Page 2 of 2

Re: Microsoft DFS monitor

Posted: Fri Jul 11, 2014 8:58 am
by klee
Thanks for the input, WillemDH.

Unfortunately, I can't code in Powershell and I'm still hoping to get WMI monitoring to work for DFS.

Regards,

-klee

Re: Microsoft DFS monitor

Posted: Fri Jul 11, 2014 10:46 am
by lmiltchev
You may want to try running the wbemtest utility to troubleshoot the issue. I found a post that *may* help you get on the right track:

http://social.technet.microsoft.com/For ... Management

Re: Microsoft DFS monitor

Posted: Sun Jul 13, 2014 4:14 pm
by Box293
I was able to reproduce your problem, it occurs when you are using a non administrative user. I found the following steps from http://edcint.co.nz/checkwmiplus/?q=con ... owsfromop5 fixed the problem:
Service Control Manager

For op5 Monitor to query a windows server for service information we need to give non-admin users access to the SCM.

First we need to determent the SID of the WMI-user, do this by opening a Command prompt in Windows and enter:

wmic useraccount where name='wmiuser' get sid

You will get the user SID, it will look something like: S-1-5-21-831218587-1591663529-496921927-1002

Now we have to give rights for the wmi-user to access scmanger remotely, run the following command and replace <SID> with the SID you got from the command above.

sc sdset SCMANAGER D:(A;;CCLCRPRC;;;<SID>)(A;;CCLCRPWPRC;;;SY)(A;;KA;;;BA)S:(AU;FA;KA;;;WD)(AU;OIIOFA;GA;;;WD)

Alternativly you can replace <SID> with AU (Authenticated Users) if you don’t want to limit access only to one user.
NOTE: You will need to change wmiuser to wmiagent (or whatever username you chose to create).

We need to add this step to the documentation you followed earlier:
http://assets.nagios.com/downloads/nagi ... ng_WMI.pdf

Re: Microsoft DFS monitor

Posted: Tue Jul 15, 2014 3:50 pm
by klee
Box293,

Thank you again for the detailed explanation. Your instructions were extremely helpful.

DFS monitoring using WMI Wizard is working perfectly now.

Thank you all very much. Please feel free to close thread.

Best,

-klee