Network Discovery - how to locate a windows server

[omar.cacciotti]

Hello mates,
Thank you in advance.

For the first time I need to set up network discovery to identify the objects present including Windows servers.
I have always dealt with Linux systems or network devices without problems but in this case I need to identify Windows systems.

What type of check or mode or TCP port can I use to understand that it is a Windows system?
Theoretically they do not have local firewall enabled.

P.S.
I can't use the discovery of the installed Zabbix agent , because the installation is the second step of the process.

Thanks for your precious support

[omar.cacciotti]

Hello, does someone help me to find a strategy useful to recognize Windows Server inside a network range?
Some typical TCP port or protocol..

[pyritejoe]

I mean you could setup a discovery rule to look for RDP port 3389 though not exclusive to Windows. From that if you have a naming convention setup in some form you can key off that to add it to a windows host group via a Discovery action or just have one setup to add the hosts to the discovered hosts.

[troffasky]

You are probably coming at this from the wrong direction. Install Zabbix agent on all Windows hosts in Active mode, then they will check in with your Zabbix server. They can be auto-added with appropriate template.
If you literally don't know what your Windows hosts are then you could try nmap as it has various host-detection modes and scripts available.

[ysus]

Tools like NMAP or XPROBE can do it for you. But you need somehow pass the output of such utilities to Zabbix

https://manpages.ubuntu.com/manpages/jammy/man1/xprobe2.1.html

[Moob]

You could also try configuring the SNMP service on your windows host and perform a discovery and see if they are found.

Regards

[troffasky]

But you need somehow pass the output of such utilities to Zabbix

For a one-time job, there is a CSV import extension which works really well: https://github.com/intellitrend/zabb...-import-module . Once you have your list of hostnames/IPs, assembling the input CSV file is trivially easy.

[omar.cacciotti]

Thank you all,
I can't start by adding an agent and then recognize them using an Agent discovery rule,
The customer asked for a discovery service in order to rescan al networks and the act with a series of automation.

This is an acquisition, so the new owner doesn't know all.

I suppose I will base the whole logic on the TCP 3389 port