1.    25 Sep 2007 #1
    Janssen Guest

    Trying to understand Remote WMI permissions


    Hello. I've been tasked with querying, starting, and stopping services on a
    remote machine using a machine-specific local account on the remote machine.
    I've decided than an easy way to do this would be to use Powershell:

    $cred = get-cred (to be stored later on in an encrypted text file)
    gwmi win32_service -cred $cred -comp computer | ? {$_.Name -like "Myservice"}

    However, I'm having trouble figuring out what permissions are needed to make
    a remote WMI call in Powershell. When I add the said account to the
    computer's administrator group, it works. But when the account is in the
    user group, the gwmi call fails with access denied. I don't want to make
    that account an admin account. I only want it to be able to start, stop, and
    query services, which I've delegated through a GPO.

    I've tried opening the WMI Control in Computer Management, and as a test,
    granted the account write/execute/remote enable/etc. at the root level, and
    propagated the changes down, but that doesn't work, so I'm thinking there
    must be some other permission required in order for gwmi to work remotely for
    a non-admin account. Any ideas as to what I'm missing? I know the question
    isn't SPECIFICALLY a Powershell question, but I'm not sure where else I'd
    post the question.

    Thanks in advance,

    Janssen Jones
      My System SpecsSystem Spec

  2.    25 Sep 2007 #2
    Marco Shaw Guest

    Re: Trying to understand Remote WMI permissions


    Janssen wrote:

    > Hello. I've been tasked with querying, starting, and stopping services on a
    > remote machine using a machine-specific local account on the remote machine.
    > I've decided than an easy way to do this would be to use Powershell:
    >
    > $cred = get-cred (to be stored later on in an encrypted text file)
    > gwmi win32_service -cred $cred -comp computer | ? {$_.Name -like "Myservice"}
    >
    > However, I'm having trouble figuring out what permissions are needed to make
    > a remote WMI call in Powershell. When I add the said account to the
    > computer's administrator group, it works. But when the account is in the
    > user group, the gwmi call fails with access denied. I don't want to make
    > that account an admin account. I only want it to be able to start, stop, and
    > query services, which I've delegated through a GPO.
    >
    > I've tried opening the WMI Control in Computer Management, and as a test,
    > granted the account write/execute/remote enable/etc. at the root level, and
    > propagated the changes down, but that doesn't work, so I'm thinking there
    > must be some other permission required in order for gwmi to work remotely for
    > a non-admin account. Any ideas as to what I'm missing? I know the question
    > isn't SPECIFICALLY a Powershell question, but I'm not sure where else I'd
    > post the question.
    >
    > Thanks in advance,
    >
    > Janssen Jones
    Just in case... Read this since you're asking about WMI and credentials:
    http://www.scriptinganswers.com/foru...s.asp?TID=1041

    Marco

    --
    ----------------
    PowerGadgets MVP
    http://www.powergadgets.com/mvp

    Blog:
    http://marcoshaw.blogspot.com
      My System SpecsSystem Spec


Similar Threads
Thread Forum
share permissions get added to file permissions
Hi, Has the "best practices" for share permissions been chaged after all these years? As of my Windows 2000 certification I have been taught...
Server General
Vista permissions vs. Netgear UNIX NAS permissions
Does anyone have any idea why, when I select the Read/Write option for users and groups for various shares on my NAS, the Vista permissions don't...
Network & Sharing
Vista permissions vs. Netgear UNIX NAS permissions
Does anyone have any idea why, when I select the Read/Write option for users and groups for various shares on my NAS, the Vista permissions don't...
Vista networking & sharing
Need to understand permissions and ownership
I am completely lost on trying to understand the process of accessing my folders and files on vista. I am the only user and have only one...
Vista General
Remote registry key permissions
Hi I am wondering if there is anything that I can use to get registry permissions using powershell of a remote server. for example, how can I get...
PowerShell
WMI remote permissions error
If I run this: gwmi win32_process -computer "COMPUTER" -credential "DOMAIN\USER" And provide the proper password then I get a permission denied...
PowerShell
Vista Permissions Questions (including Remote Desktop)
Ok, so far im finding the permission system in Vista at most, flakey. I can execute/modify/etc files, but not move/rename/delete them sometimes. I...
Vista General

Our Sites
  • Ten Forums
  • Eight Forums
  • Seven Forums
  • PC Help Forum
  • Help Me Bake
  • Site Links
  • Contact Us
  • Privacy and Cookies
  • About Us
    Windows Vista Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

    Designer Media Ltd
    All times are GMT -5. The time now is 05:42.
    .