Spiceworks help needed

[Wong]

Ive installed it and it has scanned most of the pc's servers printers etc , however not all of them I get the "unknown" , from what ive found Ports have to be opened via gpo

Go to Computer Configuration -> Administrative Templates -> Network -> Network Connection -> Windows Firewall -> Domain Profile
Double click on the entry ‘Windows Firewall: Define port exceptions’
Select Enabled.
Click on the Show… button to bring up the port exception list dialog
Select the Add… button
Specify the required port using the following syntax/convention:
<port>:<transport>:<scope>:<status>:<name>

For example - to allow connections on port 139 from the ip addresses in the local subnet, configure the rule as follows:
139:TCP:localsubnet:enabled:SMB


Where the red is ive gotten as far as that - when it comes to adding the port im not 100% sure even though there is an exmaple - does it matter if there is "localsubnet" or can I put in an subnet there?

The following ports need to be opened :

TCP 135 + 445 Inbound
UDP 137 Inbound
TCP 1024-2000 Inbound
UDP 69 Inbound

If I have left any out please add , so for those ports what would I Type into the Define inbound port exceptions ? is that the right place under default domain policy ?

If there is anything else I have left out that I need to do as well please add it in , any help would be greatly appreciated

 

[Wong]

117 view no reply's hehe , no one setup spiceworks before in a microsoft enviroment ?

 

[InTheCube]

I think where it says localsubnet you need to substitute that for the actual value (I'm not sure what the syntax is, but probably something like 192.168.1.0/255.255.255.0). I haven't really used Spiceworks (played with it for a bit), but I'm sure you will get the right answer if you ask in the Spiceworks forums, or Googling it.

 

[Wong]

Will try something along the lines of :

Wednesday:
Test logon scripts - run scan thursday morning

Thursday:
135:TCP:255.255.225.0:enabled:Test

Friday
135:TCP:localsubnet:enabled:Test

I have never done anything like this via gpo so not 100% sure

I have however opened the ports on our AV aswell as disabling windows firewall via gpo as the spiceworks forum suggested

Also I found 2 logon scripts they suggest :

Windows 7 - Vista - Server 2008
@echo off.

netsh advfirewall firewall set rule group="windows management instrumentation (wmi)" new enable=yes

netsh advfirewall firewall set rule group="remote administration" new enable=yes

XP:

@echo off.

netsh firewall set service remoteadmin enable subnet

The .bat files I made with those only worked on a few pc's , some are still giving me unknown :/ which im assuming is the port openings as that is the only thing I think I still have to figure out how to do properly

I havent found any definite info regarding the port opening via gpo - they just mention that you have to do it - The How is my problem atm ?

 

[tolstoshev]

Spiceworks community manager here - we have a troubleshooting guide for unknowns here:
http://community.spiceworks.com/help/Resolving_Unknown_Devices
If that doesn't help, you can get free support by emailing [email protected]
Hope that helps!