An IT professional is configuring the OnGuard agentless solution for a company's Windows clients.

Unlike agent-based solutions where the client initiates contact, Agentless OnGuard requires ClearPass to "reach out" to the Windows endpoint using WMI and SMB. For ClearPass to have the necessary permissions to perform these remote administrative tasks on domain-joined machines, the ClearPass Policy Manager server must itself be joined to the Active Directory domain . This allows the server to use domain administrator or service account credentials to authenticate against the target endpoints.