Windows WMI

[jandrews-flhi]

Hello,

Having a lot of trouble with WMI Monitoring. I followed the article for this process and for whatever reason the service list fails to populate all of the services unless its granted local administrator. The odd part is that I can see the windows system services and the antivirus, yet no other services are detected unless granted admin.

Since I was unable to see the services but I could see the active processes belonging to those services, I opted to just try and monitor each process directly. Unfortunately, WMI was reporting that it was unable to detect any instance of the process running even though they were. So the only time I have been able to get monitoring is the services themselves, it appears process monitoring is broken/flawed.

Does anyone know of a solution or perhaps which permissions I may have missed or something missed which wasn't listed in the article? Any potential steps from here would be greatly appreciated. The system is mission critical for production so we want to limit unnecessary security exposure if we can.

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

[mcapra]

Here's a pretty comprehensive troubleshooting document:
https://support.nagios.com/kb/article/n ... oting.html

The "Additional Permissions" section might be of interest to you. You might also check out the "Service Not Listed In Wizard" section, though that specifically is caused by lengthy lists of services and usually not related to permissions.

[jandrews-flhi]

Here's a pretty comprehensive troubleshooting document:
https://support.nagios.com/kb/article/n ... oting.html

The "Additional Permissions" section might be of interest to you. You might also check out the "Service Not Listed In Wizard" section, though that specifically is caused by lengthy lists of services and usually not related to permissions.

Mcapra,

Thank you for the link. Those steps were actually already taken while we were initially troubleshooting some other WMI issues earlier on.

[scottwilkerson]

In this post there is a command and some supporting documentation that may help from another user in a similar situation.

https://support.nagios.com/forum/viewto ... 41#p129968

[jandrews-flhi]

Scott,

Thanks for the link to the other thread. Those steps were already taken to resolve another issue.

The current issue is that we cannot see all services on the server, unless the Nagios user is granted local administrator. I attempted to monitor the processes instead of the services themselves as I can actually see the processes however, the process monitor is unable to detect an active instance of any processes, even though they're in the list generated by the wizard.

[dwhitfield]

Unfortunately, if you've been through all of the trouble-shooting guides, you may need to look at something other than WMI.

If you're a customer, you can email [email protected] and we can set up a remote and see if we can figure it out, but if the processes require administrator access, you may just need to give the wmiagent account administrator access.