WMI Script
I am trying to shut down a Windows 2008 Server Remotely using a WMI Script and a Domain Admin Account.
This always fails. If I run the same script with the built-in administrator account it works every time.
I have tried
Adding the Domain Admin Account to the Com Security Access and Launch Permissions,
Disabled Simple File Sharing Allowed Incoming WMI Connection Even turned off the Firewall
Question is How can I get the script to run under the domain admin account successfully?
Thank you
June 22nd, 2010 11:43pm
Hi,
I was able to get this script to work in my environment between DCs:
http://www.freevbcode.com/ShowCode.Asp?ID=4889
It calls the same shutdown method documented here:
http://msdn.microsoft.com/en-us/library/aa393627%28VS.85%29.aspx
In my DCOM settings on the server, looking at Windows Management and
Instrumentation
None of the users/groups had any explicit deny set, so all of these are
explicitly allowed permissions.
Abbreviations:
LL - Local Launch
RL - Remote Launch
LA - Local Activation
RA - Remote Activation
- General Tab: The authentication level is set to Default
- Location: Only "Run application on this computer" is checked
- Security:
Launch and Activation Permissions (set to custom)
Authenticated Users: LL, LA, RA
Administrators (domain builtin group): LL, RL, LA, RA
Access Permissions set to "Use Default." For the computer defaults:
SELF: Local Access, Remote Access
SYSTEM: Local Access
Administrators (domain builtin group): Local Access and Remote Access
Configuration Permissions (set to custom):
CREATOR OWNER: Special permissions (looks blank though UI)
SYSTEM: Full Control
Administrators (domain builtin group): Full Control
Users: Read, Special (also appears blank in advanced dialog)
Endpoints set to use default system protocols
Identity is set to the system account
Looking at the permissions for the root\cimv2 namespace (located in the
properties of the WMI Control snap-in when you right click the node
under the console root in MMC and select properties)
I will use these abbreviations:
EM - Execute Methods
FW - Full Write
PW - Partial Write
PrW - Provider Write
EA - Enable Account
RE - Remote Enable
RS - Read Security
ES - Edit Security
Authenticated Users: EM, PrW, EA
LOCAL SERVICE: EM, PrW, EA
NETWORK SERVICE: EM, PrW, EA
Administrators (domain builtin group): EM, FW, Pr, PrW, EA, RE, RS, ES
-- Mike Burr
Free Windows Admin Tool Kit Click here and download it now
June 24th, 2010 5:57am
Hi,
Have you tried "shutdown" command or "psexec shutdown"? If not, you may try it and let us know the detailed error if any.
Thanks.This posting is provided "AS IS" with no warranties, and confers no rights. Please remember to click "Mark as Answer" on the post that helps you, and to click "Unmark as Answer" if a marked post does not actually answer your
question. This can be beneficial to other community members reading the thread.
June 25th, 2010 10:57am