Hello,
I'm using custom WMI sensor: SELECT ActiveSessions FROM Win32_PerfFormattedData_LocalSessionManager_TerminalServices
So far it worked instantly on 7 VMs but it failed on two.
What I did: Allow in windows firewall 3 rules for certain local IP address: Windows Management Instrumentation(WMI-In) Allowed - Inbound Rule Windows Management Instrumentation(DCOM-In) Allowed - Inbound Rule Windows Management Instrumentation(ASync-In) Allowed - Inbound Rule
And it worked like a charm but not for last VM.
I have tested WMI by using paessler WMI tester and it's the same error.
Checked out on that VM:
Permission for the user to the WMI namespace - local admin has all rights Verify WMI Impersonation Rights - local admins has all rights DCOM permission - ensured launch and activation permissions for "Everyone" user group has "Local Activation" and "Local Launch" permission. Credentials are correct. Turned off Windows Firewall completely and issue persisted.
Any help is welcome. Thank You
Article Comments
Hello,
We are glad that you were able to solve the issue by yourself. Also thank you for providing the solution for other users. :)
Oct, 2016 - Permalink
FYI: This fix worked for me as well.
Ours worked fine when using the local Administrator account. We created a new user so that we did not have to use the local Administrator account. The sensors failed when configured to use the new user, even if that new user was a member of the local Administrators group. After applying the fix, WMI Tester now shows successful connections.
Jan, 2019 - Permalink
winrm quickconfig Run is from cmd as admin and it will solve all issues. Helped to me.
Oct, 2016 - Permalink