Flexnet agent installation on Domain Controllers

[krystel_campos]

Hi , is there a way to get the agent installed or a workaround for DCs, we have tried different agent versions and we cannot get the policy to run since it has no local admin account to get it installed.

[cdubs76 · Accepted solution]

Krystel,

We worked with our Directory services team on a smiliar situation--and we just provided them the ndtrack.exe and they placed it in a temp folder on the DC and setup a scheduled task to run once a month (or could do on any schedule you wish) to run the ndtrack with desired options and passing the argument of the beacon to upload the inventory to.  Worked like a charm.

[ChrisG]

I'm not sure I entirely follow what the challenge is here. Most Windows software requires local admin rights to be installed. How do your team normally install software on domain controllers? Is there any reason why that process can't be followed for the FlexNet inventory agent?

[durgeshsingh]

Agree with chris. Every DC have domain admin account if local account has been disabled due to security policy. 

There must LAPS implementation to retrieve  local admin just in case emergency.

[cdubs76]

In my case...it was the directory services team didn't want to install the agent.  not that it couldn't be done--they just didn't want to.  My implementation was something to make everyone happy :D.

[mag00_75]

Hi
We have a domain controller policy not to install agents, so we resolved it by developing a powershell script that produce virtualisation and software inventory. Then we have an inventory adapter to import it.

For other high security environments we use the core components only, to reduce risks etc