Geek Answers Handbook

WMI failure to failure in XP

Our application uses many WMI calls. When using a guest account, the connection to the local WMI server ends with ACCESS_DENIED, this works fine with a user account and higher. How to access a WMI server under a guest account?

I added a guest account to allow full access using WMIMGMT.MSC, but still I get access denied.

Any suggestions?

+4
source share
1 answer

Are you sure you want to provide the WMI guest account with remote access? I'm not sure what the security implications of this are ...

In any case, I think you need to provide DCOM remote access for the guest account on the target machine. (It was a long time for me, so I'm not sure that this will solve everything, and I do not remember all the details, so I rely on this forum post )

  • Open component services (for the local computer, you can run dcomcnfg.exe)
  • Go to DCOM Config (Component Services> Computers> My Computer> DCOM Configuration)
  • In the details pane, find "Windows Management and Tools" (switches to list view). Right click and select Properties
  • Go to the "Security" tab and pay attention to "Launch and Activation Permissions" and "Access Permissions" - follow these steps for both :
    • Select Customize, if not already selected.
    • Click "Edit."
    • On the security properties page, click Add
    • In the "Select users or groups" drop-down list, add a guest account (for the local machine, just enter "guest" and click "Check Names", then "OK", not sure about the server in the domain)
    • Return to the "Security Properties" page, note that the user has less default permissions than "All." Give the necessary permissions: it sounds like “Remote start” and “Remote activation”. I will probably conduct some tests with the need for "local activation".

Once again, if this works for you, I would carefully look to see if there are security issues with granting such remote permission to the guest account.

Hope this helps,
Daryn.

+2
source

More articles:


All Articles