WMI and privilege

Nadir · Post by **Nadir** » Wed Mar 01, 2006 8:37 am

hello all

Could you tell me what privilege I need exactly to execute performance counters using wmi?
Must be admin privilege? or can I use user domain account with specific privilege? or other way?

Thanks

Yoorix · Post by **Yoorix** » Wed Mar 01, 2006 9:26 am

I think you should use admin privilege. What exact problem do you have?
Do you want to check performance counters on local or remote machine?

Regards,
Yoorix

Nadir · Post by **Nadir** » Wed Mar 01, 2006 9:31 am

I check counters on remote machine, but the administrator of domain don't want to give me all privileges.
I would like to know the minimals privileges to execute wmi on remote machines.
Thanks

KS-Soft · Post by **KS-Soft** » Wed Mar 01, 2006 11:34 am

You may configure WMI security settings by yourself (or ask your domain admin if you do not have permission):
1) Start -> Settings -> Control Panel-> Administrative tools -> Computer Management -> Services and applications -> WMI Control
2) then click right mouse button and select Properties item from popup menu
3) go to Security tab where you can manage user permissions.

Or you may type "wmimgmt.msc" in command line prompt (instead of step 1).

The following articles might be usefull
http://www.microsoft.com/resources/docu ... group.mspx
http://redmondmag.com/columns/article.a ... ialsID=381

Regards
Alex

Nadir · Post by **Nadir** » Thu Mar 02, 2006 2:58 am

Ok thank you very much Alex

Nadir · Post by **Nadir** » Fri Mar 10, 2006 7:51 am

You may configure WMI security settings by yourself (or ask your domain admin if you do not have permission):
1) Start -> Settings -> Control Panel-> Administrative tools -> Computer Management -> Services and applications -> WMI Control
2) then click right mouse button and select Properties item from popup menu
3) go to Security tab where you can manage user permissions.

Or you may type "wmimgmt.msc" in command line prompt (instead of step 1).

have you tested this way, I have tested but don't works...

If I want to monitor several servers in the same network where is installed AHM, can I use one agent of RMA?
RMA don't logon on remote server, just use TCP port no?

Yoorix · Post by **Yoorix** » Fri Mar 10, 2006 8:01 am

What OS is installed on target server? Win2000? 2003? Other?
What error message do you retrieve when you are trying to run WMI?

If I want to monitor several servers in the same network where is installed AHM, can I use one agent of RMA?

You don't need to use RMA in the same network.

Regards,
Yoorix

Nadir · Post by **Nadir** » Fri Mar 10, 2006 8:16 am

Win 2003 server, and when I want to check counters from remote server in performance counters --> unable to connect.

have you tested performance counters test without admin privilege?

Thanks

Yoorix · Post by **Yoorix** » Fri Mar 10, 2006 8:37 am

HostMonitor should be started under administrator's account in order to perform Performance Counter test and you should specify admin's account to do it on remote server. There are security reasons.

Regards,
Yoorix

Nadir · Post by **Nadir** » Fri Mar 10, 2006 9:41 am

But in post reply's Alex, he tell me that it's possible to perform this test without admin account just configure wmi seetting?

Yoorix · Post by **Yoorix** » Fri Mar 10, 2006 9:53 am

So, you perform WMI test, not Performance counter test. I thougt you are trying to perform Performance Counters Test.

In this case, you should do Alex's described things on remote server, where you want to check counters. Have you done it?

Following articles might be useful too:
http://www.microforge.net/kb/62
http://support.microsoft.com/?kbid=840634

And you have not told me yet, what's OS installed on Remote Server? Is this server in same domain as you?

Regards,
Yoorix

KS-Soft · Post by **KS-Soft** » Fri Mar 10, 2006 12:13 pm

have you tested this way, I have tested but don't works...

Please be more specific. What means "don't work"? What error do you see? May be its not permission related problem?
Try to use admin account. If test will not work, then problem relates to something else. E.g. firewall or DCOM settings.

have you tested performance counters test without admin privilege?

Performance Counter test requires admin privileges.

But in post reply's Alex, he tell me that it's possible to perform this test without admin account just configure wmi seetting?

Yes, I said that. Because you asked about WMI test. Now you are talking about Performance Counter test. You are confusing me.
What exactly test method do you use? If you are talking about different problems, please create several topics.

If I want to monitor several servers in the same network where is installed AHM, can I use one agent of RMA?

In the same network? RMA was designed to monitor remote networks.

RMA don't logon on remote server, just use TCP port no?

Depends on test method. E.g. Ping, TCP, Trace test methods does not require any logon. While WMI, Performance Counter, Process, Service test methods require logon.

Regards
Alex

Nadir · Post by **Nadir** » Mon Mar 27, 2006 1:42 am

Hello all,

Sorry for my post reply I was mistaken, I ask for privilege for performace counters not WMi tests sorry!!

if I understood well for performance counters test I need admin privilege but for wmi test I d'ont need all privilege?

still excuse me and thanks a lot

Yoorix · Post by **Yoorix** » Mon Mar 27, 2006 6:47 am

Nadir wrote:if I understood well for performance counters test I need admin privilege but for wmi test I d'ont need all privilege?

1. To perform Performance Counter test you should provide administrator's account for Remote server.

2. To perform WMI test you might not provide administrator's account, but you should configure WMI security settings on local and remote servers as Alex has described above.

Regards,
Yoorix