WMI Control

shawndiaz

I have an issue with more than one client's PCs. Windows Installer fails to
run properly, and after much reading and digging I've come across this one.
WMI Control in computer management will not work. I get the following after
selecting properties:

Failed to Connect to <local computer>
because "Win32: Access is Denied"

What in the world can I do? I have run WMIDiag from MS and it gives me
errors too from the same area. Are my DCOM security modification all out of
whack?

Thanks in advance for the help.
--
Horsepower

Ramesh, MS-MVP

See this note from Jiachuan Wang [MSFT]:

<quote>

I'm trying to see whether it's a WMI control issue or WMI service issue:

If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
1) wbemtest.exe
2) Click "Connect..." and type "root\cimv2" for namespace, and
click "Connect" to connect to that namespace
3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
4) you shlud see a list of classes

If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.

</quote>
Source: http://groups.google.com/group/micro...23ed5975d86724

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
I have an issue with more than one client's PCs. Windows Installer fails to
run properly, and after much reading and digging I've come across this one.
WMI Control in computer management will not work. I get the following after
selecting properties:

Failed to Connect to <local computer>
because "Win32: Access is Denied"

What in the world can I do? I have run WMIDiag from MS and it gives me
errors too from the same area. Are my DCOM security modification all out of
whack?

Thanks in advance for the help.
--
Horsepower

shawndiaz

Well, as much as I wanted that to work the last time I tried it, it did not.
Here is what appears after clicking connect when the namepsace "root\cimv2"
is entered:

Error

Number: 0x80070005
Facility: Win32
Description: Access is Denied


--
Horsepower


"Ramesh, MS-MVP" wrote:

> See this note from Jiachuan Wang [MSFT]:
>
> <quote>
>
> I'm trying to see whether it's a WMI control issue or WMI service issue:
>
> If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> 1) wbemtest.exe
> 2) Click "Connect..." and type "root\cimv2" for namespace, and
> click "Connect" to connect to that namespace
> 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> 4) you shlud see a list of classes
>
> If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
>
> </quote>
> Source: http://groups.google.com/group/micro...23ed5975d86724
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> I have an issue with more than one client's PCs. Windows Installer fails to
> run properly, and after much reading and digging I've come across this one.
> WMI Control in computer management will not work. I get the following after
> selecting properties:
>
> Failed to Connect to <local computer>
> because "Win32: Access is Denied"
>
> What in the world can I do? I have run WMIDiag from MS and it gives me
> errors too from the same area. Are my DCOM security modification all out of
> whack?
>
> Thanks in advance for the help.
> --
> Horsepower
>

Ramesh, MS-MVP

Click Start, Run and type regedit.exe
Navigate to the following key:

HKEY_LOCAL_MACHINE\Software\Microsoft\OLE

Backup the branch by exporting it to a REG file.

In the right-pane, delete the following values (if found):

"EnableRemoteConnect"="Y"
"LegacyAuthenticationLevel"
"LegacyImpersonationLevel"

Close Registry Editor and restart Windows.


--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news312E052-111D-4216-8B4B-11843414CC9E@microsoft.com...
Well, as much as I wanted that to work the last time I tried it, it did not.
Here is what appears after clicking connect when the namepsace "root\cimv2"
is entered:

Error

Number: 0x80070005
Facility: Win32
Description: Access is Denied


--
Horsepower


"Ramesh, MS-MVP" wrote:

> See this note from Jiachuan Wang [MSFT]:
>
> <quote>
>
> I'm trying to see whether it's a WMI control issue or WMI service issue:
>
> If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> 1) wbemtest.exe
> 2) Click "Connect..." and type "root\cimv2" for namespace, and
> click "Connect" to connect to that namespace
> 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> 4) you shlud see a list of classes
>
> If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
>
> </quote>
> Source: http://groups.google.com/group/micro...23ed5975d86724
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> I have an issue with more than one client's PCs. Windows Installer fails to
> run properly, and after much reading and digging I've come across this one.
> WMI Control in computer management will not work. I get the following after
> selecting properties:
>
> Failed to Connect to <local computer>
> because "Win32: Access is Denied"
>
> What in the world can I do? I have run WMIDiag from MS and it gives me
> errors too from the same area. Are my DCOM security modification all out of
> whack?
>
> Thanks in advance for the help.
> --
> Horsepower
>

shawndiaz

And if they are not there? This is what IS there:

Default
Default Launch Permission
Enable DCOM
Machine Access Restriction
Machine Launch Restriction

And this has been since September when this all started.

