Re: Group policy results wizard - Access denied

I get an error running wmimgmt.msc (Failed to connect to [computer name]
because "Win32: Access denine"), however, I can fully manage the systems
remotely using computer management. I don't understand how to run wmic. I
get Event ID 1202 and 1085 regularly in the affected machines (all WinXP
SP2, no firewall)

I have searched WMI and RSOP issues on the net until I am blue in the face,
still no help. I have created a new OU, moved a test machine into it (no
GPOs applied) and reset the security on the local box by running secedit
/configure /cfg %windir%\repair\secsetup.inf /db c:\secsetup.sdb /verbose &
forced a gpupdate - still no joy!!



--

Mike Matheny


"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message
news:F3A374E7-03E6-4D17-8DAB-CF5E6BD48588@xxxxxxxxxxxxxxxx
Sorry for the delay-
I would check anything that would have modified DCOM permissions on those
XP systems, since WMI uses DCOM. Also, can you check to see if you can get
any kind of remote WMI access to the system? Like, using wmic or another
remote WMI tool? That will help understand if its a WMI access issue or an
RSOP issue.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:%23hXzcHLxHHA.2132@xxxxxxxxxxxxxxxxxxxxxxx
Anyone have any ideas??

--

Mike Matheny


"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:OAQjDUluHHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Well, all our servers work fine - it's just the WinXP workstations.
Could you give me a hint of what security policies I need to check and
what they would probably need to be??

--

Mike

"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message
news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A@xxxxxxxxxxxxxxxx
There could be any number of things causing this. Is it happening on
more than one remote system? If so, have any security policies been
changed recently? Change in SMB signing level?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:O3jMLwZuHHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
Well, even though I can remotely manage the boxes, when I try to
connect via the WMI Control snap-in, I get
wmi control failed to connect because win32:access denied

Again, I have searched this error until I am blue in the face with no
resolutions working.
--

Mike

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:OGO9OAZuHHA.4572@xxxxxxxxxxxxxxxxxxxxxxx
While logged on as a domain admin, we are getting Access Denied when
trying to run the Group Policy Results Wizard on our WinXP SP2
systems. I can remotely manage the systems, so I think WMI is
working. Also, firewalls are disabled.

Not sure when this stopped working, used to work fine. Could it be a
policy setting, such as Access this computer from the network or
Remotely accessible registry paths that are mucked up??


I have searched the Inet until I am blind, and no suggestion I have
found has been helpful.

Mike











.

Relevant Pages

  • Re: Group policy results wizard - Access denied
    ... Simplify Group Policy Troubleshooting with the NEW GPExpert ... I have searched WMI and RSOP issues on the net until I am blue in the ... can get any kind of remote WMI access to the system? ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy results wizard - Access denied
    ... I"m assuming that you're connecting as a member of the local Administrators group on those remote machines? ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... I have created a new OU, moved a test machine into it and reset the security on the local box by running ... I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy results wizard - Access denied
    ... I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. ... can you check to see if you can get any kind of remote WMI access to the system? ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... "Mike Matheny" wrote in message ...
    (microsoft.public.windows.group_policy)
  • RE: Several Problems; how to reset security and troubleshoot serve
    ... There is no error or action when I click on either "Offer Remote ... Assistance" or "Help and Support", ... The Network Service account must be added to the policy settings in the ... This issue may occur if Group Policy settings that were applied at ...
    (microsoft.public.windows.server.sbs)
  • RE: How to enforce Remote Assistance and Remote Desktop via GPO?
    ... assistance group policy settings and remote desktop group policy settings ... To enable remote desktop and remote assistance on specific Windows XP ...
    (microsoft.public.windows.server.sbs)