Share via

Scan Windows devices

  • Article

This article describes how to scan Windows devices in Movere.

Before you begin

  1. Check that Windows devices are supported for scanning.
  2. Verify internet access. Devices that upload data payloads directly to the Movere cloud need internet access, and must be able to connect to Movere URLs.
  3. Check the permissions needed for scanning Windows devices.
  4. Check the Movere files you need to allow on target Windows devices.
  5. Check the ports used for scanning Windows devices.

If you're scanning for Windows devices in a large domain, or in a domain with lots of stale objects, we recommend that you run an Active Directory scan first, and then rescan for Windows devices. This shortens scanning time by identifying active Windows devices to target.

Run a scan in the Console

Scan Windows devices in the Movere Console, as follows:

  1. In the Movere console > Getting Started, select First scan.

  2. To run an inventory scan, select Windows Devices.

  3. To run an actual resource consumption scan, select Windows ARC. You can only run a resource consumption scan together with an inventory scan.

  4. Click Next.

    Select what you want to scan

  5. In Scanning Method, we recommend you leave the default setting. Learn more.

  6. In Domains, select the domains you want to scan.

    • By default the Console shows the domain in which the Console machine is located.
    • You can specify a different domain in FQDN format (corp.company.com), by typing into the domain-text box provided.
    • You can scan a single domain, or select multiple domains for a forest-wide scan.
    • For multiple domains, Movere shows all of the domains and trusts that are visible from the domain you specify.

    Scan domains

  7. In Windows Devices, select what you want to scan.

    • Windows Servers Only: Scan devices with a Windows Server operating system.
    • Windows Workstations Only: Scan devices with a Windows Workstations operating system.
    • Specific Devices: Scan specified devices using FQDN, NetBIOS name, or IP address.

    Note

    If you're running an actual resource consumption scan, you only scan Windows Servers, or Specific Devices. If you run only an inventory scan, you can also select to scan Windows workstations.

  8. If you're running a resource consumption scan, in ARC, specify how often and until when consumption data is collected.

    Note

    B-series VM SKU will be recommended only if atleast 7 days of resource consumption data is collected.Learn More to enable B-series recommendation for all or specific devices.

  9. Optionally select to collect SQL consumption data.

    Specify consumption scan settings

  10. In Uploading Scans, select whether you want to automatically upload scans to the Movere portal, and whether you want to upload scans directly from scanned devices. Learn more about data upload options.

    Select an upload method

  11. In Manage Credentials, click Add.

  12. In Account type, select Windows.

    • You must add at least one account to begin a scan. You can one or more accounts.
    • Add Windows credentials in the format domain\username.
    • The account isn't validated during this step.
    • Credentials aren't stored in plain text, and aren't uploaded to the cloud.
    • If you're scanning SQL data, ensure SQL Server scanning permissions.
    • Learn more about scanning permissions.

    Add credentials

  13. In Credential Mapping, map the credentials you're using to the relevant domains.

    • You can use one account across all targeted domains, or map multiple accounts. Learn more.

    Manage credentials

  14. In Initiate Scan, click Scan to beginning scanning the selected devices.

  15. You can track progress in the progress window.

    • Actions performed during the scan are logged in the Log.service files in the Movere Console/Logs folder.
    • To stop the scan manually, click Stop.
    • When the current scan completes, the Movere console will automatically refresh itself to initiate scan window.

Run a scan from the command line

Scan Windows devices from the command line. To do this, users need to configure the scan, add credentials using console UI and then run the scan from the command line, as follows:

  1. In the Movere console > Getting Started, select First scan.

  2. To run an inventory scan, select Windows Devices.

  3. To run an actual resource consumption scan, select Windows ARC. You can only run a resource consumption scan together with an inventory scan.

  4. Click Next.

  5. In Scanning Method, we recommend you leave the default setting. Learn more.

  6. In Domains, select the domains you want to scan.

  7. In Windows Devices, leave the default option selected. You specify what you want to scan in the command line.

  8. If you're running a resource consumption scan, in ARC, specify how often consumption data is collected, and for how long.

  9. Optionally select to collect SQL consumption data.

  10. In Uploading Scans, select how you want to upload payloads to the cloud.

  11. In Manage Credentials, click Add to specify the credentials that Movere uses to scan the Windows devices.

  12. In Credential Mapping, map the credentials you're using to the relevant domains.

  13. Close the Movere Console.

  14. As an administrator, open an elevated command prompt, and navigate to the Movere Console folder (for example: C:\Movere\Console).

  15. Run a scan on the required devices. For example:

    • Run an inventory scan for all devices in a domain: Movere.Service.exe -devices -all -domain:domain.com -startlistener
    • Run an inventory and resource consumption scan for all devices in a domain: Movere.Service.exe -devices -all -domain:domain.com -arc -startlistener
    • Run an inventory and resource consumption scan for Windows Server devices in a domain: Movere.Service.exe -devices -servers -domain:domain.com -arc -startlistener
    • Run an inventory scan on all Windows workstations in a domain: Movere.Service.exe -devices -workstations -domain:domain.com -startlistener
    • To disable automatic uploading, remove the -upload flag from the command line argument.

Scan a subnet

For Windows devices, you can only scan a subnet from the command line:

  1. Follow the previous procedure to scan from the command line.

  2. From the command line, run a scan as follows:

    • Movere.Service.exe -device:10.22.4.0/22 -upload -startlistener
    • To disable automatic uploading, remove the -upload flag from the command line argument.

Rescan Windows devices

The rescan option is useful to target devices that weren't targeted during a first scan.

  • During a rescan, Movere only targets active Windows objects. This reduces scanning time because Movere doesn't try to connect to Windows devices that don't exist.
  • Before you start, decide which method you want to use to create/download a rescan file.

  1. Create a rescan file that includes the devices you want to scan.

  2. Add the rescan file (.csv) to the DevicesToRescan folder (in the Movere Console root folder).

  3. In the Console > Getting Started, select Rescan.

  4. In What devices would you like to scan, select the devices you want to rescan, or Browse for a rescan file. Then click Next.

    • If you select a specific device option, a rescan file is downloaded from your Movere tenant. It contains the device type you selected, for devices in an Active state, that haven't been inventoried directly by Movere.
    • Alternatively, you can browse for a custom rescan file.

    Select the rescan file

  5. In Scanning Method, select how you want to scan. Learn more.

  6. In Domains, click the domains that you want to scan.

  7. In Uploading Scans, specify how you want to upload payloads to the cloud. In Manage Credentials, click Add to specify the credentials that Movere uses to scan the Windows devices.

  8. In Credential Mapping, map the credentials you're using to the relevant domains.

  9. In Initiate Scan, click Scan to beginning scanning the selected devices.

Rescan from the command line

To run a rescan from the command line, do the following:

  1. Follow the instructions in the previous section, to configure settings in the Console.

  2. If you choose to collect resource consumption data during a rescan, configure the duration and frequency of the actual resource consumption scan, prior to running the rescan from the command line.

  3. After mapping credentials in Credential Mapping, close the Console.

  4. As an administrator, open an elevated command prompt, and navigate to the Movere Console folder.

  5. Run a rescan as follows:

    • Movere.Service.exe -rescan:domain -upload -startlistener
    • To enable actual resource consumption scan, add the -arc flag from the command line argument.
    • To disable automatic uploading, remove the -upload flag from the command line argument.

Next steps

Learn about scanning in Movere.