WMI properties and users
Hello, I've recently noticed I was having a lot of errors in the event viewer b/c of denied access for WMI. However, there were also some messages that stated that WMI was allowed access. I then discovered that WMI can be a way to access a computer remotely. I then discovered the following location: Computer Management\Services and App lications\WMI Control I right-clicked WMI Control and went to Properties\Security tab\root>RSOP>Security>Users. Under this I discovered ms_409 (which after some research determined was my computer with the icon of a globe). Under this there were three folders though with random letters and numbers for the names (and when I right-click the folder and click security the account is called "unknown account_random letters/#s"). My question: these three folders are they users on my computer or are they users remoting into my computer? The only activate account is mine and then there is the disable admin account that windows creates. The only thing I can think the third account would be would be the computer that i set up so that it was a part of my workgroup (it can only access shared folders and rarely does this). I've tried searching for this information but can't find a thing. Any help provide is greatly appreciated!
January 1st, 2011 12:27am

On Sat, 1 Jan 2011 05:22:54 +0000, Missy2485 wrote: >I've recently noticed I was having a lot of errors in the event viewer b/c of denied access for WMI. However, there were also some messages that stated that WMI was allowed access. I then discovered that WMI can be a way to access a computer remotely. I then discovered the following location: Computer Management\Services and App lications\WMI Control I right-clicked WMI Control and went to Properties\Security tab\root>RSOP>Security>Users. Under this I discovered ms_409 (which after some research determined was my computer with the icon of a globe). Under this there were three folders though with random letters and numbers for the names (and when I right-click the folder and click security the account is called "unknown account_random letters/#s"). My question: these three folders are they users on my computer or are they users remoting into my computer? The only activate account is mine and then there is the disable admin account that windows creates. The only thing I can think the >third account would be would be the computer that i set up so that it was a part of my workgroup (it can only access shared folders and rarely does this). I've tried searching for this information but can't find a thing. Any help provide is greatly appreciated! This related to Exchange how? I'm retty sure you'd get a better answer is you asked the question in one of the "platform" forums. --- Rich Matheisen MCSE+I, Exchange MVP --- Rich Matheisen MCSE+I, Exchange MVP
Free Windows Admin Tool Kit Click here and download it now
January 1st, 2011 12:45am

Hi, I would like suggest ask the question here, you will get more information there. Best regards, SerenaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
January 5th, 2011 3:29am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics