Vista - Get-wmiobject, permissions issue...

hello everyone! I am having a bit of an issue getting past the wmi
permissions using the following script. if i run as an admin it connects
just fine but if connect as a differnet user it gives me access denied
message *** Get-WmiObject : Access is denied. (Exception from HRESULT:
0x80070005 (E_ACCESSDENIED)) ***

I have granted the user account full permission to control the service but
this is obviously not enough. i tried setting WMI Control permissions on
Root and CIMV2 to full control but still gives the user access denied. i
also granted the user logon as a service right but still no luck. Any
ideas? what am i missing here to be able to give the user account access to
view the service using the below script. I DO NOT what to add the user to
the administrators group. Thanks in advance for the help!


(get-wmiobject win32_service -computername myComputer -credential
domain\me -filter "name='spooler'").state

I have also set security for COM permissions in the dcomcnfg utility to
enable the user remote launch and remote activation but still no luck. now
i get the following error *** Get-WmiObject : Generic failure

any help would be great!

"Phil N" <bigphil@newsgroups.nospam> wrote in message
news:ufSRw74gHHA.1220@TK2MSFTNGP03.phx.gbl...
> hello everyone! I am having a bit of an issue getting past the wmi
> permissions using the following script. if i run as an admin it connects
> just fine but if connect as a differnet user it gives me access denied
> message *** Get-WmiObject : Access is denied. (Exception from HRESULT:
> 0x80070005 (E_ACCESSDENIED)) ***
>
> I have granted the user account full permission to control the service but
> this is obviously not enough. i tried setting WMI Control permissions on
> Root and CIMV2 to full control but still gives the user access denied. i
> also granted the user logon as a service right but still no luck. Any
> ideas? what am i missing here to be able to give the user account access
> to view the service using the below script. I DO NOT what to add the user
> to the administrators group. Thanks in advance for the help!
>
>
> (get-wmiobject win32_service -computername myComputer -credential
> domain\me -filter "name='spooler'").state
>

are you running windows vista ?

if yes try to run PoSH elevated (eg right click "run as administrator")
--
David [MS]

"Phil N" <bigphil@newsgroups.nospam> a écrit dans le message de
news:%23KljsT5gHHA.4516@TK2MSFTNGP03.phx.gbl...
>I have also set security for COM permissions in the dcomcnfg utility to
>enable the user remote launch and remote activation but still no luck. now
>i get the following error *** Get-WmiObject : Generic failure
>
> any help would be great!
>
> "Phil N" <bigphil@newsgroups.nospam> wrote in message
> news:ufSRw74gHHA.1220@TK2MSFTNGP03.phx.gbl...
>> hello everyone! I am having a bit of an issue getting past the wmi
>> permissions using the following script. if i run as an admin it connects
>> just fine but if connect as a differnet user it gives me access denied
>> message *** Get-WmiObject : Access is denied. (Exception from HRESULT:
>> 0x80070005 (E_ACCESSDENIED)) ***
>>
>> I have granted the user account full permission to control the service
>> but this is obviously not enough. i tried setting WMI Control
>> permissions on Root and CIMV2 to full control but still gives the user
>> access denied. i also granted the user logon as a service right but still
>> no luck. Any ideas? what am i missing here to be able to give the user
>> account access to view the service using the below script. I DO NOT what
>> to add the user to the administrators group. Thanks in advance for the
>> help!
>>
>>
>> (get-wmiobject win32_service -computername myComputer -credential
>> domain\me -filter "name='spooler'").state
>>
>
>

i am not running windows vista. XP Pro sp2. any ideas?

Phil

"David Sebban [MS]" <dsebban@online.microsoft.com> wrote in message
news:FC41EAFE-C58E-445A-9881-B5A79445C9BE@microsoft.com...
> are you running windows vista ?
>
> if yes try to run PoSH elevated (eg right click "run as administrator")
> --
> David [MS]
>
> "Phil N" <bigphil@newsgroups.nospam> a écrit dans le message de
> news:%23KljsT5gHHA.4516@TK2MSFTNGP03.phx.gbl...
>>I have also set security for COM permissions in the dcomcnfg utility to
>>enable the user remote launch and remote activation but still no luck.
>>now i get the following error *** Get-WmiObject : Generic failure
>>
>> any help would be great!
>>
>> "Phil N" <bigphil@newsgroups.nospam> wrote in message
>> news:ufSRw74gHHA.1220@TK2MSFTNGP03.phx.gbl...
>>> hello everyone! I am having a bit of an issue getting past the wmi
>>> permissions using the following script. if i run as an admin it
>>> connects just fine but if connect as a differnet user it gives me access
>>> denied message *** Get-WmiObject : Access is denied. (Exception from
>>> HRESULT: 0x80070005 (E_ACCESSDENIED)) ***
>>>
>>> I have granted the user account full permission to control the service
>>> but this is obviously not enough. i tried setting WMI Control
>>> permissions on Root and CIMV2 to full control but still gives the user
>>> access denied. i also granted the user logon as a service right but
>>> still no luck. Any ideas? what am i missing here to be able to give
>>> the user account access to view the service using the below script. I
>>> DO NOT what to add the user to the administrators group. Thanks in
>>> advance for the help!
>>>
>>>
>>> (get-wmiobject win32_service -computername myComputer -credential
>>> domain\me -filter "name='spooler'").state
>>>
>>
>>
>

