These steps describe how to create a domain account for authentication and add the account to the Domain Administrators Group. After completing these steps, you must set group policy settings and then verify the functionality of the account before using it for trusted scanning.
Note that the username "qualys" is reserved for special QIDs. Please do not create the user account "qualys" for authentication, as this account will likely be locked out when running a scan.
Log into the Domain Controller with an account that has administrator rights.
Open the Active Directory Users and Computers MMC snap-in.
Create a new user called "qualys_scanner". Set scope to "Global" and type to "Security".
Select the "qualys_scanner" user and go to Properties (Action > Properties).
In the Properties window, go to the "Member Of" tab. Click Add to add the "qualys_scanner" user to the "Domain Admins" group. Click OK to save the change.
