Config WMI Button (again)

paul — Mon, 23 Sep 2019 18:50:44 GMT

On a post from a few years ago Craig responded with the following details on the Config WMI button:

Sets the Windows Audit Policy
Sets permissions When AD User in the Domain Admin Group
Sets required Permissions When AD User Not in Domain Admin Group
Sets permissions to Use DCOM on the Domain Controller
Sets permissions for Access to WMI Root/CIMv2 Name Space
Grants access to the Security Event Log on the AD Domain Controller

The question I have is what permissions are need to run this button? If the service account used for WMI polling is not a member of Domain Admins it won't be able to make the Config WMI call to the DC. My current customer has 68 DCs to get passive ID working on and we don't want to add the service account to domain admins.

We have the service account polling one DC correctly but we had to do all the steps manually to make it work.

Is that config WMI script published anywhere so the customer could look at it and modify it as needed?

Re: Config WMI Button (again)

hslai — Thu, 26 Sep 2019 05:06:37 GMT

You are correct that the button requiring a Domain Admin.

The script is not published as we do not support it that way.

topic Re: Config WMI Button (again) in Network Access Control

Config WMI Button (again)

Re: Config WMI Button (again)