Create file server resource scan service

This Windows service is required to read out the desired file server resources, with all meta information, from the directories and into them migRaven Database to be able to write.

Normally the service is on the migRaven Server & Hosting installed and, since version 20061.1, can also run directly on a file server in the same domain. The instructions for this can be found at the end of the article.

Installing the Resource Scan Service on the migRaven Server & Hosting


After you have scanned your Active Directory and your first migRaven administrators have defined is the Resource Scan Service to install. Without a scanning service installed, you will not be able to scan a file server resource, i.e. a Group Policy Project to apply.

Setting up a remote service

Öffnen Sie die Configuration (1) and select from the context menu Remote services (2)



Öffnen Sie die Resource Scan Services (3) and select New Resource Scan Service (4)



Carry them under Machine (5) the FQDN of the migRaven Servers one, leave it Port (The Harbour District) unchanged (6), enter the previously created service user for the resource scan, including the leading domain (7), and its password (8) and validate your entries (9).

Brequired Windows service accounts for migRaven.24/7

If you are in connection with the Export path (10) if an error message is displayed, check whether the directory has been created correctly. If the directory cannot be created automatically, please create it manually under the path and ensure that the resource scanning service user has write access to the folder.

\\FQDN server\c$\ProgramData\migRaven\ Resource Scan Service \ Export



After you have entered all the data correctly, install the service (11)


Do you have yours migRaven Server & Hosting set up following our system requirements and the Port (The Harbour District) Left unchanged, confirm the following message (12), this refers to the firewall release.

Required port forwarding



Then start the service (13).


After starting the service, switch back to Home (14) to begin setting up a Group Policy project.


Now that everything is configured, you can start creating Group Policy projects.

Please read the article about this Set up scans of shares (create projects) .

Install Resource Scan Service (RSS) on other servers


A cross-domain scan of resources is not possible. The target server must be in the same domain as the migRaven servers are located.

The RSS is usually hosted on the same server as the migRaven Installation operated.

Since release 20061.1, the RSS can also be installed directly on a file server, for example to alleviate bottlenecks in the WAN route.

When the resource scan service is installed on a remote file server, only targeted shares in this environment can be scanned. Scanning a DFS namespace is not possible this way.

To do this, please follow the steps below:

The operating account must be registered as a Service Principal Name (SPN) on the target server (e.g. a file server in the same domain).

To do this, run the command line query as administrator from the target server on which the service is to be installed. Run the following line:

setspn -s http/

For example:

Result:


Open the Active Directory Users and Computers Management and activate the option in the user's settings on the Delegation tab Trust users when delegating all services (Kerberos only)


The new service can then be pushed to the target server and started.

To do this, please proceed as described above. The main difference between setting up the Resource Scan Service on a different server is that the machine is configured with the FQDN of the target server.

In any case, leave the export path on the target server. Here the information is packaged in order to transport it collectively over the WAN route.


Make sure that the service account has the "Log on as a service" right in the Local Security Policies, if this is not filled in automatically.


Also make sure that ports 8999 and 8077 are open on both the migRaven Server & Hosting and on the target server are open in both directions.

If the connection to the target server is rejected when setting up the scan via the service, share the export folder on the target server and authorize Scan Service User with full access to the share.







Permanent link to this post: https://help.migraven.com/resource-scan-service-anlegen/