Re: Non-Admin access to Win32_DiskDrive, Win32_PNPEntity

WMI User Manager* An application that allows you to create authorized
WMI users and set their access permissions. You use this application to
manage user authentication and access to CIM objects for WMI.

It's in the WMI SDK which is a free download. It has all of the
instructions.
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/wmi/swbemobjectex_systemproperties_.asp


--
Jim Vierra

"Shayne Smyth" <shayne@xxxxxxxxxxxxxxxx> wrote in message
news:ecBAMh8VFHA.1384@xxxxxxxxxxxxxxxxxxxxxxx
> Hi Gary,
> Will changing the Security descriptor fix my problem of accessing the
> Win32_DiskDrive with a non-admin account.
> I am only guessing it might have something to do with the SD.
>
> Shayne
>
>
>
> "Gary Chang[MSFT]" <v-garych@xxxxxxxxxxxxxxxxxxxx> wrote in message
> news:TeSe5Z6VFHA.3928@xxxxxxxxxxxxxxxxxxxxxxxx
>> Hi Shayne,
>>
>>>After months of research I believe the resolution is in being able to
>> change
>>>the Security Descriptor for the Win32_DiskDrive Object or somewhere in
>>>the
>>>COM Interfaces security settings.
>>>But I cannot find out anywhere how to do this.
>>
>> "The security descriptor is packed as safe array of bytes and after a
>> simple SafeArrayAccessData you have a pointer to a plain
>> SECURITY_DESCRIPTOR, accessible using NT security functions. "
>>
>> If you want to modify the Security Descriptors for WMI objects, please
>> refer to the following newsgroup thread for detailed informations:
>> http://groups-beta.google.com/group/microsoft.public.win32.programmer.wmi/br
>> owse_frm/thread/8820fc82a03fa5af/187de349c56cf806?q=Change+%22Security+Descr
>> iptor%22+for+WMI+Object&rnum=7&hl=en#187de349c56cf806
>>
>>
>> I hope the above information helps, thanks!
>>
>> Best regards,
>>
>> Gary Chang
>> Microsoft Community Support
>> --------------------
>> Get Secure! ¡§C www.microsoft.com/security
>> Register to Access MSDN Managed Newsgroups!
>> http://support.microsoft.com/default.aspx?scid=/servicedesks/msdn/nospam.asp
>> &SD=msdn
>>
>> This posting is provided "AS IS" with no warranties, and confers no
>> rights.
>>
>
>


.

Relevant Pages

  • WMI Health assistance for XP Workstations - DCOM/WMI
    ... We have been trying to implement various Client Server Applications ... Secondly our local Workstation imaging department is using Ghost ... Programmer mentioned that about a 1/3 of our machines on our network have WMI ... security descriptor and adding the ACE. ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Management Instrumentation: wmic is not recognized...
    ... WMI service is running, and below is the report of WMI Diagnostic ... DOES NOT match corresponding expected trustee rights ... the security descriptor and adding the removed right. ...
    (microsoft.public.windowsxp.general)
  • WMI Security Issue
    ... The following command does not work when ran ... However, if the WMI service is stopped, ... the security descriptor and adding the ACE. ...
    (microsoft.public.win32.programmer.wmi)
  • WMIDiag Errors
    ... (caused by running a software that uses WMI ). ... the trustee. ... security descriptor and adding the ACE. ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Altering permissions on a share or NTFS folder
    ... You can set the security descriptor for the shares with WMI.. ... Here is a couple of examples on the SetSecurityDescriptor method in Class ... -- torgeir, Microsoft MVP Scripting and WMI, Porsgrunn Norway Administration scripting examples and an ONLINE version of the 1328 page Scripting Guide: ...
    (microsoft.public.windows.server.scripting)
Loading