Nagios Support Forum

We are monitoring our Windows services using the WMI method in Nagios. Our infrastructure is starting to grow and need to know is there a better way of automatically pulling the services that belong to a Windows service so we can select which service we want to monitor instead of manually adding it?

In the Step 2 of the "Windows WMI" wizard, you have an option to add (selected or all) services...
If you want to add more service checks to an existing host, you can just re-run the wizard. When you use the same hostname in Step 2 of the wizard, the "new" services will be added to the existing host.

Is this what you are looking for or I am missing the point?

That is exactly what I was looking for, but when I run the wizard I get the following error:

The wizard detected that the WMI plugin returned an unsuccessful output code. This will prevent the automatic scan of services and processes and prevent services from running successfully. Below is the given error output:

WMI Error Output:

UNKNOWN - The WMI query had problems. You might have your username/password wrong or the user's access level is too low. Wmic error text on the next line.

[librpc/rpc/dcerpc_util.cdcerpc_pipe_auth_recv()] Failed to bind to uuid 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 - NT_STATUS_NET_WRITE_FAULT

[librpc/rpc/dcerpc_connect.c:790:dcerpc_pipe_connect_b_recv()] failed NT status (c0000022) in dcerpc_pipe_connect_b_recv

[wmi/wmic.c:196:main()] ERROR: Login to remote object.

NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied

This is a Windows Server 2012 R2 box.

It seems like your WMI user doesn't have enough rights. How did you set up the WMI user? Did you follow our documentation on monitoring Windows using WMI"?

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

The WMI user is a Domain account. I have added the user account to Distributed Com Users, Performance Log and Monitor Users groups. I have verified that the necessary permissions have been setup. Not sure what else I may need to check.

Are you using the same user/password that you used for the other checks? Does the password have any special characters in it?

As a test, try adding the user to the local admins group and see if that resolves it, that should narrow it down for us.