Administration Guide

Adding Windows Audit Credentials

Windows audit credentials provide authentication information for Windows client computers. These credentials must be associated with a user account that is a member of the local Administrators group on each Windows client computer, either through direct assignment or by being part of a Windows domain group.

You can configure multiple sets of credentials and then use them as needed for the Direct Network Scan of various network segments. During the first scan operation, the Quick Start Wizard prompts you for Windows credentials and saves them as the primary option for future use.

INFO: For details on the first audit with the Quick Start Wizard, see Quick Start with Alloy Discovery.

To add a new record for Windows audit credentials, follow the steps:

  1. Select Audit > Audit Settings from the main menu. The Audit Settings dialog box opens.

  2. Using the navigation bar, navigate to Audit Credentials.

  3. Click New > Windows. The [Credentials Name] dialog box opens.

  4. Specify the credentials:
    • To provide a domain account:
      1. Enter the user login name and password. In the Domain field, select or enter the domain name. Alternatively, you can just enter a full domain user name in the User Name field, such as COMPANY\audit.

        NOTE: It is recommended to use credentials for a domain administrative account.

      2. Click Test Login to verify that the account can log in to the specified domain:

        NOTE: To promote responsible credential management and best practices in security, this feature is applicable only when the computer where Alloy Discovery is installed resides within the same domain as the one being tested. This ensures that sensitive domain credentials are not accidentally exposed or tested in environments where they shouldn't be.

    • To provide a local account, enter the user name and password and keep the default <Local Computer> value in the Domain field.

      NOTE: This local account must exist on every client computer you wish to audit.

  5. Specify a unique name that Alloy Discovery will use to identify this credential record. By default, the Name field is initialized with the login name. You can customize it, if needed.

  6. Click OK.

You have the flexibility to use Windows audit credentials for an entire network segment or to override this setting with different credentials for individual Windows computers.