|
server
newsgroups
|
|||||||||||||||||||||||
|
|||||||||||||||||||||||
WMI Script, access denied?I've got a little script here that I can use to get some information out of a computer. This works fine with computers that are attached to my domain but I can't get it to work with a computer that is not in my domain but rather a workgroup. I get an Access Denied message. What is different about accessing a workgroup computer and a domain computer? Here's my code: Const WbemAuthenticationLevelPktPrivacy = 6 strComputer = "chart553" strUser = "workgroup\Julie" strPassword = "" Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") Set objWMIService = objwbemLocator.ConnectServer _ (strComputer, strNamespace, strUser, strPassword) objWMIService.Security_.authenticationLevel = WbemAuthenticationLevelPktPrivacy I've also tried strUser = "chart553\Julie" Julie is the Administrator account name of this laptop and the account does not have a password, the laptop boots straight to the desktop. It is Windows XP Home, whereas the domain computers are XP Pro, could that be the difference? Thanks in advance, Linn
Show quote
Hide quote
"Linn Kubler" <lkub***@chartwellwisc2.com> wrote in message I believe XP home does not have DCOM enabled, which is required for WMI to news:%23P94DDafJHA.3716@TK2MSFTNGP06.phx.gbl... > Hi, > > I've got a little script here that I can use to get some information out > of a computer. This works fine with computers that are attached to my > domain but I can't get it to work with a computer that is not in my domain > but rather a workgroup. I get an Access Denied message. What is > different about accessing a workgroup computer and a domain computer? > > Here's my code: > Const WbemAuthenticationLevelPktPrivacy = 6 > strComputer = "chart553" > strUser = "workgroup\Julie" > strPassword = "" > Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") > Set objWMIService = objwbemLocator.ConnectServer _ > (strComputer, strNamespace, strUser, strPassword) > objWMIService.Security_.authenticationLevel = > WbemAuthenticationLevelPktPrivacy > > I've also tried strUser = "chart553\Julie" > > Julie is the Administrator account name of this laptop and the account > does not have a password, the laptop boots straight to the desktop. It is > Windows XP Home, whereas the domain computers are XP Pro, could that be > the difference? > > Thanks in advance, > Linn > connect remotely.
Show quote
Hide quote
"Richard Mueller [MVP]" <rlmueller-nospam@ameritech.nospam.net> wrote in Some time ago I did research and found the following rules:message news:eTl29mafJHA.1248@TK2MSFTNGP03.phx.gbl... > > "Linn Kubler" <lkub***@chartwellwisc2.com> wrote in message > news:%23P94DDafJHA.3716@TK2MSFTNGP06.phx.gbl... >> Hi, >> >> I've got a little script here that I can use to get some information out >> of a computer. This works fine with computers that are attached to my >> domain but I can't get it to work with a computer that is not in my >> domain but rather a workgroup. I get an Access Denied message. What is >> different about accessing a workgroup computer and a domain computer? >> >> Here's my code: >> Const WbemAuthenticationLevelPktPrivacy = 6 >> strComputer = "chart553" >> strUser = "workgroup\Julie" >> strPassword = "" >> Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") >> Set objWMIService = objwbemLocator.ConnectServer _ >> (strComputer, strNamespace, strUser, strPassword) >> objWMIService.Security_.authenticationLevel = >> WbemAuthenticationLevelPktPrivacy >> >> I've also tried strUser = "chart553\Julie" >> >> Julie is the Administrator account name of this laptop and the account >> does not have a password, the laptop boots straight to the desktop. It >> is Windows XP Home, whereas the domain computers are XP Pro, could that >> be the difference? >> >> Thanks in advance, >> Linn >> > > > I believe XP home does not have DCOM enabled, which is required for WMI to > connect remotely. > > -- > Richard Mueller > MVP Directory Services > Hilltop Lab - http://www.rlmueller.net > -- > 1. You cannot connect to computer running XP Home. 2. An NT computer cannot connect to OS later than W2k. 3. A W2k3 computer cannot connect to Win9x. 4. To connect to W2k Server SP4 you must set impersonation level to Impersonate. 5. W2k computers must have SP2 to connect to XP or above. 6. W2k3 can only connect to Win9x and NT if credentials supplied. 7. To connect to XP or W2k3 you must set authentication level to Pkt. Number 7 may not be required, but it can't hurt either.
