通过WMI添加DNS条目时访问被拒绝错误 [英] Access Denied Error when adding DNS entry via WMI

问题描述

我正在尝试通过WMI添加DNS条目，它可在2台服务器上工作(一个是DC，另一个是独立的DNS服务器).我们正在将DNS服务器从当前的独立服务器移到也承载IIS的服务器.   DNS条目已添加/更改/删除 通过网络服务调用(因此以应用程序池用户身份执行).

这是我遇到的错误

一般性故障

在System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)

 <  实例     CLASSNAME   = "  __ ExtendedStatus " > 
<  量化器    NAME   = " 抽象"    已传播  = "   TYPE  布尔"     = "" TOINSTANCE   true " > 
<   VALUE  >  TRUE </  VALUE  > 
</ 量化器 > 
<  属性    NAME   = "  __ PATH "     CLASSORIGIN   = "   TYPE  属性 > 
<  属性    NAME   = "  __ NAMESPACE "     CLASSORIGIN   = "   TYPE  属性 > 
<  属性    NAME   = "  __ SERVER "     CLASSORIGIN   = "   TYPE  属性 > 
<   PROPERTY.ARRAY     NAME   = "  __ DERIVATION "    CLASSORIGIN   = "  ___ SYSTEM "     TYPE  <   VALUE.ARRAY  > 
<   VALUE  >  __ NotifyStatus </  VALUE  > 
</  VALUE.ARRAY  > 
</  PROPERTY.ARRAY  > 
<  属性    NAME   = "  __ PROPERTY_COUNT "     CLASSORIGIN   = "   TYPE  <   VALUE  >  5 </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  __ RELPATH "     CLASSORIGIN   = "   TYPE  属性 > 
<  属性    NAME   = "  __ DYNASTY "     CLASSORIGIN   = "   TYPE  <   VALUE  >  __ NotifyStatus </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  __ SUPERCLASS "     CLASSORIGIN   = "   TYPE  <   VALUE  >  __ NotifyStatus </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  __ CLASS "     CLASSORIGIN   = "   TYPE  <   VALUE  >  __ ExtendedStatus </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  __ GENUS "     CLASSORIGIN   = "   TYPE  <   VALUE  >  2 </  VALUE  > 
</ 属性 > 
<  属性    NAME   = " 说明"     CLASSORIGIN   = "  TYPE  <  量化器    NAME   = "  CIMTYPE "    已传播  = "   TYPE  字符串"     = ""<   VALUE  > 字符串</  VALUE  > 
</ 量化器 > 
<   VALUE  >  ERROR_ACCESS_DENIED </  VALUE  > 
</ 属性 > 
<  属性    NAME   = " 操作"     CLASSORIGIN   = "  TYPE  <  量化器    NAME   = "  CIMTYPE "    已传播  = "   TYPE  字符串"     = ""<   VALUE  > 字符串</  VALUE  > 
</ 量化器 > 
<   VALUE  >  ExecQuery </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  ParameterInfo "     CLASSORIGIN   = "  TYPE  <  量化器    NAME   = "  CIMTYPE "    已传播  = "   TYPE  字符串"     = ""<   VALUE  > 字符串</  VALUE  > 
</ 量化器 > 
<   VALUE  >  SELECT  * FROM MicrosoftDNS_ResourceRecordWHEREDomainName ='paretoplatform.com'</  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  ProviderName "     CLASSORIGIN   = "  TYPE  <  量化器    NAME   = "  CIMTYPE "    已传播  = "   TYPE  字符串"     = ""<   VALUE  > 字符串</  VALUE  > 
</ 量化器 > 
<   VALUE  >  WinMgmt </  VALUE  > 
</ 属性 > 
<  属性    NAME   = "  StatusCode "     CLASSORIGIN   = "    已传播  true "     = ""<  量化器    NAME   = "  CIMTYPE "    已传播  = "   TYPE  字符串"     = ""<   VALUE  >  uint32 </  VALUE  > 
</ 量化器 > 
</ 属性 > 
</ 实例 >  

我已经尝试过WMI安全设置->应用程序池用户和执行用户都具有计算机上的两个管理员以及所有管理员的所有权限的MicrosoftDNS.

