Why a domain administrator is required to discover domain controllersIssue To discover Windows domain controllers, a domain administrator is required because ServiceNow Discovery runs on Windows Management Instrumentation (WMI). A Windows domain controller does not use an administrators group like other servers or workstations in the network normally have. ReleaseAllResolution Discovery runs remote WMI queries from the MID server while discovering Windows-based machines. For domain controllers, the user who runs the remote WMI queries needs to be included in either: the domain administrators groupthe local administrators group By default, these do not exist on a domain controller. This is a Microsoft Active Directory Domain Controller design limitation. Related LinksCredentials required for host discovery