Show quote
Hide quote
"Richard Mueller [MVP]" <rlmueller-nospam@ameritech.nospam.net> wrote in Yeah, seems like number 1 is what's getting me here. I'm working on running message news:%23xYPXrafJHA.1168@TK2MSFTNGP05.phx.gbl... > > "Richard Mueller [MVP]" <rlmueller-nospam@ameritech.nospam.net> wrote in > message news:eTl29mafJHA.1248@TK2MSFTNGP03.phx.gbl... >> >> "Linn Kubler" <lkub***@chartwellwisc2.com> wrote in message >> news:%23P94DDafJHA.3716@TK2MSFTNGP06.phx.gbl... >>> Hi, >>> >>> I've got a little script here that I can use to get some information out >>> of a computer. This works fine with computers that are attached to my >>> domain but I can't get it to work with a computer that is not in my >>> domain but rather a workgroup. I get an Access Denied message. What is >>> different about accessing a workgroup computer and a domain computer? >>> >>> Here's my code: >>> Const WbemAuthenticationLevelPktPrivacy = 6 >>> strComputer = "chart553" >>> strUser = "workgroup\Julie" >>> strPassword = "" >>> Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") >>> Set objWMIService = objwbemLocator.ConnectServer _ >>> (strComputer, strNamespace, strUser, strPassword) >>> objWMIService.Security_.authenticationLevel = >>> WbemAuthenticationLevelPktPrivacy >>> >>> I've also tried strUser = "chart553\Julie" >>> >>> Julie is the Administrator account name of this laptop and the account >>> does not have a password, the laptop boots straight to the desktop. It >>> is Windows XP Home, whereas the domain computers are XP Pro, could that >>> be the difference? >>> >>> Thanks in advance, >>> Linn >>> >> >> >> I believe XP home does not have DCOM enabled, which is required for WMI >> to connect remotely. >> >> -- >> Richard Mueller >> MVP Directory Services >> Hilltop Lab - http://www.rlmueller.net >> -- >> > > Some time ago I did research and found the following rules: > > 1. You cannot connect to computer running XP Home. > 2. An NT computer cannot connect to OS later than W2k. > 3. A W2k3 computer cannot connect to Win9x. > 4. To connect to W2k Server SP4 you must set impersonation level to > Impersonate. > 5. W2k computers must have SP2 to connect to XP or above. > 6. W2k3 can only connect to Win9x and NT if credentials supplied. > 7. To connect to XP or W2k3 you must set authentication level to Pkt. > > Number 7 may not be required, but it can't hurt either. > > -- > Richard Mueller > MVP Directory Services > Hilltop Lab - http://www.rlmueller.net > -- scripts from the XP Home systems and pushing the collected data to my system. I think this will have limited use for me but necessary, XP home is definately the exception in my network. Thanks, Linn Here's one...
I have a rouutine I use to collect a LOT of data from all of our servers. - Create a share on your central repository and put you program or batch file there. i have \\centralserver\admin\serveradmin.cmd - Allow everyone read/write access here. - create a scheduled task on all your computers to execute at some obscure hour, like 4:00 AM, to run \\centralserver\admin\serveradmin.cmd - have the serveradmin.cmd run the list of programs you want to run on all your servers. This program will run using the local network service account and have full access to the system All your server will run the job at 4:00 AM and then when you get into the office in the morning, you will have a wealth of information waiting for you. Some of the things I run..... ipconfig /all > \\centralserver\admin\serverIPs\%computername%.txt ( save ipconfig data to a text file ) call \\centralserver\admin\utils\timecheck.cmd ( this collects the servers time source so we can keep the time heirachy good ) call \\centralserver\admin\GetLocalAdmins.cmd ( dump a list of waht accounts / groups are in the local admin for auditing ) certutil -store -v my > \\centralserver\admin\localcerts\%computername%.txt ( collect certificate data ont eh servers to identify ones about to expire ) Obviously you can run any program here you want. I like to restirct this daily routine to small tasks that will run fast. The data collected can then be parsed later on and you can generate various reports.. You can easily add your WBEM script. If you want to run a program / script on demand... at \\remotecomputer 13:30 \\centralserver\admin\serveradmin.cmd or at \\remotecomputer 13:30 \\centralserver\admin\utility.cmd ( any other utility you want run ) Want one of the lines in the central script to only run once if not exist \\centralserver\admin\serverIPs\%computername%.txt ipconfig /all > \\centralserver\admin\serverIPs\%computername%.txt This has made a real nice little server inventory system for us!! Tom Linn Kubler" <lkub***@chartwellwisc2.com> wrote in message Show quoteHide quote news:%23P94DDafJHA.3716@TK2MSFTNGP06.phx.gbl... > Hi, > > I've got a little script here that I can use to get some information out > of a computer. This works fine with computers that are attached to my > domain but I can't get it to work with a computer that