Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

Attempting to use a SQL monitoring package (Red-Gate) that queries OS metrics via WMI. Running on a Windows 2003 server, I can monitor one server running Windows 2008 R2 but not another. Using webmtest gives the same problems, login failures.

All servers are on the same network segment, no firewalls in between. In an attempt to diagnose the problem, I have elevated the Windows account used to administrator, added it to the DCOM users group, and configured security as wide open as possible in WMI and DCOM as suggested in the following docs:

http://technet.microsoft.com/en-us/library/ee692772.aspx http://support.microsoft.com/kb/325353

The monitoring service always fails with 0x80070005 (DCOM ACCESS_DENIED).

Looking for other solutions.

share|improve this question
    
whats the winrm configuration status –  tony roth May 18 '11 at 23:49
    
Running locally on the target server: C:\Windows\system32>winrm quickconfig WinRM already is set up to receive requests on this machine. WSManFault Message = Access is denied. Error number: -2147024891 0x80070005 Access is denied. C:\Windows\system32>winrm e wmi/root/cimv2 WSManFault Message = Access is denied. Error number: -2147024891 0x80070005 Access is denied. –  MattK May 19 '11 at 15:46
    
Following a path started by the suggestion of looking at winrm, I came across msdn.microsoft.com/en-us/library/aa826699(v=VS.85).aspx, "Handling Remote Connections Under UAC". Even though UAC is disabled on the target server, adding key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\LocalAccountToken‌​FilterPolicy (1) allows remote WMI queries. –  MattK May 19 '11 at 16:22
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.