topic Re: identity awareness ADQuery Test Result Document share it please in Firewall and Security Management

identity awareness ADQuery Test Result Document share it please

joon — Tue, 17 Jun 2025 07:01:51 GMT

Hi All!

identity awareness ADQuery Test Result Document share it please(With WMI)

Thank You!@

Re: identity awareness ADQuery Test Result Document share it please

Chris_Atkinson — Tue, 17 Jun 2025 07:54:02 GMT

Please clarify what it is that you need?

Note it is strongly recommended to use Identity Collector over legacy ADQuery.

Re: identity awareness ADQuery Test Result Document share it please

joon — Tue, 17 Jun 2025 08:07:03 GMT

Thank you for your recommendation.
I currently need a WMI test document.
So, if you have any documents made during the test
I would appreciate it if you could share the PPT document.

Re: identity awareness ADQuery Test Result Document share it please

Chris_Atkinson — Tue, 17 Jun 2025 09:51:34 GMT

Is this for a new deployment or troubleshooting, please share more details of the environment and what is or has been deployed?

https://sc1.checkpoint.com/documents/R82/WebAdminGuides/EN/CP_R82_IdentityAwareness_AdminGuide/Content/Topics-IDAG/Troubleshooting-AD-Query.htm

Re: identity awareness ADQuery Test Result Document share it please

G_W_Albrecht — Tue, 17 Jun 2025 09:39:17 GMT

I do not know what you are talking about - find details for ADQuery and why you should not use it, but install Identity Collector instead, here: https://support.checkpoint.com/results/sk/sk60301

Did you follow https://sc1.checkpoint.com/documents/R81.10/WebAdminGuides/EN/CP_R81.10_IdentityAwareness_AdminGuide/Topics-IDAG/Configuring-Identity-Sources-Configuring-AD-Query.htm?tocpath=Configuring%20Identity%20Sources%7CConfiguring%20AD%20Query%7C_____0 ?

Re: identity awareness ADQuery Test Result Document share it please

PhoneBoy — Tue, 17 Jun 2025 16:04:33 GMT

I don't understand what a "WMI Test" document is.
Also, using WMI (and thus ADQuery) is an exceptionally bad idea as it requires a user with Domain Admin credentials, which must be stored on each gateway.
Identity Collector has no such requirement.