WMI Fails to Check Services, Processes

[lmiltchev]

Mike,
I am not sure if this is going to help, but you can try granting permissions to a user to monitor specific services via subinacl. For example, to allow the "wmiagent" user to monitor the "W3SVC" service, you would need to run from the DOS Prompt on the Windows server:

Code: Select all

subinacl /service W3SVC /GRANT=<domain>\wmiagent=LSQI

where you substitute <domain> with the actual domain name.

If you want to learn more about subinacl or if you don't have it installed, you can read the article below, which has a download link from the microsoft.com.

http://www.waynezim.com/2010/02/how-to- ... -subinacl/

Note: This may or may not work in your environment. Don't try it in production.

[mikew]

Thanks that is helpful. However, the company has 800 Windows servers and they chose WMI so that they would not have to touch them so I am not thinking that would work.

[BanditBBS]

Hey Mike,

The script I linked will allow the user connecting via WMI to see any "built-in" service. The additional script I am trying to get my hands on fixes 3rd party services access for the WMI user. So you may want to give the script I linked a try. May have to script around it to push from afar so you don't have to touch them all as desired. Unfortunately, without admin access, these scripts were the best option for us when using WMI.

[lmiltchev]

Make, did you give BanditBBS' script a try? Let us know when/if the issue is resolved.