This question has been asked in various forms but none of the solutions worked for me.
I am trying to run icinga
from a linux box and one the plugins uses WMI
queries. It's failing, so I decided to run simple wmic
queries to find the issue. I use the following query:
wmic -U locallogin%'localpass' //myserver.domain.net "select * from Win32_Bios"
where locallogin
is a local administrator and localpass
is the password.
Unfortunately I get the following error:
[wmi/wmic.c:196:main()] ERROR: Login to remote object.
NTSTATUS: NT_STATUS_ACCESS_DENIED - Access denied
However I get a successful response when I use a domain login. So my theory is that this has nothing to do with network settings but is a user credentials/permissions problem but I have no idea where to look. I should note that I have successfully used a local admin account on another machine on my domain but I can't find any discrepancy between the local user on it and the local user on this other machine.
locallogin
to WMI
security via wmimgmt.msc
(even though local admins can do it already).DCOMCNFG
-> Component Services
-> Computers
-> My Computer
-> Properties
-> Under COM Security and added the user to both sections.cmd
in elevated permissions: netsh advfirewall firewall set rule group="remote desktop" new enable=Yes
and
winrm quickconfig
.Is there something I am forgetting? I've removed and re-added the local user, triple checked for typos, etc. but I've been stuck for 2 days now. Any help is appreciated.
Further Info
I've also tried running the following from Powershell on another Windows box from within the same domain:
Get-WmiObject -ComputerName myserver.domain.net -Class Win32_Process -Credential locallogin
Where locallogin
is the user that exists on the remote server. This fails with
Get-WmiObject : Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))
and in the event log on the remote server I see this:
Failure Information: Failure Reason: Unknown user name or bad password. Status: 0xC000006D Sub Status: 0xC0000064
However I am 110% sure the password is good and the user exists.
Of course immediately after I post a bounty it starts working. I didn't reboot or change anything. I have no idea why it is working now.
User contributions licensed under CC BY-SA 3.0