I have a scenario I'm keen to understand a little better.
I have 400+ assets not scanned for many months. Before purging, I decided to add them to a group and run a Lite Inv Scan (With authentication).
The results came back with 146 hosts alive. Immediately, I kicked off another scan, this time using a standard option profile on those 146 assets. Despite my scan being kicked off almost immediately, only 21 were found online with the standard scan profile, authenticated.
The assets did include some potential DHCP clients but these are tracked by DNS/NETBIOS.
I fully accept that assets can go offline, especially in a large, multi timezone environment like ours but the difference of 125 assets in the space of 30 minutes or so is a little hard to swallow.
Anyone got any thoughts/suggestions?