General requirements to scan Windows servers with the OC SPLA Manager are:
- Appropriate network ports must be open on the Windows servers: TCP 135, TCP 139, TCP 445, TCP 5985/5986 (Remote Powershell), TCP 49152-65535 (RPC Dynamic TCP port range), UDP 137, ICMP (ping) – required for all target machines.
- TCP 1433 (SQL default), and additional per-instance SQL network ports, as per the SQL Server Configuration manager (required only for SQL Server Standard user scan).
- TCP/UDP port 88 (Kerberos Auth), TCP/UDP port 389 (LDAP) – required towards any AD Domain Controllers, in addition to the above network ports.
- TCP 80/443 – required towards Exchange servers.
- WMI service must be enabled/active.
- Server service must be enabled/active.
- Remote registry service must be enabled/active.
- Remote Powershell must be enabled.
- File and Printer Sharing/Client for Windows Networks and NetBIOS must be enabled on the Scanned servers, and the OC scanner server so the OC scanner can access the given servers.
If the issues are intermittent (happening from time to time/randomly), try reconfiguring the scan time, so we can exclude any network/server maintenance as the cause of the scan issues.