Page 1 of 1

Windows WMI

Posted: Mon Oct 23, 2017 9:08 am
by jandrews-flhi
Hello,

Having a lot of trouble with WMI Monitoring. I followed the article for this process and for whatever reason the service list fails to populate all of the services unless its granted local administrator. The odd part is that I can see the windows system services and the antivirus, yet no other services are detected unless granted admin.

Since I was unable to see the services but I could see the active processes belonging to those services, I opted to just try and monitor each process directly. Unfortunately, WMI was reporting that it was unable to detect any instance of the process running even though they were. So the only time I have been able to get monitoring is the services themselves, it appears process monitoring is broken/flawed.

Does anyone know of a solution or perhaps which permissions I may have missed or something missed which wasn't listed in the article? Any potential steps from here would be greatly appreciated. The system is mission critical for production so we want to limit unnecessary security exposure if we can.

https://assets.nagios.com/downloads/nag ... ios-XI.pdf

Re: Windows WMI

Posted: Mon Oct 23, 2017 9:41 am
by mcapra
Here's a pretty comprehensive troubleshooting document:
https://support.nagios.com/kb/article/n ... oting.html

The "Additional Permissions" section might be of interest to you. You might also check out the "Service Not Listed In Wizard" section, though that specifically is caused by lengthy lists of services and usually not related to permissions.

Re: Windows WMI

Posted: Mon Oct 23, 2017 9:54 am
by jandrews-flhi
mcapra wrote:Here's a pretty comprehensive troubleshooting document:
https://support.nagios.com/kb/article/n ... oting.html

The "Additional Permissions" section might be of interest to you. You might also check out the "Service Not Listed In Wizard" section, though that specifically is caused by lengthy lists of services and usually not related to permissions.
Mcapra,

Thank you for the link. Those steps were actually already taken while we were initially troubleshooting some other WMI issues earlier on.

Re: Windows WMI

Posted: Mon Oct 23, 2017 1:53 pm
by scottwilkerson
In this post there is a command and some supporting documentation that may help from another user in a similar situation.

https://support.nagios.com/forum/viewto ... 41#p129968

Re: Windows WMI

Posted: Mon Oct 23, 2017 2:54 pm
by jandrews-flhi
Scott,

Thanks for the link to the other thread. Those steps were already taken to resolve another issue.

The current issue is that we cannot see all services on the server, unless the Nagios user is granted local administrator. I attempted to monitor the processes instead of the services themselves as I can actually see the processes however, the process monitor is unable to detect an active instance of any processes, even though they're in the list generated by the wizard.

Re: Windows WMI

Posted: Tue Oct 24, 2017 1:02 pm
by dwhitfield
Unfortunately, if you've been through all of the trouble-shooting guides, you may need to look at something other than WMI.

If you're a customer, you can email [email protected] and we can set up a remote and see if we can figure it out, but if the processes require administrator access, you may just need to give the wmiagent account administrator access.