Thank you
--
Horsepower


"Ramesh, MS-MVP" wrote:

> Click Start, Run and type regedit.exe
> Navigate to the following key:
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
>
> Backup the branch by exporting it to a REG file.
>
> In the right-pane, delete the following values (if found):
>
> "EnableRemoteConnect"="Y"
> "LegacyAuthenticationLevel"
> "LegacyImpersonationLevel"
>
> Close Registry Editor and restart Windows.
>
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news312E052-111D-4216-8B4B-11843414CC9E@microsoft.com...
> Well, as much as I wanted that to work the last time I tried it, it did not.
> Here is what appears after clicking connect when the namepsace "root\cimv2"
> is entered:
>
> Error
>
> Number: 0x80070005
> Facility: Win32
> Description: Access is Denied
>
>
> --
> Horsepower
>
>
> "Ramesh, MS-MVP" wrote:
>
> > See this note from Jiachuan Wang [MSFT]:
> >
> > <quote>
> >
> > I'm trying to see whether it's a WMI control issue or WMI service issue:
> >
> > If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> > 1) wbemtest.exe
> > 2) Click "Connect..." and type "root\cimv2" for namespace, and
> > click "Connect" to connect to that namespace
> > 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> > 4) you shlud see a list of classes
> >
> > If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
> >
> > </quote>
> > Source: http://groups.google.com/group/micro...23ed5975d86724
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> > I have an issue with more than one client's PCs. Windows Installer fails to
> > run properly, and after much reading and digging I've come across this one.
> > WMI Control in computer management will not work. I get the following after
> > selecting properties:
> >
> > Failed to Connect to <local computer>
> > because "Win32: Access is Denied"
> >
> > What in the world can I do? I have run WMIDiag from MS and it gives me
> > errors too from the same area. Are my DCOM security modification all out of
> > whack?
> >
> > Thanks in advance for the help.
> > --
> > Horsepower
> >
>

Ramesh, MS-MVP

Running out of ideas then. Has to be a DCOM setting. I would try deleting the "DefaultLaunchPermission" value after creating a System Restore point and see if the problem is resolved after rebooting.

--
Regards,

Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
Windows® Troubleshooting http://www.winhelponline.com


"shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:7410C90A-AB26-4396-8E9C-2C7825CB9C27@microsoft.com...
And if they are not there? This is what IS there:

Default
Default Launch Permission
Enable DCOM
Machine Access Restriction
Machine Launch Restriction

And this has been since September when this all started.

Thank you
--
Horsepower


"Ramesh, MS-MVP" wrote:

