WMI Script
I am trying to shut down a Windows 2008 Server Remotely using a WMI Script and a Domain Admin Account. This always fails. If I run the same script with the built-in administrator account it works every time. I have tried Adding the Domain Admin Account to the Com Security Access and Launch Permissions, Disabled Simple File Sharing Allowed Incoming WMI Connection Even turned off the Firewall Question is How can I get the script to run under the domain admin account successfully? Thank you
June 22nd, 2010 11:43pm

Hi, I was able to get this script to work in my environment between DCs: http://www.freevbcode.com/ShowCode.Asp?ID=4889 It calls the same shutdown method documented here: http://msdn.microsoft.com/en-us/library/aa393627%28VS.85%29.aspx In my DCOM settings on the server, looking at Windows Management and Instrumentation None of the users/groups had any explicit deny set, so all of these are explicitly allowed permissions. Abbreviations: LL - Local Launch RL - Remote Launch LA - Local Activation RA - Remote Activation - General Tab: The authentication level is set to Default - Location: Only "Run application on this computer" is checked - Security: Launch and Activation Permissions (set to custom) Authenticated Users: LL, LA, RA Administrators (domain builtin group): LL, RL, LA, RA Access Permissions set to "Use Default." For the computer defaults: SELF: Local Access, Remote Access SYSTEM: Local Access Administrators (domain builtin group): Local Access and Remote Access Configuration Permissions (set to custom): CREATOR OWNER: Special permissions (looks blank though UI) SYSTEM: Full Control Administrators (domain builtin group): Full Control Users: Read, Special (also appears blank in advanced dialog) Endpoints set to use default system protocols Identity is set to the system account Looking at the permissions for the root\cimv2 namespace (located in the properties of the WMI Control snap-in when you right click the node under the console root in MMC and select properties) I will use these abbreviations: EM - Execute Methods FW - Full Write PW - Partial Write PrW - Provider Write EA - Enable Account RE - Remote Enable RS - Read Security ES - Edit Security Authenticated Users: EM, PrW, EA LOCAL SERVICE: EM, PrW, EA NETWORK SERVICE: EM, PrW, EA Administrators (domain builtin group): EM, FW, Pr, PrW, EA, RE, RS, ES -- Mike Burr
Free Windows Admin Tool Kit Click here and download it now
June 24th, 2010 5:57am

Hi, Have you tried "shutdown" command or "psexec shutdown"? If not, you may try it and let us know the detailed error if any. Thanks.This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.
June 25th, 2010 10:57am

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics