Home » Categories » Multiple Categories

Nagios XI - WMI Authentication Problems

Problem Description

When a query is submitted with a correct set of credentials, but a user does not have access to the WMI class, absolutely NO output is returned by wmic.

 

Explanation

When a Windows user is added to a group, that user is given an Authentication token. For each group a user is a member of, a separate token is issued. When a request to access an object is issued, the token containing the permissions level of the object is compared to that of the user.

With Windows Server 2003 and below, authenticating users automatically used the highest level of authentication available to them. This means that any user added to the Administrators group was authenticated at that level for every request.

Beginning with Windows Server 2008, things changed. Authenticating users automatically used the highest level of authentication when executing WMI queries locally, but when executing queries remotely, users are expected to use domain credentials to validate permissions. However, if the server is not part of a domain and is instead configured to use a workgroup, remotely authenticated users are given regular user-level permissions, despite existing in the Administrators group. There is no way to change this behavior.

 

Solutions

 

 

Additional Information

This problem was identified by the Nagios Support Forum user thanks_st_ignucius in the following forum thread:

https://support.nagios.com/forum/viewtopic.php?f=6&t=36953&p=171370#p171336

 

Final Thoughts

For any support related questions please visit the Nagios Support Forums at:

http://support.nagios.com/forum/

0 (0)
Article Rating (No Votes)
Rate this article
  • Icon PDFExport to PDF
  • Icon MS-WordExport to MS Word
Attachments Attachments
There are no attachments for this article.
Related Articles RSS Feed
Nagios XI - Using the Negate Plugin
Viewed 4041 times since Thu, Jan 28, 2016
Nagios XI - Core Config Manager - Host Groups
Viewed 5323 times since Sun, Jul 30, 2017
Nagios XI - Configuring Global Event Handlers
Viewed 3135 times since Wed, Jan 27, 2016
Nagios XI - Debugging Bandwidth Performance Graphs
Viewed 9111 times since Tue, Jan 27, 2015
Nagios Log Server - Using An Output To Create Nagios XI Passive Objects
Viewed 2579 times since Thu, Sep 7, 2017
Nagios XI - Hostgroup Inheritance
Viewed 3016 times since Wed, Jul 19, 2017
Nagios XI - Understanding User Macros
Viewed 3172 times since Thu, Jan 28, 2016
Nagios Core - Time Period Inheritance
Viewed 3849 times since Thu, Mar 10, 2016
Nagios XI - Nagios Agents
Viewed 4517 times since Wed, Jan 28, 2015
Nagios XI - HTTP 500 Error / PHP Parse error - Unexpected $end
Viewed 3750 times since Mon, Jan 25, 2016