Hi, I have the following scenario: - AD domain with several domain controllers - zenoss monitoring system with wmi I've been able to successfully monitor systems joined to the domain with an elevated account. This is ok for testing purposes but, for the next step I want to setup a user/group with only the necessary rights. I've created a dedicated impersonal account in the domain for this task. From what info I could gather this user must be made a member of Distributed COM Users local group on the machines I want to monitor and be given "Remote Enable" permission on the required WMI namespaces. The first one I can do via GPO using Restricted Groups. Is there a way to grant the "Remote Enable" permission via a GPO or a centralized method for that matter? It would be cumbersome to go to each computer and set the permission by hand.

Please contact the software manufacturer support. Zenoss Community http://community.zenoss.org/index.jspaPlease remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

Please contact the software manufacturer support. Zenoss Community http://community.zenoss.org/index.jspa Please remember to click “Mark as Answer” on the post that helps you, and to click “Unmark as Answer” if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. ” Sorry, I think I wasn't very specific. I found most of the settings that have to be done: http://community.zenoss.org/thread/11278?start=0&tstart=0 . What I'm asking is windows related. Probably "Windows 7 Miscellaneous" isn't the proper section but, I don't know where this could go? Maybe an AD Administration/Group Policies section. What I need to know is how to give Remote Enable rights to a domain group/user on a WMI namespace on all computers in a domain using group policies or something similar.