Console does all the work
Every server depends on the console for discovery, updates, and sync. Round trips on every action.
Discover, sync, and manage Windows DNS/DHCP servers with continuous and centralized visibility. Meet the DDI Central Windows Discovery Node Agent — a lightweight, secure agent that puts DNS/DHCP processing directly onto your Windows servers. No WinRM. No remote PowerShell. Just a single HTTPS channel delivering real-time discovery, continuous sync, and centralized visibility from one Management Console.
The DDI Central Windows Discovery Node Agent enables agent-based communication between your onboarded Windows DNS/DHCP servers and the DDI Central Management UI. It's a lightweight service installed directly on each Windows DNS/DHCP server, establishing a persistent, HTTPS-based channel between the server and the console.
Once installed, the agent takes over all configuration control and DNS/DHCP process management on behalf of the App Console — replacing WinRM-based (agentless) communication. Every onboarded server processes its own discovery, updates, and configuration tasks locally. The round trip to the app console is reserved only for sync and updates, giving admins centralized, continuous visibility from the Management UI.
From one-time discovery to continuous DDI visibility. With agentless WinRM, the App Console does all the heavy lifting — remotely executing PowerShell on every server. The Discovery Node Agent flips this model.
Every server depends on the console for discovery, updates, and sync. Round trips on every action.
Each server processes locally. Round trips are reserved for sync and updates — quiet, fast, always current.
Small on the server. Big on what it can do.
Low CPU and memory usage, designed to never impact server performance.
Installs in minutes on any Windows Server DNS/DHCP node via a guided wizard.
All communication flows over a single encrypted HTTPS port. Nothing else to open.
Discovery and management capabilities equivalent to WinRM-based communication.
Configuration and updates are pushed from the DDI Central console — no server-by-server maintenance.
Ideal for high-security networks, DMZ segments, and sites with strict WinRM restrictions.
WinRM struggles at scale. The Discovery Node Agent handles high-volume deployments reliably — the recommended choice for managing more than 10 Windows servers. Apply collective policies to server groups and scale without friction.
A fully capable alternative for organizations that restrict or prohibit WinRM. The agent thrives where WinRM can't — DMZs, air-gapped-adjacent segments, and compliance-heavy environments.
One HTTPS port. That's it. No PowerShell remoting, no WinRM configuration, no firewall gymnastics.
The agent detects DNS/DHCP configuration changes on the Windows server as they happen and syncs them to the App Console automatically — so your console always reflects the live state.
Onboard hundreds of servers in one go. Import via CSV or XLSX — Agent-Based or Agentless. Choose the import type, upload the file, and DDI Central onboards them all.
Update the agent itself directly from the main console. No manual patching, no logging into individual servers.
Some DDI agents in the market support only one Discovery Job per instance — meaning two servers for DNS and DHCP separately. The DDI Central agent discovers both DNS and DHCP with a single agent, in a single sweep.
Discovery isn't a one-time onboarding event. The agent continuously discovers configurations and pushes every change to the App Console — keeping it in perfect sync.
No commands. No scripts. A simple wizard on any Windows server you want to manage — configure and you're onboarded.
View and manage every onboarded server from a single console. Health, configurations, sync status — one pane of glass, always up to date.
Agent-based and agentless communication coexist in the same deployment. Switch at your own pace, or mix models per site.
Import large volumes of Windows servers via CSV or XLSX for both Node Agent and WinRM-configured servers. One import, entire fleet onboarded.
A secure HTTPS channel between each Windows server and the App Console. Reduces dependency on WinRM ports and remote PowerShell.
The agent handles DNS/DHCP configuration and process management locally on the Windows server, reducing unnecessary round trips.
Recommended for environments with more than 10 Windows DNS/DHCP servers — supports scale, improves reliability, applies collective policies to target groups.
Push agent config and updates from the DDI Central console. Apply policies across Windows server groups by site, role, environment, or security zone.
Use the Discovery Node Agent where WinRM is restricted, prohibited, or difficult to maintain across many Windows DNS/DHCP servers.
Agent-based communication uses HTTPS, reducing the need for WinRM configuration, WinRM ports, and remote PowerShell operations.
The agent detects DNS/DHCP configuration changes in real time and automatically syncs them with the DDI Central App Console.
Admins view onboarded servers, monitor changes, track health, manage updates, and apply policies — all from the main Management UI.
Ideal for DMZ segments, segmented networks, and organizations with strict server access and communication policies.
