XP 上的 WMI 访问被拒绝 [英] WMI Access Denied on XP
问题描述
我们的应用程序使用了一堆 WMI 调用.当使用访客帐户连接到本地 WMI 服务器失败并显示 ACCESS_DENIED 时，这适用于用户帐户及以上.如何在来宾帐户下访问 WMI 服务器?
Our application uses bunch of WMI calls. When using guest account connecting to local WMI server fails with ACCESS_DENIED, this works fine with user account and above. How to access WMI server under guest account?
我添加了访客帐户以允许使用 WMIMGMT.MSC 进行完全访问，但仍然出现访问被拒绝错误.
I added guest account to allow full access using WMIMGMT.MSC but still I am getting access denied errors.
有什么建议吗?
推荐答案
您确定要授予来宾帐户 WMI 远程访问权限吗?我不确定这样做的安全隐患...
Are you sure you want to give the guest account WMI remote access? I'm not sure the security implications of that...
无论如何，我认为您需要为目标计算机上的来宾帐户授予远程 DCOM 访问权限.(这对我来说已经很长时间了，所以我不确定这会解决所有问题，而且我不记得所有细节，所以我依赖 此论坛帖子)
Anyways, I think you'll need to give remote DCOM access for the guest account on the target machine. (It's been a long time for me on this one so I'm not sure this will solve everything, and I don't remember all the details so I'm leaning on this forum post)
- 打开组件服务(对于本地机器，可以运行dcomcnfg.exe)
- 导航到 DCOM 配置(组件服务 > 计算机 > 我的电脑 > DCOM 配置)
- 在详细信息窗格中找到Windows Management and Instrumentation"(切换到列表视图有帮助).右键单击并选择属性"
- 转到安全"选项卡并注意启动和激活权限"和访问权限"——为两者执行以下操作:
- 如果尚未选择，请选择自定义"
- 点击编辑
- 在安全属性页面，点击添加
- 在选择用户或组弹出窗口中，添加来宾帐户(对于本地计算机，只需键入来宾"并单击检查名称"，然后单击确定"，不确定域中的服务器)
- 返回Security 属性页面，请注意Guest 的默认权限少于Everyone".授予您想要的权限:听起来可能是远程启动"和远程激活".我可能会测试是否还需要本地激活".
- Open Component Services (for local machine, can run dcomcnfg.exe)
- Navigate to DCOM Config (Component Services > Computers > My Computer > DCOM Config)
- In the details pane find "Windows Management and Instrumentation" (switching to list view helps). Right click and select 'Properties'
- Go to the 'Security' tab and note the 'Launch And Activation Permissions', and 'Access Permissions' -- do the following thing for both of them:
- Select 'Customize' if not already selected
- Click Edit
- In the Security properties page, click Add
- In the Select Users or Groups popup, add the guest account (for local machine it's just type 'guest' and click 'Check Names' then 'OK', not sure about server in a domain)
- Back in the Security properties page, note that Guest has less permissions by default than 'Everyone'. Give the permissions that you want: sounds like maybe 'Remote Launch' and 'Remote Activation'. I'd probably do some testing with whether 'Local Activation' is needed too.
再一次，即使它对您有用，我也会仔细查看向来宾帐户授予这种远程权限是否存在安全问题.
Once again even if it works for you I'd look carefully at whether there are security issues with giving this kind of remote permission to the Guest account.
希望这有帮助，
达林.
Hope this helps,
Daryn.
这篇关于XP 上的 WMI 访问被拒绝的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！
