Home » Categories » Multiple Categories

Nagios XI - WMI Authentication Problems

Problem Description

When a query is submitted with a correct set of credentials, but a user does not have access to the WMI class, absolutely NO output is returned by wmic.

 

Explanation

When a Windows user is added to a group, that user is given an Authentication token. For each group a user is a member of, a separate token is issued. When a request to access an object is issued, the token containing the permissions level of the object is compared to that of the user.

With Windows Server 2003 and below, authenticating users automatically used the highest level of authentication available to them. This means that any user added to the Administrators group was authenticated at that level for every request.

Beginning with Windows Server 2008, things changed. Authenticating users automatically used the highest level of authentication when executing WMI queries locally, but when executing queries remotely, users are expected to use domain credentials to validate permissions. However, if the server is not part of a domain and is instead configured to use a workgroup, remotely authenticated users are given regular user-level permissions, despite existing in the Administrators group. There is no way to change this behavior.

 

Solutions

 

 

Additional Information

This problem was identified by the Nagios Support Forum user thanks_st_ignucius in the following forum thread:

https://support.nagios.com/forum/viewtopic.php?f=6&t=36953&p=171370#p171336

 

Final Thoughts

For any support related questions please visit the Nagios Support Forums at:

http://support.nagios.com/forum/

0 (0)
Article Rating (No Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
Nagios XI - Hosts Pending/Gray
Viewed 8194 times since Tue, Jan 6, 2015
Nagios Core - Time Period Inheritance
Viewed 5007 times since Thu, Mar 10, 2016
CCM says unapplied changes exist, but none listed
Viewed 3531 times since Mon, Feb 27, 2017
Nagios XI - Automated Host Management In Nagios XI
Viewed 4545 times since Wed, Jan 27, 2016
Nagios XI - Status Information Cut Off At 256 Characters
Viewed 5019 times since Thu, Feb 25, 2016
Enabling Oracle Linux Optional Repository
Viewed 11948 times since Mon, May 14, 2018
Nagios XI - Scheduled Backup Log Level
Viewed 3625 times since Tue, Apr 18, 2017
Nagios XI - Installing The AIX Agent
Viewed 6430 times since Wed, Jan 27, 2016
Nagios XI - Core Config Manager - Service Groups
Viewed 5487 times since Sun, Jul 30, 2017
Nagios XI - Using Auto-Discovery
Viewed 6673 times since Thu, Aug 17, 2017