Remotely accessing WMI information without using a Local Administr

  • Thread starter Thread starter Chris Gibbs
  • Start date Start date
C

Chris Gibbs

Guest
Hi All,

Just wondering if anyone has any ideas how to do this please?

We are trying to get access to WMI information on a Windows Server 2003 and
Windows Server 2003 SP1 box.

I have setup a domain user account and added this account to the security
permissions for WMI. I have also added this account to the DCOM Security
Settings for "Launch and Activation permissions" with full remote control on
both.

I am still receiving a error when I'm running a script to poll data.
"80041003 - Access Denied"

There is no problem with the script as I have successfully tested when the
domain user is added to the local administrator group.

Any help would be greatly appreciated.

Cheers

Chris
 
Re: Remotely accessing WMI information without using a Local Administr

Chris Gibbs wrote:

> Just wondering if anyone has any ideas how to do this please?
>
> We are trying to get access to WMI information on a Windows Server 2003
> and
> Windows Server 2003 SP1 box.
>
> I have setup a domain user account and added this account to the security
> permissions for WMI. I have also added this account to the DCOM Security
> Settings for "Launch and Activation permissions" with full remote control
> on
> both.
>
> I am still receiving a error when I'm running a script to poll data.
> "80041003 - Access Denied"
>
> There is no problem with the script as I have successfully tested when the
> domain user is added to the local administrator group.
>
> Any help would be greatly appreciated.

This behavior is expected. You must be a member of the local administrators
group to connect remotely to a computer with WMI. You can add the user, or
better yet a domain group, to the local administrators group.

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--
 
Back
Top