up vote 0 down vote favorite
1
share [g+] share [fb]

Attempting to use a SQL monitoring package (Red-Gate) that queries OS metrics via WMI. Running on a Windows 2003 server, I can monitor one server running Windows 2008 R2 but not another. Using webmtest gives the same problems, login failures.

All servers are on the same network segment, no firewalls in between. In an attempt to diagnose the problem, I have elevated the Windows account used to administrator, added it to the DCOM users group, and configured security as wide open as possible in WMI and DCOM as suggested in the following docs:

http://technet.microsoft.com/en-us/library/ee692772.aspx http://support.microsoft.com/kb/325353

The monitoring service always fails with 0x80070005 (DCOM ACCESS_DENIED).

Looking for other solutions.

link|improve this question
whats the winrm configuration status – tony roth May 18 '11 at 23:49
Running locally on the target server: C:\Windows\system32>winrm quickconfig WinRM already is set up to receive requests on this machine. WSManFault Message = Access is denied. Error number: -2147024891 0x80070005 Access is denied. C:\Windows\system32>winrm e wmi/root/cimv2 WSManFault Message = Access is denied. Error number: -2147024891 0x80070005 Access is denied. – MattK May 19 '11 at 15:46
Following a path started by the suggestion of looking at winrm, I came across msdn.microsoft.com/en-us/library/aa826699(v=VS.85).aspx, "Handling Remote Connections Under UAC". Even though UAC is disabled on the target server, adding key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\LocalAccountToken‌​FilterPolicy (1) allows remote WMI queries. – MattK May 19 '11 at 16:22
feedback

Know someone who can answer? Share a link to this question via email, Google+, Twitter, or Facebook.

Your Answer

 
or
required, but never shown
discard

Browse other questions tagged or ask your own question.