Interpreting inventory status messages
An essential part of troubleshooting inventory issues involves exporting the Active Directory Devices report and reviewing the Inventory Status outputs. This allows us to identify why certain devices have failed inventory and how to address these issues. This article outlines the most common errors encountered during standard inventory processes, their meanings, and solutions.
If you come across an error not listed here, please report it by submitting a ticket through our Customer Portal.
Table of Contents: Inventory Status Messages
- Success
- Pending
- Access Denied
- Invalid Credentials
- Not in Scope
- No IP Address Returned by DNS
- Connection Timed Out/Unreachable/No Response From Host
- Not Detected
- WMI Error
- SMB Error
- RPC Error
- RREG Error
- Operation Cancelled
- SSH Port Closed
Success
The endpoint has been successfully inventoried.
Note: If this status appears while inventory is labeled Missing, it means the device was successfully inventoried in a previous attempt, but subsequent attempts failed. The last successful status was retained, resulting in a "Success" status.
Pending
The endpoint is currently queued for inventory. Once the inventory attempt is completed, this status will update accordingly.
Access Denied
The credentials used to access the endpoint lack the required permissions.
Resolution:
-
Ensure the credentials have one of the following permission levels:
-
Domain Admin Account with access to SMB, RPC, WMI
-
Service Account with access to SMB, RPC, WMI
-
Local Admin with adequate remote capabilities
-
Invalid Credentials
The credentials used to access this endpoint are invalid.
Resolution:
-
Verify the username and password are correct.
-
Ensure the domain is specified correctly in the domain field (not in the username field).
-
Confirm the credential has appropriate permissions (Domain Admin, Service Account, Local Admin).
Not in Scope
The endpoint is located in a subnet that is not included in the ITAM tool’s inventory scope.
Resolution:
-
Ensure the inventory scope includes all relevant subnets.
No IP Address Returned by DNS
During an Active Directory inventory, the tool attempts a reverse DNS lookup to retrieve the device’s IP address. If unsuccessful, this error appears.
Potential Causes:
-
The device is inactive.
-
The device resides in an out-of-scope subnet.
-
The DNS entry is incorrect or missing.
-
The DHCP lease expired.
Resolution:
-
Ensure the device is active and within the network scope.
-
Verify that DNS records are accurate.
-
Perform a network scan to locate the endpoint.
Connection Timed Out/Unreachable/No Response From Host
A stable network connection is required for inventory. This error indicates an issue between the host machine and the endpoint.
Potential Causes:
-
Physical network issues
-
VLAN segmentation
-
Network firewalls blocking communication
Resolution:
-
Confirm the endpoint is powered on and accessible.
-
Run a ping test from the host machine to the endpoint to verify connectivity.
-
Check firewall rules to ensure traffic is not blocked.
Not Detected
The endpoint has not yet been discovered by the tool.
Resolution:
-
Ensure the endpoint is online and within the network scan scope.
WMI Error
Windows Management Instrumentation (WMI) is a set of specifications from Microsoft for consolidating the management of devices and applications in a network from Windows computing systems. WMI provides users with information about the status of local or remote computer systems.
The tool does not have access to Windows Management Instrumentation (WMI), which is required for inventory.
Resolution:
-
Ensure TCP 135 is open between the host and endpoint.
-
Confirm the Windows Management Instrumentation service is running on the endpoint.
-
Follow our GPO guide to enable WMI.
SMB Error
The Server Message Block (SMB) protocol is a network file-sharing protocol that allows applications on a computer to read and write to files and request services from server programs in a computer network. The SMB protocol can be used on top of its TCP/IP protocol or other network protocols.
The tool cannot access the Server Message Block (SMB) protocol.
Resolution:
-
Ensure TCP 445 is open.
-
Enable File & Printer Sharing on the endpoint.
-
Refer to our GPO guide for enabling SMB.
Note: Windows Server 2003 utilizes an unsecured version of the SMB protocol v1, making standard inventory methods ineffective. To successfully inventory, ensure that WinRM is enabled on the endpoint.
RPC Error
A Remote Procedure Call is a software communication protocol that one program can use to request a service from a program located in another computer on a network without having to understand the network's details. RPC is used to call other processes on remote systems like a local system.
The tool cannot access Remote Procedure Calls (RPC), which are essential for remote service execution.
Resolution:
-
Ensure TCP 139 and 1025 are open.
-
Confirm that the Remote Procedure Call service is running on the endpoint.
-
Follow our GPO guide to enable RPC.
RREG Error
Windows Registry contains information, settings, options, and other values for programs and hardware installed on all versions of Microsoft Windows operating systems. For example, when a program is installed, a new subkey containing settings such as a program's location, its version, and how to start the program, are all added to the Windows Registry.
The tool does not have access to the Remote Registry (RREG) service.
Resolution:
-
Ensure UDP 137 is open.
-
Start the Remote Registry service on the endpoint.
-
Refer to our GPO guide for enabling Remote Registry.
Operation Cancelled
This error indicates an abrupt cancellation of the inventory process, likely due to third-party security software blocking the tool.
Resolution:
-
Check if any security software (e.g., antivirus, endpoint protection) is blocking inventory.
-
Refer to our security software whitelisting guide.
SSH Port Closed
This error appears when attempting to inventory a Linux endpoint where SSH (TCP 22) is closed.
Resolution:
-
Ensure TCP 22 is open and accepting connections.
-
Allow incoming traffic from the host machine’s IP address.