Submit a ticketCall us
Home > Success Center > Virtualization Manager (VMAN) > VMAN 7.1 Administrator Guide > Troubleshooting Hyper-V discovery > Configure Distributed Component Object Model (DCOM) and User Account Control (UAC)

Configure Distributed Component Object Model (DCOM) and User Account Control (UAC)

Created by Caroline Juszczak, last modified by MindTouch on Jun 23, 2016

Views: 21 Votes: 0 Revisions: 4

Some user types and operating systems require setting changes to allow remote WMI requests. For more information, see the Microsoft Developer Network.

setting

requirement

DCOM

Edit Default and Limits permissions to allow the following actions:

  • Local launch (default permission)
  • Remote launch (default permission)
  • Local activation (limits permission)
  • Remote activation (limits permission)

WMI Namespaces

Modify the cimv2 security to enable and remote enable the account used to access the server or workstation through WMI. Ensure the security change applies to the current namespace and subnamespaces.

User Account Control

Disable Remote UAC access token filtering when monitoring within a workgroup environment.

Enable DCOM

WMI uses DCOM to communicate with monitored target computers.

Enable DCOM permissions for your Virtualization Manager credentials.

  1. Log in to the target server with an administrator account.
  2. Click Start > Control Panel > Administrative Tools > Component Services.
  3. Expand Component Services> Computers.
  4. Right-click My Computer, and select Properties.
  5. Select the COM Security tab, and click Edit Limits in the Access Permissions group.
  6. Ensure that the user account you want to use to collect WMI statistics has Local Access and Remote Access, and click OK.
  7. Click Edit Default, and ensure the user account you want to use to collect WMI statistics has Local Access and Remote Access.
  8. Click OK.
  9. Click Edit Limits in the Launch and Activation Permissions group.
  10. Ensure that the user account you want to use to collect WMI statistics has Local Launch, Remote Launch, Local Activation, and Remote Activation, and click OK.
  11. Click Edit Default, and ensure that the user account you want to use to collect WMI statistics has Local Launch, Remote Launch, Local Activation, and Remote Activation.
  12. Click OK.

Enable account privileges in WMI

The account you specify in the Credentials Library must have security access to the namespace and subnamespaces of the monitored target computer.

  1. Log in to the computer you want to monitor with an administrator account.
  2. Click Start > Control Panel > Administrative Tools > Computer Management > Services and Applications.
  3. Right-click WMI Control, and select Properties.
  4. Select the Security tab, expand Root, and click cimv2.
  5. Click Security, select the user account used to access this computer, and allow the Enable Account and Remote Enable permissions.
  6. Click Advanced, and select the user account used to access this computer.
  7. Click Edit, select This namespace and subnamespaces and click OK.
  8. Click OK in the Advanced Security Settings for CIMV2 window.
  9. Click OK in the Security for Root\CIMV2 window.

    You might also have to grant access to the \root\virtualization\v2 and \root\virtualization namespaces.

  10. Click Services, select Windows Management Instrumentation, and click Restart.

    File:Success_Center/New_Articles/VMAN_Admin_MT/0Q0/080/WMIServices.png

Disable remote User Account Control for workgroups

If you monitor a host in a workgroup, modify the UAC settings so that local administrators do not run in Admin Approval Mode.

  1. Log in to the computer you want to monitor with an administrator account.
  2. Click Start > Control Panel > Administrative Tools > Local Security Policy.

    The path can be different based on your operating system.

  3. Expand Local Policies > Security Options.
  4. In Security Options, select User Account Control: Run all administrators in Admin Approval Mode.
  5. Click Action > Properties.
  6. Select Disabled, and click OK.
  7. Restart the computer to apply the change.
 
Last modified
04:21, 23 Jun 2016

Tags

Classifications

Public