> Click Start, Run and type regedit.exe
> Navigate to the following key:
>
> HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
>
> Backup the branch by exporting it to a REG file.
>
> In the right-pane, delete the following values (if found):
>
> "EnableRemoteConnect"="Y"
> "LegacyAuthenticationLevel"
> "LegacyImpersonationLevel"
>
> Close Registry Editor and restart Windows.
>
>
> --
> Regards,
>
> Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> Windows® Troubleshooting http://www.winhelponline.com
>
>
> "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news312E052-111D-4216-8B4B-11843414CC9E@microsoft.com...
> Well, as much as I wanted that to work the last time I tried it, it did not.
> Here is what appears after clicking connect when the namepsace "root\cimv2"
> is entered:
>
> Error
>
> Number: 0x80070005
> Facility: Win32
> Description: Access is Denied
>
>
> --
> Horsepower
>
>
> "Ramesh, MS-MVP" wrote:
>
> > See this note from Jiachuan Wang [MSFT]:
> >
> > <quote>
> >
> > I'm trying to see whether it's a WMI control issue or WMI service issue:
> >
> > If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> > 1) wbemtest.exe
> > 2) Click "Connect..." and type "root\cimv2" for namespace, and
> > click "Connect" to connect to that namespace
> > 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> > 4) you shlud see a list of classes
> >
> > If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
> >
> > </quote>
> > Source: http://groups.google.com/group/micro...23ed5975d86724
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> > I have an issue with more than one client's PCs. Windows Installer fails to
> > run properly, and after much reading and digging I've come across this one.
> > WMI Control in computer management will not work. I get the following after
> > selecting properties:
> >
> > Failed to Connect to <local computer>
> > because "Win32: Access is Denied"
> >
> > What in the world can I do? I have run WMIDiag from MS and it gives me
> > errors too from the same area. Are my DCOM security modification all out of
> > whack?
> >
> > Thanks in advance for the help.
> > --
> > Horsepower
> >
>

urkec

"shawndiaz" wrote:

> And if they are not there? This is what IS there:
>
> Default
> Default Launch Permission
> Enable DCOM
> Machine Access Restriction
> Machine Launch Restriction
>
> And this has been since September when this all started.
>
> Thank you
> --
> Horsepower
>
>
> "Ramesh, MS-MVP" wrote:
>
> > Click Start, Run and type regedit.exe
> > Navigate to the following key:
> >
> > HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
> >
> > Backup the branch by exporting it to a REG file.
> >
> > In the right-pane, delete the following values (if found):
> >
> > "EnableRemoteConnect"="Y"
> > "LegacyAuthenticationLevel"
> > "LegacyImpersonationLevel"
> >
> > Close Registry Editor and restart Windows.
> >
> >
> > --
> > Regards,
> >
> > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > Windows® Troubleshooting http://www.winhelponline.com
> >
> >
> > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news312E052-111D-4216-8B4B-11843414CC9E@microsoft.com...
> > Well, as much as I wanted that to work the last time I tried it, it did not.
> > Here is what appears after clicking connect when the namepsace "root\cimv2"
> > is entered:
> >
> > Error
> >
> > Number: 0x80070005
> > Facility: Win32
> > Description: Access is Denied
> >
> >
> > --
> > Horsepower
> >
> >
> > "Ramesh, MS-MVP" wrote:
> >
> > > See this note from Jiachuan Wang [MSFT]:
> > >
> > > <quote>
> > >
> > > I'm trying to see whether it's a WMI control issue or WMI service issue:
> > >
> > > If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> > > 1) wbemtest.exe
> > > 2) Click "Connect..." and type "root\cimv2" for namespace, and
> > > click "Connect" to connect to that namespace
> > > 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> > > 4) you shlud see a list of classes
> > >
> > > If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
> > >
> > > </quote>
> > > Source: http://groups.google.com/group/micro...23ed5975d86724
> > >
> > > --
> > > Regards,
> > >
> > > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > > Windows® Troubleshooting http://www.winhelponline.com
> > >
> > >
> > > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> > > I have an issue with more than one client's PCs. Windows Installer fails to
> > > run properly, and after much reading and digging I've come across this one.
> > > WMI Control in computer management will not work. I get the following after
> > > selecting properties:
> > >
> > > Failed to Connect to <local computer>
> > > because "Win32: Access is Denied"
> > >
> > > What in the world can I do? I have run WMIDiag from MS and it gives me
> > > errors too from the same area. Are my DCOM security modification all out of
> > > whack?
> > >
> > > Thanks in advance for the help.
> > > --
> > > Horsepower
> > >
> >

Is the user member of the Administrators group? Try logging on as
Administrator and see if you can connect to root\cimv2. You can also try
granting that user acces to WMI namespaces through WMI control.

