Re: WMI Security question...

The account is an admin on the box. And this is Windows 2003 Server.

Can I simulate this with WBEMTest? Would that give me more information?

I can't track down where the Access denied is being generated from. I need
to track this down.

Thanks.

"Richard Mueller [MVP]" wrote:


"Joe" <Joe@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:5B2D64AB-6F4B-4382-A2F3-A18EFE8145FD@xxxxxxxxxxxxxxxx
I am having an issue running some code on a server. I am getting an Access
Denied error when trying to run this code.

strComputer = "."
strCommand = "Calc.exe"

Set objWMIService =
GetObject("winmgmts:{impersonationLevel=Impersonate}!\\"
& strComputer & "\root\cimv2")

' Configure the Calc process to show a window
Set objStartup = objWMIService.Get("Win32_ProcessStartup")
Set objConfig = objStartup.SpawnInstance_
objConfig.ShowWindow = 1

' Create Calc process
Set objProcess = objWMIService.Get("Win32_Process")

intReturn = objProcess.Create (strCommand, Null, objConfig, intProcessID)

If intReturn <> 0 Then
Wscript.Echo "Process could not be created." & _
vbcrlf & "Command line: " & strCommand & _
vbcrlf & "Return value: " & intReturn
Else
Wscript.Echo "Process created." & _
vbcrlf & "Command line: " & strCommand & _
vbcrlf & "Process ID: " & intProcessID
End If

What I need to do is to query what rights accounts have when trying to
start
an application like this. I'm just not clear on how to do it.

Any help would be appreciated.

In general you need to be a member of the local Administrators group on the
computer. By default the domain group "Domain Admins" is added to the local
Administrators group when the computer is joined to the domain. What OS is
installed?

--
Richard Mueller
MVP Directory Services
Hilltop Lab - http://www.rlmueller.net
--



.

Relevant Pages

  • Re: Need help closing security holes in my Windows XP home system!
    ... >>stop using the win xp user account with admin, ... >>windows as the admin, ... then you really don't understand security for the ...
    (comp.security.firewalls)
  • RE: [in] Re: [Full-Disclosure] IE is just as safe as FireFox
    ... The first account created on Windows is Administrator, ... and even it had poor initial security when it was really tested. ... doesn't require admin either). ...
    (Full-Disclosure)
  • Re: Validation of XP
    ... except to mention that UAC caused me to reboot to WinXP ... there shouldn't be any reason you need to run as admin to play a game. ... Windows doesn't do this or that natively, and one of those things is ... As for the default admin account, ...
    (microsoft.public.windowsxp.general)
  • Re: Rid AD of Circular Group Membership
    ... Unfortunately since the previous Admin used Restricted Groups on the Default ... Administrators group in the domain can manage the domain controllers ... and have use on members if it is used there. ... The quess is each has an account and uses it, ...
    (microsoft.public.windows.group_policy)
  • Re: [Full-disclosure] Re: Google Talk cleartext credentials in processmemory
    ... Home users, perhaps, but there are a lot more WIndows ... Even in corp environments you still see some users running admin ... This account has admin privileges by default. ... right-click on the file and click on "run as" to install your software ...
    (Full-Disclosure)
Loading