
Just a status check... Last time I went down this road it seemed to be the consensus that you could not get remote WMI queries to work without admin privileges on the remote server. We have everything working and do not need to "fix" anything, I am just curious if anyone has ever gotten WMI to work without admin rights?
This is what worked for me after quite a bit of work. This is the least privilege scenario I could come up with:
netsh firewall set service RemoteAdmin enable custom <ip address or cidr>
This works fine for Performance Counter Monitor but not for Windows Service Monitor.
Any idea how to set account permissions for a non admin account that allows Windows Service Monitor to query services?
The only workaround I'm aware of is defining permissions on a per-service level using the "sc sdset" command
Are you still working on a solution for this credential issue? We wish to monitor windows service status with WMI but we can't have admin rights on the servers. This is not accepted by our security policy. Do you have an easy to deploy workaround. We have about 500 windows servers. The least steps the procedure will have, the better it will be.
We've created the following KB article that outlines the steps necessary to allow a non-Windows administrator to monitor Windows servers.