaris · 2011-01-31T13:56:13.000Z

windows firewall state: off

Am I doing something wrong?

ralphjooste6226 · 2011-01-31T14:06:30.000Z

does your network connection show as a domain connection or public connection?

timjackson4638 · 2011-01-31T14:43:27.000Z

Is the account you tested wmic with a local administrator on the target machine?

charliemaris · 2011-01-31T14:46:29.000Z

it is in the administrators group.

charliemaris · 2011-02-01T09:46:05.000Z

My network connect states domain connection.

timjackson4638 · 2011-02-01T10:04:31.000Z

What happens if you try the same test with a different domain account that is also set up as a member of the local administrators group on the target machine?

charliemaris · 2011-02-01T10:19:57.000Z

the exact same error comes up… says access denied…

timjackson4638 · 2011-02-01T10:32:51.000Z

Is this Windows 7 machine joined to the domain or in a workgroup?

Are the DNS records for this machine clean, both forward and reverse?

charliemaris · 2011-02-01T10:35:13.000Z

the machine is attached to our domain. the dns records are fine. I can run checks perfectly fine from the spiceworks server.

timjackson4638 · 2011-02-01T11:42:04.000Z

What happens if you rerun the wmic test, but for the “node” switch, use the machine name instead of the IP address? If it returns an error, what error message is it?

charliemaris · 2011-02-03T08:10:57.000Z

i still get access denied. it doesn’t seem to make a difference…

timjackson4638 · 2011-02-03T10:05:53.000Z

From what I’ve seen on my Windows 7 machines, an Access is Denied error has meant that the scan account is not set up as a local admin on the target machine. Unless there is something not configured correctly with WMI or DCOM.

You mentioned this machine is joined to the domain. Any chance this could be picking up settings from an existing GPO which would, in effect, block WMI access for Windows 7 but not XP?

charliemaris · 2011-02-03T10:59:19.000Z

I highly doubt it. but it does’t hurt to look. I will take a look this afternoon and post my findings.

charliemaris · 2011-02-03T13:29:52.000Z

I did some looking and i could not find anything in our GPO’s that would effect it.

I did notice that some of out Dell laptops with windos 7 were scanned fine, but our HP laptops that have Windows 7 still can not be scanned.

charliemaris · 2011-02-04T06:59:07.000Z

There was some HP protection tools that were on the laptop. I thought that they might be causing the issues. I removed them but i am still getting the error…

Any thoughts?

timjackson4638 · 2011-02-04T08:18:19.000Z

I just have this feeling that there is another piece of information missing from this situation, which is making diagnosis more difficult.

If the scan works on one Windows 7 machine but not another, what is the difference in configuration? It seems to me that something is setup differently on the one that scans than the one that doesn’t. It should not matter that one is Dell and the other is HP if they are both Windows 7 OSes. Are they also the same version of Windows 7 OS?

charliemaris · 2011-02-04T08:33:41.000Z

yes both are the same version of windows 7 with the same update. I have the exact same software installed on both but for some reason the HP wont let me scan it. In the inventory i get the error No Open Ports for This device… and i have gone through every step in this article…

http://community.spiceworks.com/help/Inventory_WMI

timjackson4638 · 2011-02-04T09:43:18.000Z

Ok, let’s try again with the HP machine.

are DCOM and WMI services started?
from your SW server, try an nslookup of the HP machine by name and then and nslookup of the HP machine by IP. Did the proper name and IP get returned both times?
can you specifically add the authentication account you use in your Spiceworks scan to the local administrators group on the HP machine?