Re: Group policy results wizard - Access denied

If you mean User Rights Assignments, yes. How can I reset these back to
default? It seems once they are tattooed, getting them out is all but
impossible??

BTW, this happened after applying the CIS Benchmarks for WinXP.

--

Mike

"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message
news:944A0310-F935-402F-B2A7-E15FA79F324B@xxxxxxxxxxxxxxxx
Have you modified the security group membership of any of the local groups
on those machines? I"m assuming that you're connecting as a member of the
local Administrators group on those remote machines?

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:ekgoQQMxHHA.4076@xxxxxxxxxxxxxxxxxxxxxxx
I get an error running wmimgmt.msc (Failed to connect to [computer name]
because "Win32: Access denine"), however, I can fully manage the systems
remotely using computer management. I don't understand how to run wmic. I
get Event ID 1202 and 1085 regularly in the affected machines (all WinXP
SP2, no firewall)

I have searched WMI and RSOP issues on the net until I am blue in the
face, still no help. I have created a new OU, moved a test machine into
it (no GPOs applied) and reset the security on the local box by running
secedit /configure /cfg %windir%\repair\secsetup.inf /db c:\secsetup.sdb
/verbose & forced a gpupdate - still no joy!!



--

Mike Matheny


"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message
news:F3A374E7-03E6-4D17-8DAB-CF5E6BD48588@xxxxxxxxxxxxxxxx
Sorry for the delay-
I would check anything that would have modified DCOM permissions on
those XP systems, since WMI uses DCOM. Also, can you check to see if you
can get any kind of remote WMI access to the system? Like, using wmic or
another remote WMI tool? That will help understand if its a WMI access
issue or an RSOP issue.

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:%23hXzcHLxHHA.2132@xxxxxxxxxxxxxxxxxxxxxxx
Anyone have any ideas??

--

Mike Matheny


"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:OAQjDUluHHA.1184@xxxxxxxxxxxxxxxxxxxxxxx
Well, all our servers work fine - it's just the WinXP workstations.
Could you give me a hint of what security policies I need to check
and what they would probably need to be??

--

Mike

"Darren Mar-Elia" <dmanonymous@xxxxxxxxxxxxx> wrote in message
news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A@xxxxxxxxxxxxxxxx
There could be any number of things causing this. Is it happening on
more than one remote system? If so, have any security policies been
changed recently? Change in SMB signing level?

Darren

--
Darren Mar-Elia
MS-MVP-Windows Server--Group Policy

Simplify Group Policy Troubleshooting with the NEW GPExpert
Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php

Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy
Information Hub:
FAQs, Training Videos, Whitepapers and Utilities for all things Group
Policy-related

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:O3jMLwZuHHA.4952@xxxxxxxxxxxxxxxxxxxxxxx
Well, even though I can remotely manage the boxes, when I try to
connect via the WMI Control snap-in, I get
wmi control failed to connect because win32:access denied

Again, I have searched this error until I am blue in the face with
no resolutions working.
--

Mike

"Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message
news:OGO9OAZuHHA.4572@xxxxxxxxxxxxxxxxxxxxxxx
While logged on as a domain admin, we are getting Access Denied
when trying to run the Group Policy Results Wizard on our WinXP SP2
systems. I can remotely manage the systems, so I think WMI is
working. Also, firewalls are disabled.

Not sure when this stopped working, used to work fine. Could it be
a policy setting, such as Access this computer from the network or
Remotely accessible registry paths that are mucked up??


I have searched the Inet until I am blind, and no suggestion I have
found has been helpful.

Mike














.

Relevant Pages

  • Re: Group policy results wizard - Access denied
    ... XP systems, since WMI uses DCOM. ... any kind of remote WMI access to the system? ... Simplify Group Policy Troubleshooting with the NEW GPExpert ...
    (microsoft.public.windows.group_policy)
  • Re: Security woes
    ... local user account correct? ... The security settings for domain users will need to be applied to each ... WMI Test Engineer ... > fails for remote ones, ...
    (microsoft.public.win32.programmer.wmi)
  • Possible Impersonation Issue?
    ... Server 2003 except one of the remote sites. ... WMI scripts that I have used for months started failing on all DCs. ...
    (microsoft.public.windows.server.general)
  • Some 80041001 Generic Failure accessing remote WMI
    ... "win32_BaseService" class remotely using WMI. ... We need to retrieve some WMI information from a remote computer running ... Windows 2003 SP1 without using an Administrator user. ...
    (microsoft.public.win32.programmer.wmi)
  • Network Interface Utilization - WMI
    ... currentbandwidth from the performatted_networkinterface class in WMI. ... Function GetBandwidth(strComputer, strUsername, strPassword, threshold ... 'Connect to remote host on same domain using same security context ... Set objWMIService = objSWbemLocator.ConnectServer(strComputer, ...
    (microsoft.public.scripting.vbscript)