Re: Group policy results wizard - Access denied

Have you modified the security group membership of any of the local groups on those machines? I"m assuming that you're connecting as a member of the local Administrators group on those remote machines?

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:ekgoQQMxHHA.4076@xxxxxxxxxxxxxxxxxxxxxxx
I get an error running wmimgmt.msc (Failed to connect to [computer name] because "Win32: Access denine"), however, I can fully manage the systems remotely using computer management. I don't understand how to run wmic. I get Event ID 1202 and 1085 regularly in the affected machines (all WinXP SP2, no firewall)

I have searched WMI and RSOP issues on the net until I am blue in the face, still no help. I have created a new OU, moved a test machine into it (no GPOs applied) and reset the security on the local box by running secedit /configure /cfg %windir%\repair\secsetup.inf /db c:\secsetup.sdb /verbose & forced a gpupdate - still no joy!!



--

Mike Matheny


"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message news:F3A374E7-03E6-4D17-8DAB-CF5E6BD48588@xxxxxxxxxxxxxxxx
Sorry for the delay-
I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. Also, can you check to see if you can get any kind of remote WMI access to the system? Like, using wmic or another remote WMI tool? That will help understand if its a WMI access issue or an RSOP issue.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:%23hXzcHLxHHA.2132@xxxxxxxxxxxxxxxxxxxxxxx
Anyone have any ideas??

--

Mike Matheny


"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:OAQjDUluHHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Well, all our servers work fine - it's just the WinXP workstations. Could you give me a hint of what security policies I need to check and what they would probably need to be??

--

Mike

"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A@xxxxxxxxxxxxxxxx
There could be any number of things causing this. Is it happening on more than one remote system? If so, have any security policies been changed recently? Change in SMB signing level?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:O3jMLwZuHHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
Well, even though I can remotely manage the boxes, when I try to connect via the WMI Control snap-in, I get
wmi control failed to connect because win32:access denied

Again, I have searched this error until I am blue in the face with no resolutions working.
--

Mike

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:OGO9OAZuHHA.4572@xxxxxxxxxxxxxxxxxxxxxxx
While logged on as a domain admin, we are getting Access Denied when trying to run the Group Policy Results Wizard on our WinXP SP2 systems. I can remotely manage the systems, so I think WMI is working. Also, firewalls are disabled.

Not sure when this stopped working, used to work fine. Could it be a policy setting, such as Access this computer from the network or Remotely accessible registry paths that are mucked up??


I have searched the Inet until I am blind, and no suggestion I have found has been helpful.

Mike












.

Relevant Pages

  • Re: Security woes
    ... local user account correct? ... The security settings for domain users will need to be applied to each ... WMI Test Engineer ... > fails for remote ones, ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Strange Problems with GetOwner
    ... IMO it is not a directly problem of WMI or settings of ... the settings of the security rules to get data via WMI, ... > remote, but when I try to GetOwner the strange results begin. ...
    (microsoft.public.win32.programmer.wmi)
  • Re: Group policy results wizard - Access denied
    ... XP systems, since WMI uses DCOM. ... any kind of remote WMI access to the system? ... Simplify Group Policy Troubleshooting with the NEW GPExpert ...
    (microsoft.public.windows.group_policy)
  • Re: Group policy results wizard - Access denied
    ... I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. ... can you check to see if you can get any kind of remote WMI access to the system? ... Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php ... "Mike Matheny" wrote in message ...
    (microsoft.public.windows.group_policy)
  • Re: Local Policy restriction
    ... Steve Microsoft MVP Security ... The new Windows Group Policy Guide from Microsoft Press!!! ... >> policy on that remote workgroup computer that way. ...
    (microsoft.public.windows.group_policy)