Re: Remotely accessing WMI information without using a Local Administrator Account

Hi,

You'll have to be more clear about what you mean by "information". Some types of information are ONLY available to Administrators. I also seem to remember things that used to work as standard user on Win2k stopped working on Win2k3. First thing to do, is log the domain user directly into the Win2k3 box, and see if the WMI still says Access Denied. If it does, it's a WMI issue, if it doesn't it's a DCOM issue.

Chris wrote:
Hi All,

Just wondering if anyone has any ideas how to do this please?

We are trying to get access to WMI information on a Windows Server
2003 and Windows Server 2003 SP1 box.

I have setup a domain user account and added this account to the
security permissions for WMI. I have also added this account to the
DCOM Security Settings for "Launch and Activation permissions" with
full remote control on both.

I am still receiving a error when I'm running a script to poll data.
"80041003 - Access Denied"

There is no problem with the script as I have successfully tested when
the domain user is added to the local administrator group.

Any help would be greatly appreciated.

Cheers

Chris


--
Gerry Hickman (London UK)
.

Relevant Pages

  • Re: Server 2003 Administration Pack Security Flaw?
    ... I'm not able to reproduce this with a test domain user account on my Windows ... the Domain Admin, Enterprise Admin, Administrators, or the Account Operators ...
    (microsoft.public.windows.server.active_directory)
  • Re: Domain Users with Administor Rights to XP
    ... Add the Domain Users group to the Administrators group on each workstation. ... I need> them to login to any Windows XP Pro workstation with a NT> 4.0 Domain account. ... How can I> automaticly make every domain user have administrator> rights on XP workstations. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: DCOM, WMI and Access Rights
    ... account, I can access the stand-alone server using WMI. ... Local users are limited to the local machine, and as far as I know, the only way of accessing a remote machine is to rely on the "same name, same password" trick or just use a domain user. ... Depending on the actual DCOM and WMI permissions on the remote machine, that domain user may not need to be a domain admin. ...
    (microsoft.public.win32.programmer.ole)
  • RE: Windows 2000 to Windows 2003 Upgrade!
    ... Admins group was removed from Local Administrators group. ... Windows 2000 to Windows 2003 Upgrade! ... my VBScript logon script will not run for this reason(Seems WMI ... if I am logged on as a domain admin I should be able to access ...
    (microsoft.public.windows.server.migration)
  • Re: User type
    ... This does help Mike - thanks ... > If the computer is member of domain then you should use domain user ... > After you have this account and group created you can write a short script ... > administrator and make your users local administrators. ...
    (microsoft.public.windows.server.setup)
Loading