Control Compliance Suite

Hi,

We are working on a customer with CCS v11 - Standard Manager. We are going to do technical checks for Windows Machines (no collecting information about users or groups). We have some doubts regarding the need of Windows domain cache credential. 

• Would We need a Domain Chache Credential for doing technical checks on Windows Machine? Please take in mind that We are not collecting information regarding users or groups belongs to.

• Would We need a Domain Admin for configuring the Domain Cache Credential?

The customer gives us a Local Administrator for Windows Machine, but it is not going to give us a Domain Admin. In CCS version 10.5.x, Domain Admin is not mandatory for collecting specific information from Windows machine.

Thanks in advanced,

Regards,

Jose

Hi Jose,

When your refering to "We are going to do technical checks for Windows Machines" do you mean your just trying to map the checks with industry standards and help the customer to pick from predefined standards then the answer will be you dont have to have the Domain cache credentails but if you trying to run any ONE of the checks to see if they are working as per design then the answer will be you need to have domain credentails inorder to run them.

Thanks Syed,

We want to do the second statement , We want to run checks. Domain credential is not a problem, the customer doesn't want to give us a domain admin; which is needed for Domain Cache Credential. We would like to know if we are able to run checks without Domain Cache Credential.

Regards

Hi Jose,

I can give a small suggestion if that is a case, you can move on machine to a workgroup and add CCS manager to it (Local admin account) and then configure accondingly and you should be able to achieve your task.

I believe that you can provide credentials that are Local admin to the server in the "Windows" Credentials, and leave the "Windows Domain Cache" Credentials blank.  The consequences of this will be that you will need to import your Windows assets manually via CSV instead of the Domain Cache technique.  I think that should work for what you are attempting.

Hope that helps.

Go and ask the CCS software owner to contact thier support team, there is a new patch available for removing the Domain Admin requirement for Domain Cache.