cancel
Showing results for 
Search instead for 
Did you mean: 
Create Post
Level 12

Has Anybody Ever Gotten WMI to Work without Admin credentials

Just a status check...  Last time I went down this road it seemed to be the consensus that you could not get remote WMI queries to work without admin privileges on the remote server.   We have everything working and do not need to "fix" anything, I am just curious if anyone has ever gotten WMI to work without admin rights?

10 Replies
Level 7

I followed these steps and got it to work.

https://www.infrasightlabs.com/setting-wmi-access-ad-gpo/

You can either do it via the AD by using GPO or on each server individually.

0 Kudos

This is what worked for me after quite a bit of work.  This is the least privilege scenario I could come up with:

  • WMI Monitoring
    • Credentials
      • User Account
        • Member of Distributed COM Users
        • Member of Performance Monitor Users
        • Member of Users
      • WMI Namespace Security
        • Add user account to CIMV2 namespace
        • Allow Remote Enable
        • Allow Read Security
    • Firewall Settings
      • Run the following at cmd
        • netsh firewall set service RemoteAdmin enable custom <ip address or cidr>

    • For additional information on WMI
      • http://msdn.microsoft.com/en-us/library/aa394582(VS.85).aspx

This works fine for Performance Counter Monitor but not for Windows Service Monitor.

Any idea how to set account permissions for a non admin account that allows Windows Service Monitor to query services?

0 Kudos
Product Manager
Product Manager

The only workaround I'm aware of is defining permissions on a per-service level using the "sc sdset" command

0 Kudos

Are you still working on a solution for this credential issue? We wish to monitor windows service status with WMI but we can't have admin rights on the servers. This is not accepted by our security policy. Do you have an easy to deploy workaround. We have about 500 windows servers. The least steps the procedure will have, the better it will be.

0 Kudos

We've created the following KB article that outlines the steps necessary to allow a non-Windows administrator to monitor Windows servers.

http://knowledgebase.solarwinds.com/kb/questions/3304/How+to+create+a+non-administrator+user+for+APM...

0 Kudos

Solarwinds just reorganized its KB into the "Success Center" and re-wrote all of the article URLs. Do you happen to know the new URL for this article? I've searched and can't find it. Many thanks.

0 Kudos

Thanks!

0 Kudos

jkuvlesk​ is heading up our KB migration effort. She should be able to answer that question.

0 Kudos