Announcing the Saviynt Knowledge Exchange unifying the Saviynt forums, documentation, training,
and more in a single search tool across platforms. Read the announcement here.

Can we install both ADSI & Win-PS agent on one VM. Since both the agents are hosted on IIS server.

Sakshi
New Contributor
New Contributor

Kindly suggest, if it's possible to co host both ADSI and Win PS agents. If not or its not recommended, what's the rationale behind it. 

2 REPLIES 2

vivek9237
Regular Contributor
Regular Contributor

Yes you can install both the agents in one environment, just make sure that they are running on different ports.

 

Regards,

Vivek Mohanty


If this reply answered your question, please click the Accept As Solution button to help future users who may have a similar problem.

rushikeshvartak
All-Star
All-Star

Co-hosting both ADSI (Active Directory Service Interfaces) and Win-PS (Windows PowerShell) agents on a single VM is technically possible, but whether it's recommended depends on several factors related to performance, security, and management. Here are some considerations to help you decide:

Technical Feasibility

  • Resource Utilization: Ensure the VM has sufficient CPU, memory, and disk resources to handle both agents. Running multiple services can lead to resource contention, which might impact performance.
  • Port Conflicts: Verify that the ADSI and Win-PS agents do not require the same ports. If both agents need to use IIS, ensure that they are configured to use different sites or virtual directories to avoid port conflicts.
  • Compatibility: Confirm that there are no software conflicts between the versions of ADSI and Win-PS agents you plan to use. Check the documentation for any known issues when running them on the same machine.

Recommendations

Pros of Co-hosting

  1. Cost Efficiency: Running both agents on a single VM can save on hardware and licensing costs.
  2. Simplified Management: Managing one server might be simpler than managing two separate servers.

Cons of Co-hosting

  1. Performance Impact: Both agents might consume significant resources, leading to potential performance degradation, especially under high load conditions.
  2. Security Risks: Hosting multiple services on the same VM can increase the attack surface. A vulnerability in one service could potentially compromise the other.
  3. Complexity in Troubleshooting: Identifying and resolving issues can be more complex when multiple services are hosted on the same server.

Best Practices

  • Resource Allocation: Ensure the VM has enough resources (CPU, RAM, Disk I/O) to handle the workload of both agents. Monitor the performance and adjust as necessary.
  • Isolation: Consider using different application pools in IIS to isolate the two agents. This can help with resource allocation and improve security.
  • Regular Updates: Keep both agents and the underlying OS updated to mitigate security vulnerabilities.
  • Monitoring and Logging: Implement robust monitoring and logging to quickly identify and resolve any issues that arise from co-hosting the services.

Rationale Against Co-hosting

If you decide against co-hosting, the primary reasons would be:

  1. Performance: Dedicated resources ensure that each service runs optimally without impacting the other.
  2. Security: Isolating services on different VMs reduces the risk of a security breach affecting multiple services.
  3. Simplified Troubleshooting: Easier to diagnose and fix issues when services are isolated.

Conclusion

While it is possible to co-host ADSI and Win-PS agents on a single VM, careful consideration must be given to resource allocation, security, and management complexity. If performance, security, or troubleshooting concerns are significant, it may be prudent to host them on separate VMs. If cost and simplified management are higher priorities and your infrastructure can support it, co-hosting might be a viable option.

 

Regards,
Rushikesh Vartak
If you find the response useful, kindly consider selecting Accept As Solution and clicking on the kudos button.