Adding WMI Domain Controller to School Manager

Windows Management Instrumentation (WMI) receives logon events from the Domain Controller and can communicate authenticated users and machine identities to School Manager.

Before you begin

• Sync from your directory service or manually create Local Users and Groups in School Manager before enabling WMI.
• Complete the Enabling WMI to Work with School Manager.

Configuring WMI in School Manager

1. Navigate to Configuration > Authentication > WMI
2. Select Add Domain Controller.
3. A new row will appear, select the Edit icon.
4. Tick Enabled.
5. Select Type. You can select from Radius NPS Logins or Domain Logins.
6. Enter the Server IP address for your Domain Controller.
7. Enter the Domain. For example domain.local 
8. Enter the Username of the service account.
9. Enter the Password of the service account.
10. You have the option to enter any User Exceptions. Any user selected here will not be authenticated. This is commonly used for Administrator accounts that run background scripts or processes. Any users entered will need to be comma-separated with no spaces.
11. When complete, select Save.

Verify WMI Integration

1. Log into the school’s network using a test user on a test device.
2. In your Windows Administrative Tools, go to the Domain Controller Security logs.
3. In the Windows Event Viewer, find the event code "4768" to verify the “Audit Success” matches the time you logged in with the test user.

Alternatively, in School Manager go to Statistics > Realtime > Alerts and Events and search for “provider.wmi.dc” events.