Click here to get back home

WMI and Windows 2003 SP1
 Home | NewsGroups | Search | About
Login Password
Register Now!
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
WMI and Windows 2003 SP1 Herm_MCP 06-28-2006
Posted by Herm_MCP on June 28, 2006, 10:14 am
Please log in for more thread options
 Morning,

I have an issue were WMI is giving an acces denied error when I try and run
wmimgmt.msc. Also, when I run wbemtest and try to access the W32_Processor
class I get a Access Denied.

The server(s) in question are 2003 Standard Edition SP1 boxes and I think
this issue has something to do with this article :
http://support.microsoft.com/?kbid=914023

Anyone have any ideas.
Thanks,
Herman

Posted by Roger Abell [MVP] on June 28, 2006, 12:31 pm
Please log in for more thread options
 Is the access local, with the code running on the machine whose
WMI repository is accessed, or remote?
Do these W2k3 have the firewall turned on?
Was the Security Configuration Wizard used to tighten these?


> Morning,
>
> I have an issue were WMI is giving an acces denied error when I try and
> run
> wmimgmt.msc. Also, when I run wbemtest and try to access the W32_Processor
> class I get a Access Denied.
>
> The server(s) in question are 2003 Standard Edition SP1 boxes and I think
> this issue has something to do with this article :
> http://support.microsoft.com/?kbid=914023
>
> Anyone have any ideas.
> Thanks,
> Herman



Posted by Herm_MCP on June 28, 2006, 12:46 pm
Please log in for more thread options
Thanks for replying Roger.

The access is local and it only happens on the DCs of this domain. Firewall
is turned off. I do not believe the Security Wizard was used.

What do you think about the article I listed earlier?

"Roger Abell [MVP]" wrote:

> Is the access local, with the code running on the machine whose
> WMI repository is accessed, or remote?
> Do these W2k3 have the firewall turned on?
> Was the Security Configuration Wizard used to tighten these?
>
>
> > Morning,
> >
> > I have an issue were WMI is giving an acces denied error when I try and
> > run
> > wmimgmt.msc. Also, when I run wbemtest and try to access the W32_Processor
> > class I get a Access Denied.
> >
> > The server(s) in question are 2003 Standard Edition SP1 boxes and I think
> > this issue has something to do with this article :
> > http://support.microsoft.com/?kbid=914023
> >
> > Anyone have any ideas.
> > Thanks,
> > Herman
>
>
>

Posted by Roger Abell [MVP] on June 29, 2006, 2:42 am
Please log in for more thread options
Hmmm
I have not encountered what you report under those circumstances.
The KB is advisory that one should apply SP1 to the PDC FSMO first,
or at least synchronously with other DCs.
The existence of the new level of DCOM security does not in the default
configuration of fresh SP install have the impact you are indicating.
You would find that nesting such as Domain Admins in the DCom Users
group would have no effect on your current issue.

--
Roger Abell
Microsoft MVP (Windows Server : Security)

> Thanks for replying Roger.
>
> The access is local and it only happens on the DCs of this domain.
> Firewall
> is turned off. I do not believe the Security Wizard was used.
>
> What do you think about the article I listed earlier?
>
> "Roger Abell [MVP]" wrote:
>
>> Is the access local, with the code running on the machine whose
>> WMI repository is accessed, or remote?
>> Do these W2k3 have the firewall turned on?
>> Was the Security Configuration Wizard used to tighten these?
>>
>>
>> > Morning,
>> >
>> > I have an issue were WMI is giving an acces denied error when I try and
>> > run
>> > wmimgmt.msc. Also, when I run wbemtest and try to access the
>> > W32_Processor
>> > class I get a Access Denied.
>> >
>> > The server(s) in question are 2003 Standard Edition SP1 boxes and I
>> > think
>> > this issue has something to do with this article :
>> > http://support.microsoft.com/?kbid=914023
>> >
>> > Anyone have any ideas.
>> > Thanks,
>> > Herman
>>
>>
>>



Posted by Herm_MCP on June 29, 2006, 9:12 am
Please log in for more thread options
Roger,

When I look at the WBEM log :Framework.log, I see that it is failing on all
the classes with a bunch of errors similar to the one below:
Impersonation running as: NT AUTHORITY\NETWORK SERVICE        06/26/2006
12:13:46.857        thread:1460        [d:\srvrtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.3759]
ExecQueryAsync: select __RELPATH, LoadPercentage from Win32_Processor -
FAILED (80041003)        06/26/2006
12:13:46.857        thread:1460        [d:\srvrtm\admin\wmi\wbem\sdk\framedyn\wbemglue.cpp.830

Any ideas?
When I look at a machine that is working and not a DC, the impersonation is
done by \domainname\computername$

Herman

"Roger Abell [MVP]" wrote:

> Hmmm
> I have not encountered what you report under those circumstances.
> The KB is advisory that one should apply SP1 to the PDC FSMO first,
> or at least synchronously with other DCs.
> The existence of the new level of DCOM security does not in the default
> configuration of fresh SP install have the impact you are indicating.
> You would find that nesting such as Domain Admins in the DCom Users
> group would have no effect on your current issue.
>
> --
> Roger Abell
> Microsoft MVP (Windows Server : Security)
>
> > Thanks for replying Roger.
> >
> > The access is local and it only happens on the DCs of this domain.
> > Firewall
> > is turned off. I do not believe the Security Wizard was used.
> >
> > What do you think about the article I listed earlier?
> >
> > "Roger Abell [MVP]" wrote:
> >
> >> Is the access local, with the code running on the machine whose
> >> WMI repository is accessed, or remote?
> >> Do these W2k3 have the firewall turned on?
> >> Was the Security Configuration Wizard used to tighten these?
> >>
> >>
> >> > Morning,
> >> >
> >> > I have an issue were WMI is giving an acces denied error when I try and
> >> > run
> >> > wmimgmt.msc. Also, when I run wbemtest and try to access the
> >> > W32_Processor
> >> > class I get a Access Denied.
> >> >
> >> > The server(s) in question are 2003 Standard Edition SP1 boxes and I
> >> > think
> >> > this issue has something to do with this article :
> >> > http://support.microsoft.com/?kbid=914023
> >> >
> >> > Anyone have any ideas.
> >> > Thanks,
> >> > Herman
> >>
> >>
> >>
>
>
>

Similar ThreadsPosted
Windows 2000 Domain, Windows 2003 Enterprise CA July 15, 2005, 2:07 pm
Windows 2008 CA can't issue to Windows 2003 server June 25, 2008, 11:53 am
Windows server 2003 and Windows SBS Cost ? August 25, 2005, 11:19 pm
Applying Windows 2003 policies to Windows XP June 24, 2008, 2:34 pm
Is it possible to use the Windows 2003 user names instead of pre-Windows 2000 user names in Windows Authentication? September 5, 2006, 9:27 am
Windows 2003 PKI August 23, 2005, 9:51 am
Windows 2003 August 30, 2007, 6:41 pm
Windows 2003 SP1 Question. May 31, 2005, 9:44 am
VPN and Windows 2003 Server May 31, 2005, 11:58 pm
Windows 2003 AnonymousUser September 28, 2005, 10:34 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap