How to Discover with WMI When Machine Is Not Part of Any Domain

Usually the local Administrator account should have sufficient permissions to scan non domain machines. However, scanning a machine not part of any domain with any other user might need additional steps. You most likely need to disable remote User Account Control (UAC). Disabling remote user account control does not disable local UAC functionality.

To disable remote UAC on a target computer:

  • Using an administrator account, logon to the computer you want to scan
  • Start regedit
  • Expand HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem
  • Locate or create a DWORD entry named LocalAccountTokenFilterPolicy and provide a DWORD value of 1. To re-enable remote UAC, change this value to 0
  • You should now be able to scan the machine with vScope. If not, please try the other WMI setup guides in our FAQ

Leave a Reply