[mrtg] Re: WMI - access denied

[Sverre Munthe]

Shouldn't really be a problem. You have a firewall in between that
regulates whats allowed and whats not. That's why I moved the
controlling server from the DMZ to the inside, since I didn't want to
open up for all the ports it needed to the inside.

But theres people out there that knows much more than me about security
stuff, so maybe they can give a better answer.

Sverre


-----Original Message-----
From: Van den Bossche Eric [mailto:E.VDB at sherwineu.com] 
Sent: 30. oktober 2003 12:02
To: Sverre Munthe; mrtg at list.ee.ethz.ch
Subject: RE: [mrtg] Re: WMI - access denied


Ok, but what if people want to monitor servers in the dmz using WMI?
Is there a secure sollution for this?

Eric

-----Original Message-----
From: Sverre Munthe [mailto:sm at lorstem.no]
Sent: Thursday, 30 October, 2003 11:42
To: Van den Bossche Eric; mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: WMI - access denied


It's not in the DMZ, it's on the inside.

Sverre


-----Original Message-----
From: Van den Bossche Eric [mailto:E.VDB at sherwineu.com] 
Sent: 30. oktober 2003 11:27
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: WMI - access denied


Isn't this a big risk when you do this on a server in the DMZ ?

Eric

-----Original Message-----
From: Sverre Munthe [mailto:sm at lorstem.no]
Sent: Wednesday, 29 October, 2003 22:15
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] Re: WMI - access denied


If anyone else gets this problem, here's the solution:

Run dcomcnfg.exe
Select Default properties
Tick Enable distributed COM on this computer
Click OK and reboot
(This was on a W2K server)

Sverre


-----Original Message-----
From: Sverre Munthe 
Sent: 29. oktober 2003 21:20
To: mrtg at list.ee.ethz.ch
Subject: [mrtg] WMI - access denied


I have this script (kixtart) I run that works on/from all
servers/machines I've tested it on except on the primary domain
controller (PDC). When I run it on any servers/machines to check on the
PDC it isn't allowed access. And when I run it on the PDC to check any
other server/machine it isn't allowed access.

Any ideas?

Sverre

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi

--
Unsubscribe mailto:mrtg-request at list.ee.ethz.ch?subject=unsubscribe
Archive     http://www.ee.ethz.ch/~slist/mrtg
FAQ         http://faq.mrtg.org    Homepage     http://www.mrtg.org
WebAdmin    http://www.ee.ethz.ch/~slist/lsg2.cgi