You are currently offline, waiting for your internet to reconnect

HOW TO: Set WMI Namespace Security in Windows Server 2003

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article was previously published under Q325353
For a Microsoft Windows XP version of this article, see 295292.

IN THIS TASK

SUMMARY
This article describes how to set Windows Management Instrumentation (WMI) namespace security in Windows Server 2003.

WMI security is based on namespaces. The schema is logically partitioned into namespaces for organizational and security purposes. Use the WMI Control snap-in to modify the security on WMI namespaces. With this tool, you can set security that is based off the root or select individual namespaces. You can also set inheritance that is based on namespace hierarchy.

back to the top

How To Set WMI Namespace Security

  1. Click Start, click Run, type wmimgmt.msc in the Open box, and then click OK.
  2. Right-click WMI Control, and then click Properties.
  3. Click the Security tab
  4. Click the namespace for which you want to configure security, and then click Security.
  5. Do one of the following:
    • To change permissions for an existing user or group, click the user or group whose permissions you want to modify in the Group or user names list.
    • To configure permissions for a new user or group, click Add. Type the user or group name in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  6. In the Permissions for User or Group list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny. You can set the following permissions:
    Execute Methods: Permits methods that are exported from the WMI classes or instances to be run.
    Full Write: Permits full read, write, and delete access to all WMI objects, classes, and instances.
    Partial Write: Permits write access to static WMI objects.
    Provider Write: Permits write access to objects that are provided by the provider.
    Enable Account: Permits read access to WMI objects.
    Remote Enable: Permits remote access to the namespace.
    Read Security: Permits read-only access to WMI security information.
    Edit Security: Permits read and write access to WMI security information.
    Or, to remove a user or group from the Group or user names list, click Remove.
  7. If you want to set the inheritance on the namespace, follow these steps:
    1. Click Advanced.
    2. In the Permission entries list, click the user or group whose permissions you want to modify, and then click Edit.
    3. To modify permissions for the user or group that you selected, in the Permissions list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny.

      NOTE: This is the same list of permissions as described in step 6.
    4. In the Apply onto box, click one of the following options, and then click OK:
      This namespace only
      This namespace and subnamespaces
      Subnamespaces only
  8. Click OK three times.
  9. Quit the WMI Control snap-in.
back to the top
REFERENCES
For more information about how to configure WMI settings by using the WMI Control, see WMI Control Help. In the WMI Control snap-in, click Help on the Action menu, and then click Windows Management Instrumentation Control.

back to the top
kbsecurity WMI Wbem permissions namespace acl
Properties

Article ID: 325353 - Last Review: 12/03/2007 04:42:06 - Revision: 6.3

Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Web Edition, Microsoft Windows Server 2003, 64-Bit Datacenter Edition, Microsoft Windows Server 2003, Enterprise x64 Edition, Microsoft Windows Small Business Server 2003 Standard Edition, Microsoft Windows Small Business Server 2003 Premium Edition

  • kbmgmtservices kbenv kbhowto kbhowtomaster KB325353
Feedback
s.dqp0';m.content='true';document.getElementsByTagName('head')[0].appendChild(m);" onload="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> eens track by $index" class="col-sm-6 col-xs-24 ng-scope"> Uruguay - Español
대한민국 - 한국어
España - Español
Paraguay - Español
Venezuela - Español
amp;did=1&t=">var varClickTracking = 1; var varCustomerTracking = 1; var Route = "76500"; var Ctrl = ""; document.write(" oad="var m=document.createElement('meta');m.name='ms.dqp0';m.content='false';document.getElementsByTagName('head')[0].appendChild(m);" src="http://c1.microsoft.com/c.gif?"> >