Page 2 of 2

Re: WMI Fails to Check Services, Processes

Posted: Mon Sep 08, 2014 2:08 pm
by lmiltchev
Mike,
I am not sure if this is going to help, but you can try granting permissions to a user to monitor specific services via subinacl. For example, to allow the "wmiagent" user to monitor the "W3SVC" service, you would need to run from the DOS Prompt on the Windows server:

Code: Select all

subinacl /service W3SVC /GRANT=<domain>\wmiagent=LSQI
where you substitute <domain> with the actual domain name.

If you want to learn more about subinacl or if you don't have it installed, you can read the article below, which has a download link from the microsoft.com.

http://www.waynezim.com/2010/02/how-to- ... -subinacl/

Note: This may or may not work in your environment. Don't try it in production. :)

Re: WMI Fails to Check Services, Processes

Posted: Mon Sep 08, 2014 3:00 pm
by mikew
Thanks that is helpful. However, the company has 800 Windows servers and they chose WMI so that they would not have to touch them so I am not thinking that would work.

Re: WMI Fails to Check Services, Processes

Posted: Mon Sep 08, 2014 3:13 pm
by BanditBBS
Hey Mike,

The script I linked will allow the user connecting via WMI to see any "built-in" service. The additional script I am trying to get my hands on fixes 3rd party services access for the WMI user. So you may want to give the script I linked a try. May have to script around it to push from afar so you don't have to touch them all as desired. Unfortunately, without admin access, these scripts were the best option for us when using WMI.

Re: WMI Fails to Check Services, Processes

Posted: Tue Sep 09, 2014 9:02 am
by lmiltchev
Make, did you give BanditBBS' script a try? Let us know when/if the issue is resolved.