Re: Security woes

From: [MS] Scott McNairy (scotmc_at_online.microsoft.com)
Date: 04/21/04 

Date: Wed, 21 Apr 2004 11:40:57 -0700

>From what I see, you are trying to use a moniker for remote access using a
local user account correct?

If that is the case, you will want to use the SWbemServices.ConnectServer
call instead.

set lctr = createObject("wbemScripting.SwbemLocator")
set svc = lctr.ConnectServer("remotemachine", "remotemachine\user",
"password")

The security settings for domain users will need to be applied to each
computer that you want to grant them access too. 

-- 
[MS] Scott McNairy
WMI Test Engineer
This posting is provided "As Is" with no warranties, and confers no rights.
Use of included script samples are subject to the terms specified at
http://www.microsoft.com/info/cpyright.htm
"Hugo M. Ranea" <hmranea@shaw.ca> wrote in message
news:e%23Hcx38JEHA.428@TK2MSFTNGP11.phx.gbl...
> Hello,
>
>
> I wrote lots of WMI scripts for testing/learning purposes, now that I
> created a real program, it works fine with me (I have admin rights on
> all computers in the network) but if anyone else tries to run the
> program, it will work fine if it is info on the local computer, but it
> fails for remote ones, for example
>
> if  lcComputer is "." or "localhost" then
>
> loWMIService        = GetObject("winmgmts:\\" + lcComputer +
"\root\cimv2")
>
> works no problem, but if lcComputer is any remote computer, the user
> gets the "Moniker can not open file" message.  For example, lets say
> that user 'USER1' is trying to create loWMIService on my machine, I
> added him as an user with administrator rights to my machine, as well as
> editing the  "WMI Control Properties" Under Computer Managemente ->
> Services and Applications -> WMI Control, in the "Security" tab,
> "Security" for root  I added USER1 with full access for root and all
> "This namespace and subnamespaces", but still no luck, he gets the same
> message
>
> I know very little about WMI and ZIP about Windows security, can somene
> please help me? What did I miss?
>

Relevant Pages

  • Re: Strange Problems with GetOwner
    ... IMO it is not a directly problem of WMI or settings of ... the settings of the security rules to get data via WMI, ... > remote, but when I try to GetOwner the strange results begin. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Group policy results wizard - Access denied
    ... I"m assuming that you're connecting as a member of the local Administrators group on those remote machines? ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... I have created a new OU, moved a test machine into it and reset the security on the local box by running ... I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. ...
    (microsoft.public.windows.group_policy)
  • RE: DCOM Settings
    ... message when trying to connect to WMI on a remote machine. ... registry keys if you've already verified your security settings are correct. ... > To access WMI remotely both WMI and DCOM security need to be set, ...
    (microsoft.public.win32.programmer.wmi)
  • Re: connect to bastion host via WMI
    ... Is there anything similar to what u solved with a NT server ?? ... the same problem with connection to two remote (in sense the connection from ... Still I get Wmi Access denied ...I am fully exhausted of all options ... ... > 2) Within the Local Security Policy under Security Options, ...
    (microsoft.public.win32.programmer.wmi)
  • RE: Downloading Problem
    ... Event Type: Error ... WMI Windows Management Instrumentation ... The Windows Security Center Service has started. ...
    (microsoft.public.windowsxp.help_and_support)
Loading