Re: SMS AD Systems Discovery

From: Seay (seay_at_mail.com)
Date: 09/14/04 

Date: Mon, 13 Sep 2004 19:29:05 -0500

So to avoid the poster's dilemma of dead accounts, they can clean out their
WINS and DNS so it will not resolve to an IP?

"Sean Chitwood [MSFT]" <seanchit@online.microsoft.com> wrote in message
news:OEYj9%23bmEHA.1652@TK2MSFTNGP09.phx.gbl...
> Zane--
> Here is the process AD System Discovery goes through:
>
> 1) Depending on the setting for recursion queries either the direct
> container you targeted or underneath the container. We also get the
> operatingSystem and operatingSystemVersion fields from AD.
> 2) (optional in SP1) Queries all the groups in the container and its
> children, also groups that systems it has found are members of. This can
> be very intensive.
> 3) Resolves the names into IP addresses
> 4) Queries the DC to get the AD Site Name and (if defined in AD) the IP
> Subnet. This is done in batches of 100 to reduce the traffic to the DC.
> 5) Writes out the DDRs
>
> Your overall question seems to be "Can I find dead computer entries in
> AD?", the answer is yes, if the account is in AD and the name resolves to
> a IP address, you will get an entry in the SMS database.
>
> --Sean
> --
> ------------------------------------------
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
> "Zane" <zane@mzail.com> wrote in message
> news:Ovp6AVamEHA.592@TK2MSFTNGP11.phx.gbl...
>> When SMS AD system discovery perform a scan...what is it actually doing?
>> Is it going to AD container you specified and retrieving COMPUTER NAMES
>> only or is it actually verifying it? Please clarify.
>>
>> No connection to the clients is made.
>>
>> in reality, these resources could be DEAD resources in AD...that still
>> has DNS/WINS entries?
>>
>> Are you saying that a computer account can exist in AD but may no longer
>> have DNS/WINS (due to scavenging) thus will NOT create a resource in the
>> Collections? If it did have an an IP record in DNS/WINS it WILL then
>> create resource in Collections?
>>
>> So the 2nd verification is the IP check from DNS/WINS?
>>
>> I am trying to determine the verfication process of how resources are
>> added into Collections from AD System Discovery ONLY
>>
>>
>> Anyone clarify these? Thankyou.
>>
>
>

Relevant Pages

  • UPDATE. Re: Urgent Paypal question!
    ... account so I couldn't believe it's fake! ... I'd suspect that your DNS has been hijacked so that paypal.com resolves ... knows about those tools and hijacks those DNS entries as well. ...
    (rec.collecting.coins)
  • Re: Thatcher dead or not?
    ... from the dead - for a few years before Major and Blair managed to put ... for hundreds of years to travel freely throughout the country. ... If you want a blow by blow account I suggest a start with 'Freedom ... but our basic liberties are far more under threat from this ...
    (uk.politics.misc)
  • Re: Protecting database from administrators
    ... If you remove the Builtin\Administrators account all you ... This resolves any of the below issues. ... server resides. ... removing "System Admin" role ...
    (microsoft.public.sqlserver.security)
  • Re: imap4.blueyonder.co.uk and Apple Mail borken?
    ... VM has said there is nothing wrong with their servers, ... email account and everything works fine. ... I get the same resolves from a non-VM ... I'd want to work out why your DNS is resolving a bit strangely. ...
    (uk.comp.sys.mac)
  • Re: For nostalgia fans
    ... Bugger, cos it sounds dead good. ... Have you got a thebox.biz account? ...
    (uk.rec.motorcycles)