Obtain a list of user accounts and their properties.

Perform a basic refresh of the target system.

Specific to Privileged Identity, you will be able to: Windows will permit some basic management while only opening up the remote administration port, port 445.

Basic Management and Services - Account discovery, password change, Windows services.

The next logical choice is to open the firewall to permit management from the Privileged Identity host servers (console, deferred processors, zone processors) to the various sub-systems on a target Windows machine.

While the firewall can be disabled, this is not always an option for many clients. Unless the firewall is turned off or opened up a little, no remote management of such a system can occur. Windows systems ship with their local software-based firewall enabled out of the box. This article describes the establishment of certain firewall rules relevant to the Windows firewall to permit remote management. The Local Windows Firewall is Enabled and Nothing can be Managed

Windows remote firewall management