1. Support
  2. KBAs
  3. Configuring WMI Security

Configuring WMI Security

WMIX and Goverlan uses WMI (Windows Management Instrumentation) to query some information and perform some actions. In order to use WMI on a remote machine, you must have access to the WMI Repository on that machine. This article describes how to modify the security and permission settings of the WMI repository on a machine.

Information:

Opening the WMI Control MMC Snap-in

The WMI security settings are configured using the WMI Control MMC snap-in. The WMI Control snap-in can be used to configure the security settings of WMI on the local machine or on a remote machine. However, if you do not have access to the WMI repository on the remote machine, you must use the WMI Control snap-in on the remote machine itself.

  1. Click on Start >> Run…
  2. Enter mmc in the Open field and click on OK. The Microsoft Management Console opens.
  3. Select File >> Add/Remove Snap-in… from the main menu.
  4. Click on Add…
  5. From the Add Standalone Snap-in window, select the WMI Control snap-in. Click on Add.
  6. Select if you want to open the WMI Control snap-in on the local machine or on a remote machine, and click on Finish.
  7. Close the Add Standalone Snap-in window.
  8. Close the Add/Remove Snap-in window by pressing the OK button.

Setting WMI Security

  1. Select the WMI Control item in the left pane, right click on the mouse and select Properties.
  2. Select the Security tab.
  3. Select the WMI Container where you want to modify the security, i.e. Root or CIMV2, and click on the Security button.
  4. Configure the desired permissions. You can set the following permissions:

Execute Methods: Permits methods that are exported from the WMI classes or instances to be run.
Full Write: Permits full read, write, and delete access to all WMI objects, classes, and instances.
Partial Write: Permits write access to static WMI objects.
Provider Write: Permits write access to objects that are provided by the provider.
Enable Account: Permits read access to WMI objects.
Remote Enable: Permits remote access to the namespace.
Read Security: Permits read-only access to WMI security information.
Edit Security: Permits read and write access to WMI security information.

Once you have configured the desired security, apply your changes and close MMC.

Was this article helpful?

Related Articles