Devices with Windows Embedded Compact 7 (CE 7) are not uniquely identified.

[mark_hartman]

We have some Zebra hand held scanners, MC92N0G, with Windows Embedded Compact 7 (CE 7) as the operating system that Lansweeper is merging scan data from all units into a single asset. SNMP scans are successful on these units and the MAC address is identified. We have some other devices (not MC92N0G devices) with Windows CE that are identified by Lansweeper as unique assets. Below are the scan results from each device type.

MC92N0G (data from all units merges to single asset)
----------
Lansweeper DeviceTester 6.0.110.3
Scanning Lansweeper Service (on this machine)..
Status: Service not found
Version: Executable not found
Pinging 10.18.98.134
Ping ok.
TTL: 127
Scanning TCP ports..
Open ports:
80 (HTTP)
443 (HTTPS)
Closed ports:
21 (FTP)
22 (SSH)
23 (Telnet)
25 (SMTP)
135 (EPMAP)
139 (NetBIOS Session Service)
3389 (RDP)
445 (SMB)
9100 (Jetdirect)
16992 (Vpro HTTP)
16993 (Vpro HTTPS)
Scanning netbios (UDP)..
Could not scan netbios
Scanning netbios (445)..
Could not scan netbios
Scanning SIP..
Error: Socket exception ConnectionReset: An existing connection was forcibly closed by the remote host
Scanning HTTP..
Url: http://10.18.98.134
Response Uri: http://10.18.98.134/
Connection: close
Content-Length: 976
Content-Type: text/html
Date: Fri, 01 Jun 2018 16:17:03 GMT
Last-Modified: Sun, 01 Jan 2012 00:00:00 GMT
Server: Microsoft-WinCE/7.00
Title: Windows CE
Scanning HTTPS..
Url: https://10.18.98.134
Error: The underlying connection was closed: An unexpected error occurred on a send.
Scanning SNMP..
ObjectID: 1.3.6.1.4.1.311.1.1.3.3
Hostname: CGMITSRF134
Description: Microsoft Windows CE Version 7.0 (Build 2864)
Uptime: 0d 2h 3m 31s 590ms
Contact: Your System Contact Here
Location: Casa Grande Powder unit 134
Networkprinter: Unknown Processor Type
MAC 2: RASLc
MAC 3: 94 FB 29 0B 56 DF
MAC 4: 94 FB 29 0B 56 DF
MAC 5: 3PoE00
MAC 6: L2TP00
MAC 7: PPTP00
MAC 8: 20 41 53 59 4E FF
IpForwarding: 2
Interfaces: 8
Scanning VPRO RMCPPing..
No reply to RMCP ping

WARNING: LANSWEEPER SERVICE NOT FOUND!
Done.


Other device that is uniquely identified
-------
Lansweeper DeviceTester 6.0.110.3
Scanning Lansweeper Service (on this machine)..
Status: Service not found
Version: Executable not found
Pinging 10.18.120.61
Ping ok.
TTL: 126
Scanning TCP ports..
Open ports:
80 (HTTP)
443 (HTTPS)
Closed ports:
21 (FTP)
22 (SSH)
23 (Telnet)
25 (SMTP)
135 (EPMAP)
139 (NetBIOS Session Service)
3389 (RDP)
445 (SMB)
9100 (Jetdirect)
16992 (Vpro HTTP)
16993 (Vpro HTTPS)
Scanning netbios (UDP)..
Could not scan netbios
Scanning netbios (445)..
Could not scan netbios
Scanning SIP..
Error: Socket exception ConnectionReset: An existing connection was forcibly closed by the remote host
Scanning HTTP..
Url: http://10.18.120.61
Response Uri: http://10.18.120.61/
Connection: close
Content-Length: 570
Content-Type: text/html
Date: Sun, 15 Sep 2013 20:27:44 GMT
Last-Modified: Tue, 25 May 2010 08:22:36 GMT
Server: Microsoft-WinCE/6.00
Title: FTVP
Scanning HTTPS..
Url: https://10.18.120.61
Error: The underlying connection was closed: An unexpected error occurred on a send.
Scanning SNMP..
SNMP disabled or wrong community
Scanning VPRO RMCPPing..
No reply to RMCP ping

WARNING: LANSWEEPER SERVICE NOT FOUND!
Done.

It is a bit of a surprise to me that the MAC address for the second device is not readable by Lansweeper but it still registers as a unique device. I would have expected the MC92N0G would register uniquely since its MAC address is readable by Lansweeper.

Anyone have any suggestions?

[Esben_D]

Hi Mark,

Assets scanned via SNMP are usually uniquely identified with their MAC address. Because most of the devices are being merged, this would indicated that they all share a generic MAC address.

If you can find the generic MAC address used by the devices, you can run the database script below to add the MAC address to the blacklist. This will prevent the MAC address from being used as a unique identifier.

INSERT INTO tsysMacBlacklist (Mac, Comment) VALUES ('00:00:00:00:00:00', 'your blacklist comment')
GO
UPDATE tsysupdate SET MacBlacklist = GETDATE()

As for the assets without a MAC address, they will be uniquely identified in another way, how Lansweeper handles identification can be found here: https://www.lansweeper.com/kb/149/how-lansweeper-uniquely-identifies-assets.html