Remotely accessing WMI information without using a Local Administr

[Guest Chris Gibbs]

Hi All,

 

Just wondering if anyone has any ideas how to do this please?

 

We are trying to get access to WMI information on a Windows Server 2003 and

Windows Server 2003 SP1 box.

 

I have setup a domain user account and added this account to the security

permissions for WMI. I have also added this account to the DCOM Security

Settings for "Launch and Activation permissions" with full remote control on

both.

 

I am still receiving a error when I'm running a script to poll data.

"80041003 - Access Denied"

 

There is no problem with the script as I have successfully tested when the

domain user is added to the local administrator group.

 

Any help would be greatly appreciated.

 

Cheers

 

Chris

[Guest Richard Mueller [MVP]]

Re: Remotely accessing WMI information without using a Local Administr

 

Chris Gibbs wrote:

> Just wondering if anyone has any ideas how to do this please?

>

> We are trying to get access to WMI information on a Windows Server 2003

> and

> Windows Server 2003 SP1 box.

>

> I have setup a domain user account and added this account to the security

> permissions for WMI. I have also added this account to the DCOM Security

> Settings for "Launch and Activation permissions" with full remote control

> on

> both.

>

> I am still receiving a error when I'm running a script to poll data.

> "80041003 - Access Denied"

>

> There is no problem with the script as I have successfully tested when the

> domain user is added to the local administrator group.

>

> Any help would be greatly appreciated.

 

This behavior is expected. You must be a member of the local administrators

group to connect remotely to a computer with WMI. You can add the user, or

better yet a domain group, to the local administrators group.

 

--

Richard Mueller

MVP Directory Services

Hilltop Lab - http://www.rlmueller.net

--