is not in my domain > but rather a workgroup. I get an Access Denied message. What is > different about accessing a workgroup computer and a domain computer? > > Here's my code: > Const WbemAuthenticationLevelPktPrivacy = 6 > strComputer = "chart553" > strUser = "workgroup\Julie" > strPassword = "" > Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") > Set objWMIService = objwbemLocator.ConnectServer _ > (strComputer, strNamespace, strUser, strPassword) > objWMIService.Security_.authenticationLevel = > WbemAuthenticationLevelPktPrivacy > > I've also tried strUser = "chart553\Julie" > > Julie is the Administrator account name of this laptop and the account > does not have a password, the laptop boots straight to the desktop. It is > Windows XP Home, whereas the domain computers are XP Pro, could that be > the difference? > > Thanks in advance, > Linn > > Tom,
Thanks for the suggestions, good ideas here. For my purposes, however, I'm more interested in the user's workstations than the servers at this point. So I'm looking more at on demand scripts that I run when needed. But I will keep this process in mind for my servers, haven't thought much about collecting data against them. Thanks, Linn Show quoteHide quote "Tom_Slycke" <tom_sl***@cox.net> wrote in message news:BuSel.2940$B01.631@newsfe13.iad... > Here's one... > > I have a rouutine I use to collect a LOT of data from all of our servers. > - Create a share on your central repository and put you program or batch > file there. i have \\centralserver\admin\serveradmin.cmd > - Allow everyone read/write access here. > - create a scheduled task on all your computers to execute at some obscure > hour, like 4:00 AM, to run \\centralserver\admin\serveradmin.cmd > - have the serveradmin.cmd run the list of programs you want to run on all > your servers. > > This program will run using the local network service account and have > full access to the system > > All your server will run the job at 4:00 AM and then when you get into the > office in the morning, you will have a wealth of information waiting for > you. > > Some of the things I run..... > > ipconfig /all > \\centralserver\admin\serverIPs\%computername%.txt > ( save ipconfig data to a text file ) > call \\centralserver\admin\utils\timecheck.cmd ( this collects the servers > time source so we can keep the time heirachy good ) > call \\centralserver\admin\GetLocalAdmins.cmd ( dump a list of waht > accounts / groups are in the local admin for auditing ) > certutil -store -v my > > \\centralserver\admin\localcerts\%computername%.txt ( collect certificate > data ont eh servers to identify ones about to expire ) > > Obviously you can run any program here you want. I like to restirct this > daily routine to small tasks that will run fast. The data collected can > then be parsed later on and you can generate various reports.. > > You can easily add your WBEM script. > If you want to run a program / script on demand... > at \\remotecomputer 13:30 \\centralserver\admin\serveradmin.cmd > or at \\remotecomputer 13:30 \\centralserver\admin\utility.cmd ( any > other utility you want run ) > > Want one of the lines in the central script to only run once > if not exist \\centralserver\admin\serverIPs\%computername%.txt ipconfig > /all > \\centralserver\admin\serverIPs\%computername%.txt > > This has made a real nice little server inventory system for us!! > > > Tom > > > > > > Linn Kubler" <lkub***@chartwellwisc2.com> wrote in message > news:%23P94DDafJHA.3716@TK2MSFTNGP06.phx.gbl... >> Hi, >> >> I've got a little script here that I can use to get some information out >> of a computer. This works fine with computers that are attached to my >> domain but I can't get it to work with a computer that is not in my >> domain but rather a workgroup. I get an Access Denied message. What is >> different about accessing a workgroup computer and a domain computer? >> >> Here's my code: >> Const WbemAuthenticationLevelPktPrivacy = 6 >> strComputer = "chart553" >> strUser = "workgroup\Julie" >> strPassword = "" >> Set objWbemLocator = CreateObject("WbemScripting.SWbemLocator") >> Set objWMIService = objwbemLocator.ConnectServer _ >> (strComputer, strNamespace, strUser, strPassword) >> objWMIService.Security_.authenticationLevel = >> WbemAuthenticationLevelPktPrivacy >> >> I've also tried strUser = "chart553\Julie" >> >> Julie is the Administrator account name of this laptop and the account >> does not have a password, the laptop boots straight to the desktop. It >> is Windows XP Home, whereas the domain computers are XP Pro, could that >> be the difference? >> >> Thanks in advance, >> Linn >> >> > 
Other interesting topics
Batch Script to parse lines in text file
Command line parameters? Get attributes of user list from AD Continued xcopy script xcopy errorlevel problem in script File monitoring run once script Monitor redundent processes running on the Windows Server Batch file to delete files dynamically Help with VBscript |
|||||||||||||||||||||||
