Disable Radar Scans?

[rinks]

Hello,

We recently went through some restructuring of our AD access and permissions and the local admin account we used for Lansweeper was disabled. I am currently getting scan errors due to this on the on-prem side. We use a hybrid setup and primarily scan workstations with IT Agent.

Is there a way to disable scans that require local admin rights so the number of errors are greatly reduced on the reporting side? We still have the on-prem doing scans but for workstations I would need to ignore anything that is picked up on our network scans related to Windows/Mac assets. For a bigger picture, we have the main HQ between three buildings and branch offices across all 50 states that have their own IP ranges. Users can work on site or remotely so IT Agent scans is all we would really need while the on prem server would scan through printers, switches, routers, VOIP devices, etc.

[DavidPK]

Hi Rinks,

We wanted to share a helpful feature in Lansweeper that might reduce some of the scanning errors you're currently seeing in your console.

Lansweeper has a capability that allows you to configure assets scanned by the LS Agent to not be scanned agentless. This can help streamline your scanning process and potentially reduce the number of errors you encounter.

[rinks]

This was previously enabled on our configuration, however we do not use LsAgent only IT Agent as our Infrastructure team did not want to open all the ports required to get complete scans that LsAgent needed to have open. Does this setting also perform IT Agent only scans if enabled? All of our workstations have IT Agent installed but the problem comes in to play when they are on site on a branch network. We get 2 entries, one for IT Agent and one for teh on-prem scan that gives the errors that access is denied because the admin credential for Lansweeper was deleted.

[Jacob_H]

If you're talking about IP range scanning, have you tried the 'Ignore Windows' or 'Scan New Windows Only' checkbox/options?  I'm not 100% sure if the 'scan new windows only' would work or not though - I'd have to test it out and can't at the moment

[rinks]

Took me a moment to find that but it seems like one or the either would work in this case. I will try it out but it will take me awhile as we have dozens of sites and IP ranges and it doesn't seem like there's a way to toggle them all to the same setting at once.

[Jacob_H]

yah i think you'd have to run an update script via mssql to do that...  anyhoo, I know the ignore windows option works, but if I were you, I'd check out/try the 'scan new windows only' but again I'm not sure if it will work or just give you another record with access denied...  ideally you'd want to to the 'scan new windows only' so you would catch your shadow windows stuff at branches