How agentless discovery of a Windows host works

Last published : Jun 19, 2026
To perform agentless discovery of a remote Windows host, Veritas InfoScale Operations Manager runs a script that executes data-gathering commands. The script uses Windows Management Instrumentation (WMI), a Windows management technology that is used to work with remote hosts. The WMI calls use Microsoft's Distributed Component Object Model (DCOM) to obtain the data from the host. Veritas InfoScale Operations Manager creates a private local user account (vomuser) on Management Server or a Control Host to facilitate its use of DCOM. To communicate between Veritas InfoScale Operations Manager Control Host and the remote host, WMI uses port 135.
Veritas InfoScale Operations Manager uses WMI in two ways:
  • First, WMI contacts a service that runs on the remote host and invokes the service to perform the actions that collect data about the host. As it collects data, WMI sends the data back to the Control Host.
  • Second, WMI invokes command line tools such as nslookup and fcinfo. The output from the command line tools saves to a data file on the remote host in the %systemroot%\temp directory. Veritas InfoScale Operations Manager copies the file from the host's mapped admin$ filestore, sends it to Veritas InfoScale Operations Manager Control Host, and deletes the file from the remote host.
To perform this discovery process, Veritas InfoScale Operations Manager requires a local administrator account for the remote host.
Figure: Agentless discovery of Windows hosts depicts how Veritas InfoScale Operations Manager performs agentless discovery of Windows hosts.
Figure: Agentless discovery of Windows hosts
Agentless discovery of Windows hosts
More Information
Related information