Step 8: Discovery

Secret Server has a discovery feature that can automatically find local Windows accounts, Active Directory service, Unix, VMware ESX/ESXi, and Active Directory domain accounts. Account and dependency types not supported out-of-the-box in Secret Server can still be discovered by writing PowerShell scripts that can be run as custom scanners. This allows administrators to quickly import accounts found by Secret Server on specified domains or IP addresses.

To run discovery on a domain, IP address range, or a custom source, you need to first enable the discovery feature for Secret Server. Second, you must enable discovery for each discovery source you would like to be scanned.