If a hypervisor is enabled in your environment, a computer can report as VM Host if Linux KVM is enabled. This occurs because when Linux KVM is enabled, the device can host VMs and thus is categorized as a VM host.
When hypervisors (like Hyper-V, for example) are enabled on the device, we can connect to the root\virtualization or root\virtualization\v2 Windows Management Instrumentation (WMI) namespace and successfully query the Msvm_HostedDependency WMI class.
<Hardware Class="MGSVM_InfrastructureSDK" Name="Microsoft Hyper-V" Evidence="HYPERV">
As shown below, when Linux KVM is enabled on a computer, the device reports as a VM host.
<Hardware Class="MGSVM_InfrastructureSDK" Name="Linux KVM" Evidence="KVM">
<Property Name="Name" Value="Linux KVM"/>
<Property Name="Protocol" Value="libvirt"/>
<Property Name="Version" Value="3001000"/>
<Property Name="LibVersion" Value="5007000"/>
<Property Name="HostIdentifier" Value="en09db02.corp.ads"/>
To enable the device to report as a computer, disable Linux KVM on the device.
After it has been disabled and the device is inventoried again, it will report as a computer.
Dec 20, 2022 01:19 PM