Well,
there are some WMI classes that you cannot access when you are not running
as admin, and I don't think that ou can work around this.

--
David [MS]

"Phil N" <bigphil@newsgroups.nospam> a écrit dans le message de
news:eQJ5FlchHHA.5048@TK2MSFTNGP03.phx.gbl...
>i am not running windows vista. XP Pro sp2. any ideas?
>
> Phil
>
> "David Sebban [MS]" <dsebban@online.microsoft.com> wrote in message
> news:FC41EAFE-C58E-445A-9881-B5A79445C9BE@microsoft.com...
>> are you running windows vista ?
>>
>> if yes try to run PoSH elevated (eg right click "run as administrator")
>> --
>> David [MS]
>>
>> "Phil N" <bigphil@newsgroups.nospam> a écrit dans le message de
>> news:%23KljsT5gHHA.4516@TK2MSFTNGP03.phx.gbl...
>>>I have also set security for COM permissions in the dcomcnfg utility to
>>>enable the user remote launch and remote activation but still no luck.
>>>now i get the following error *** Get-WmiObject : Generic failure
>>>
>>> any help would be great!
>>>
>>> "Phil N" <bigphil@newsgroups.nospam> wrote in message
>>> news:ufSRw74gHHA.1220@TK2MSFTNGP03.phx.gbl...
>>>> hello everyone! I am having a bit of an issue getting past the wmi
>>>> permissions using the following script. if i run as an admin it
>>>> connects just fine but if connect as a differnet user it gives me
>>>> access denied message *** Get-WmiObject : Access is denied. (Exception
>>>> from HRESULT: 0x80070005 (E_ACCESSDENIED)) ***
>>>>
>>>> I have granted the user account full permission to control the service
>>>> but this is obviously not enough. i tried setting WMI Control
>>>> permissions on Root and CIMV2 to full control but still gives the user
>>>> access denied. i also granted the user logon as a service right but
>>>> still no luck. Any ideas? what am i missing here to be able to give
>>>> the user account access to view the service using the below script. I
>>>> DO NOT what to add the user to the administrators group. Thanks in
>>>> advance for the help!
>>>>
>>>>
>>>> (get-wmiobject win32_service -computername myComputer -credential
>>>> domain\me -filter "name='spooler'").state
>>>>
>>>
>>>
>>
>
>

It's probably permissions on the WMI repository - I know you said you
changed them, but they're all black magic as far as I'm concerned. I know
I've also run across classes that refuse to be accessed remotely by anyone
but the admin - possibly because WMI has to access *underlying* information
which only admin has access to? After all, WMI doesn't contain the *data,*
but just instructions for *where to get the data.*

--
Don Jones
Windows PowerShell MVP
Founder: www.ScriptingAnswers.com
Co-Author: "Windows PowerShell: TFM"

"Phil N" <bigphil@newsgroups.nospam> wrote in message
news:ufSRw74gHHA.1220@TK2MSFTNGP03.phx.gbl...
> hello everyone! I am having a bit of an issue getting past the wmi
> permissions using the following script. if i run as an admin it connects
> just fine but if connect as a differnet user it gives me access denied
> message *** Get-WmiObject : Access is denied. (Exception from HRESULT:
> 0x80070005 (E_ACCESSDENIED)) ***
>
> I have granted the user account full permission to control the service but
> this is obviously not enough. i tried setting WMI Control permissions on
> Root and CIMV2 to full control but still gives the user access denied. i
> also granted the user logon as a service right but still no luck. Any
> ideas? what am i missing here to be able to give the user account access
> to view the service using the below script. I DO NOT what to add the user
> to the administrators group. Thanks in advance for the help!
>
>
> (get-wmiobject win32_service -computername myComputer -credential
> domain\me -filter "name='spooler'").state
>