Choose the right model for your Windows DNS/DHCP infrastructure.
| Feature Comparison | Agent-Based · Discovery Node Agent | Agentless · WinRM |
|---|---|---|
| Setup | Wizard-based install — no scripts or commands | WinRM configuration required on every managed server and the console |
| Communication channel | Single secure HTTPS port | WinRM protocol + remote PowerShell execution |
| Installation on Windows server | Yes, lightweight agent | No |
| WinRM dependency | Not required | Required |
| PowerShell dependency | Reduces dependency on remote PowerShell | Uses remote PowerShell via WinRM |
| Processing model | Locally, on each onboarded Windows server — agent handles sync, monitoring, and DNS/DHCP config management | Entirely console-side; managed servers rely on the console for every action |
| DNS and DHCP discovery | Discovered together in a single sweep | Depends on console-driven WinRM communication |
| Discovery behavior | Continuous discovery + real-time change sync after onboarding | Initiated through onboarding or scheduled sync cycles |
| Round trips | Only for sync and updates | Every discovery, config update, and sync operation |
| Change detection | Agent detects and syncs changes automatically | Depends on console-driven discovery or sync |
| Connectivity requirement | Single HTTPS channel | WinRM ports and configuration |
| Centralized visibility | Yes, with continuous updates from onboarded servers | Yes |
| Centralized management | Yes | Yes |
| Agent / config updates | Pushed centrally from the console | Not applicable (no agent to maintain) |
| Scale fit | Built for large fleets | Best suited for smaller environments where WinRM is approved |
| Recommended deployment size | Larger Windows DNS/DHCP deployments (10+ servers) | Smaller or standard Windows environments |
| Security fit | Ideal for DMZs and WinRM-restricted, segmented environments | Requires WinRM enabled and permitted |
| Bulk onboarding | CSV / XLSX (Agent-Based import type) | CSV / XLSX (Agentless import type) |
| Collective policy application | Apply policies to target server groups | Managed per connection |
| Feature parity | Full | Full |
Use the Windows DDI Discovery Node Agent when any of the conditions in the right describes your environment.
DDI Central lets teams manage Windows DNS/DHCP infrastructure using either agentless WinRM or agent-based communication through the Discovery Node Agent. Agentless remains available where WinRM is approved and manageable. For larger deployments, stricter security policies, segmented networks, and continuous-visibility requirements, the Discovery Node Agent delivers a more scalable and operationally efficient model.
Answers to the most common questions about the Windows DDI Discovery Node Agent, agent-based vs agentless communication, onboarding, and centralized management.
It's a lightweight service installed directly on your Windows DNS/DHCP servers that enables agent-based communication with the DDI Central App Console over a persistent, secure HTTPS channel. Once installed, the agent handles all data transfer and DNS/DHCP process management locally on the server — replacing the need for WinRM-based communication.
With agentless communication, the App Console does all the processing — connecting to each server over WinRM and executing PowerShell scripts remotely for discovery, updates, and sync. With the Node Agent, processing happens locally on each onboarded server, and the console round trip is reserved only for sync and updates.
No. Agent-based and agentless communication run in parallel within the same deployment. You can mix models per site or per server based on your security policy, or migrate gradually at your own pace.
The Node Agent is recommended when managing more than 10 Windows servers, or in high-security environments, DMZ segments, and sites where WinRM is restricted or prohibited.
No. The agent is designed with a minimal footprint — low CPU and memory usage — so it won't impact DNS/DHCP server performance.
No scripts, no commands. Installation is fully wizard-driven — run the installer on any Windows server you want to manage, configure the agent, and it's onboarded.
Yes. A single Discovery Node Agent discovers both DNS and DHCP in one sweep — no need to deploy separate agent instances for each service.
No. The agent continuously discovers configurations and syncs every change — configurations, health, and settings — to the App Console in real time, so the console always reflects the live state of your servers.
Use the bulk import option. From the Import option in the Servers section, choose Agent-Based or Agentless as the import type and upload a CSV or XLSX file. Servers must be available and reachable during the import, and import speed scales with the number of servers in the file.
Centrally, from the DDI Central console. Agent configuration and updates are pushed from the main console — no logging into individual servers or manual patching.
All communication flows through a single secure HTTPS port. No WinRM configuration, no PowerShell remoting, and no complex firewall rules required.
Yes. The Discovery Node Agent delivers discovery and management capabilities equivalent to WinRM-based communication — the difference is where the processing happens and how the servers connect.
Yes. Every onboarded server — agent-based or agentless — is visible from the Management UI Console, giving admins and users centralized, continuous visibility into configurations, health, and sync status.
Yes. You can apply collective policies to target groups of servers, making fleet-wide configuration management fast and consistent.
Leverage DDI Central's Windows DDI Discovery Node Agent to reduce WinRM dependency, discover DNS and DHCP in a single sweep, detect configuration changes continuously, and manage onboarded Windows servers securely — all from one console. Onboard servers in bulk via CSV or XLSX, and install the Discovery Node Agent in minutes: no scripts, no WinRM, no hassle.