我想念什么吗?

---

预先感谢您的帮助.如果您认为您可以帮助解决我的任何未解决问题，请查看它们 这里

解决方案

Paulo，

请在WMI论坛上提问.

今天愉快.

I'm trying to add DNS entries via WMI, and it works on 2 servers (one is a DC and the other is a standalone DNS server). We're moving the DNS server off the currently standalone server to a server which also hosts IIS.  The DNS entries are added/changed/deleted via a webservice call (therefore executed as the app pool user). 

This is the error I'm getting

Generic failure 

 at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)

<INSTANCE CLASSNAME="__ExtendedStatus">
	<QUALIFIER NAME="abstract" PROPAGATED="true" TYPE="boolean" OVERRIDABLE="false" TOINSTANCE="true">
		<VALUE>TRUE</VALUE>
	</QUALIFIER>
	<PROPERTY NAME="__PATH" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
	<PROPERTY NAME="__NAMESPACE" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
	<PROPERTY NAME="__SERVER" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
	<PROPERTY.ARRAY NAME="__DERIVATION" CLASSORIGIN="___SYSTEM" TYPE="string">
		<VALUE.ARRAY>
			<VALUE>__NotifyStatus</VALUE>
		</VALUE.ARRAY>
	</PROPERTY.ARRAY>
	<PROPERTY NAME="__PROPERTY_COUNT" CLASSORIGIN="___SYSTEM" TYPE="sint32">
		<VALUE>5</VALUE>
	</PROPERTY>
	<PROPERTY NAME="__RELPATH" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
	<PROPERTY NAME="__DYNASTY" CLASSORIGIN="___SYSTEM" TYPE="string">
		<VALUE>__NotifyStatus</VALUE>
	</PROPERTY>
	<PROPERTY NAME="__SUPERCLASS" CLASSORIGIN="___SYSTEM" TYPE="string">
		<VALUE>__NotifyStatus</VALUE>
	</PROPERTY>
	<PROPERTY NAME="__CLASS" CLASSORIGIN="___SYSTEM" TYPE="string">
		<VALUE>__ExtendedStatus</VALUE>
	</PROPERTY>
	<PROPERTY NAME="__GENUS" CLASSORIGIN="___SYSTEM" TYPE="sint32">
		<VALUE>2</VALUE>
	</PROPERTY>
	<PROPERTY NAME="Description" CLASSORIGIN="__ExtendedStatus" TYPE="string">
		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
			<VALUE>string</VALUE>
		</QUALIFIER>
		<VALUE>ERROR_ACCESS_DENIED</VALUE>
	</PROPERTY>
	<PROPERTY NAME="Operation" CLASSORIGIN="__ExtendedStatus" TYPE="string">
		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
			<VALUE>string</VALUE>
		</QUALIFIER>
		<VALUE>ExecQuery</VALUE>
	</PROPERTY>
	<PROPERTY NAME="ParameterInfo" CLASSORIGIN="__ExtendedStatus" TYPE="string">
		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
			<VALUE>string</VALUE>
		</QUALIFIER>
		<VALUE>SELECT * FROM MicrosoftDNS_ResourceRecord WHERE DomainName='paretoplatform.com'</VALUE>
	</PROPERTY>
	<PROPERTY NAME="ProviderName" CLASSORIGIN="__ExtendedStatus" TYPE="string">
		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
			<VALUE>string</VALUE>
		</QUALIFIER>
		<VALUE>WinMgmt</VALUE>
	</PROPERTY>
	<PROPERTY NAME="StatusCode" CLASSORIGIN="__NotifyStatus" PROPAGATED="true" TYPE="uint32">
		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
			<VALUE>uint32</VALUE>
		</QUALIFIER>
	</PROPERTY>
</INSTANCE>

I've tried in WMI security settings -> MicrosoftDNS that BOTH the app pool user and the executing user have all permissions as well as both administrators on the machine.

Am I missing something?

---

Thank you in advance for your help. If you think you may be able to help with any of my unanswered threads please look at them here

解决方案

Hi Paulo,

Please ask it on WMI forum.

Have a nice day.

这篇关于通过WMI添加DNS条目时访问被拒绝错误的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！