---
title: "IT Asset Discovery"
canonical: https://harmony.io/platform/asset-management/asset-discovery
---

# IT Asset Discovery

Find every device on your network and every peripheral on every desk, through the MDM you already run, with no appliance or new agent to install.

## IT asset discovery with no new agent

Find the devices nobody enrolled, the monitors and peripherals no system tracks, and what is on every subnet, using the endpoints you already manage.

## What is IT asset discovery?

IT asset discovery is finding everything connected to your environment, including what nobody enrolled. MDM sees the laptops that were set up through it. It does not see the printer on the third floor, the unknown device on an office subnet, or the monitor, dock and keyboard on every desk.

Harmony starts from your MDM. Connect Jamf, Microsoft Intune, Kandji, JumpCloud or another MDM and every managed device syncs into the inventory. A discovery script, deployed through the same MDM, then runs an ARP scan of each managed endpoint's local subnet and reports what answers: IP address, MAC address, vendor and, where available, model. No appliance is required, only one managed Windows or macOS endpoint per network segment.

On Windows, native PowerShell and WMI plus EDID data from displays identify USB devices, Bluetooth peripherals and monitors by make and model, with no additional agent. Discovery policies decide what lands in the inventory, by vendor and model or by network, using CIDR subnets and Wi-Fi SSIDs. For the manual version of the job, see [how to find unmanaged devices](https://harmony.io/insights/find-unmanaged-devices).

## See what nobody enrolled

- **MDM sync:** Connect an MDM and every enrolled device lands in the inventory automatically.
- **Network discovery:** An ARP scan of each managed endpoint's subnet finds IP, MAC, vendor and model, with no appliance to deploy.
- **Peripheral discovery:** USB devices, Bluetooth peripherals and displays identified on Windows through PowerShell, WMI and EDID data.
- **Exact models:** 65 Logitech Bluetooth models resolved to their product name, and displays to their make and model.
- **Discovery policies:** Vendor and model rules, plus network rules by CIDR subnet or Wi-Fi SSID.
- **Custom scripts:** Your own MDM scripts can post results to Harmony over HTTPS with an access key, validated on Kandji and JumpCloud.
- **Unmanaged at a glance:** Discovered assets show as not managed in the inventory, next to the devices your MDM reports.

## How asset discovery works

**Trigger:** A device joins the network, a monitor is plugged in, or an endpoint stops reporting.

1. **Connect your MDM** - Managed devices sync into the inventory as soon as the MDM is connected.

2. **Deploy the discovery script** - Push the discovery script from Asset Management to your managed endpoints through the MDM.

3. **Find what isn't managed** - Each endpoint scans its local subnet and reports its peripherals and displays, and new finds land in the inventory as not managed.

4. **Assign or act** - Agents look for devices with no owner, missing EDR and devices that stopped reporting, and route them to the right team.

**Outcome:** An inventory that includes what nobody enrolled.

## Kith connected its estate in 25 minutes

Kith, a retailer with close to 1,000 employees and about 20 stores, wanted asset management across ManageEngine, Kandji and Apple Business Manager in the same place as its service desk. Google SSO, Slack, ManageEngine, Apple Business Manager and Freshservice were connected in about 25 minutes on the kickoff call, and Kandji followed.

> All the things I asked for that were missing, this is exactly it. For the stores, it's paradise.
>
> - Adi Shniderman, Head of IT, Kith

## Agents that act on what discovery finds

- [Asset Activity Detection](https://harmony.io/agents/asset-activity-detection)

- [Unassigned Assets](https://harmony.io/agents/unassigned-assets)

- [EDR Status Discovery](https://harmony.io/agents/edr-status-discovery)

- [EDR Misconfiguration Detection](https://harmony.io/agents/edr-misconfiguration-detection)

- [Discovered Applications Review](https://harmony.io/agents/discovered-applications-review)

## Discovery through the tools you already run

- **MDM: **[Jamf Pro](https://harmony.io/integrations/jamf-pro), [Microsoft Intune](https://harmony.io/integrations/microsoft-intune), [Kandji](https://harmony.io/integrations/iru-kandji), [JumpCloud](https://harmony.io/integrations/jumpcloud), [NinjaOne](https://harmony.io/integrations/ninjaone), [Mosyle](https://harmony.io/integrations/mosyle), [Fleet](https://harmony.io/integrations/fleet)
- **EDR: **[CrowdStrike](https://harmony.io/integrations/crowdstrike), [SentinelOne](https://harmony.io/integrations/sentinelone), [Microsoft Defender for Endpoint](https://harmony.io/integrations/microsoft-defender-for-endpoint)
- **Network: **[Cisco Meraki](https://harmony.io/integrations/cisco-meraki), [Juniper Mist](https://harmony.io/integrations/juniper-mist)

## FAQ

### What is IT asset discovery?

Finding every device and peripheral connected to your environment, including the ones nobody enrolled, and adding them to the asset inventory with enough detail to act on.

### Do we need to install an agent or an appliance?

No. Discovery runs as scripts through the MDM you already use, and network discovery needs one managed Windows or macOS endpoint per network segment. No appliance is required.

### What does network discovery find?

Devices that answer an ARP scan on each managed endpoint's local subnet, with their IP address, MAC address, vendor from the MAC prefix and model where available.

### Which peripherals does Harmony identify?

USB devices, Bluetooth peripherals and displays on Windows, using PowerShell, WMI and EDID data. Logitech Bluetooth devices resolve to their exact model across 65 supported models.

### What happens to a discovered device?

It lands in the inventory as not managed. Discovery policies use vendor, model, subnet and Wi-Fi rules to decide which discovered devices are tracked, and agents route devices with no owner or missing security tools to the right team.