--
urkec

shawndiaz

Here is the solution:

Go into "My Computer"
Access properties of the local disk (C
Click on the security tab
Click on advanced
Check the box for Replace permission entries on all child objects with
entries shown here that apply to child objects
Click apply

Any program that was failing to install can now be installed.

Check WMI to verify it works:
Right click My Computer in the Start menu and click on Manage
Expand Services and Applications
Click on WMI Control
Right click WMI Control and select properties
You should have Successfully Connected to <local computer>

Run LiveUpdate for Norton

Run Windows Updates


--
Horsepower


"urkec" wrote:

> "shawndiaz" wrote:
>
> > And if they are not there? This is what IS there:
> >
> > Default
> > Default Launch Permission
> > Enable DCOM
> > Machine Access Restriction
> > Machine Launch Restriction
> >
> > And this has been since September when this all started.
> >
> > Thank you
> > --
> > Horsepower
> >
> >
> > "Ramesh, MS-MVP" wrote:
> >
> > > Click Start, Run and type regedit.exe
> > > Navigate to the following key:
> > >
> > > HKEY_LOCAL_MACHINE\Software\Microsoft\OLE
> > >
> > > Backup the branch by exporting it to a REG file.
> > >
> > > In the right-pane, delete the following values (if found):
> > >
> > > "EnableRemoteConnect"="Y"
> > > "LegacyAuthenticationLevel"
> > > "LegacyImpersonationLevel"
> > >
> > > Close Registry Editor and restart Windows.
> > >
> > >
> > > --
> > > Regards,
> > >
> > > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > > Windows® Troubleshooting http://www.winhelponline.com
> > >
> > >
> > > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news312E052-111D-4216-8B4B-11843414CC9E@microsoft.com...
> > > Well, as much as I wanted that to work the last time I tried it, it did not.
> > > Here is what appears after clicking connect when the namepsace "root\cimv2"
> > > is entered:
> > >
> > > Error
> > >
> > > Number: 0x80070005
> > > Facility: Win32
> > > Description: Access is Denied
> > >
> > >
> > > --
> > > Horsepower
> > >
> > >
> > > "Ramesh, MS-MVP" wrote:
> > >
> > > > See this note from Jiachuan Wang [MSFT]:
> > > >
> > > > <quote>
> > > >
> > > > I'm trying to see whether it's a WMI control issue or WMI service issue:
> > > >
> > > > If the following works, it means the WMI service works properly. (Otherwise WMI repository could be corrupted)
> > > > 1) wbemtest.exe
> > > > 2) Click "Connect..." and type "root\cimv2" for namespace, and
> > > > click "Connect" to connect to that namespace
> > > > 3) Click "Enum classes..." and then "Recursive" radio button (don't need to type a superclass), and then click "OK"
> > > > 4) you shlud see a list of classes
> > > >
> > > > If the above succeeds, that means a WMI control issue. Usually Administrator will have access to it even you deny it. there could be some reasons like promotion to domain controller or group policy causing problem.
> > > >
> > > > </quote>
> > > > Source: http://groups.google.com/group/micro...23ed5975d86724
> > > >
> > > > --
> > > > Regards,
> > > >
> > > > Ramesh Srinivasan, Microsoft MVP [Windows Shell/User]
> > > > Windows® Troubleshooting http://www.winhelponline.com
> > > >
> > > >
> > > > "shawndiaz" <shawndiaz@discussions.microsoft.com> wrote in message news:E8374CA4-64D8-4153-93C1-73BDFBDCC53D@microsoft.com...
> > > > I have an issue with more than one client's PCs. Windows Installer fails to
> > > > run properly, and after much reading and digging I've come across this one.
> > > > WMI Control in computer management will not work. I get the following after
> > > > selecting properties:
> > > >
> > > > Failed to Connect to <local computer>
> > > > because "Win32: Access is Denied"
> > > >
> > > > What in the world can I do? I have run WMIDiag from MS and it gives me
> > > > errors too from the same area. Are my DCOM security modification all out of
> > > > whack?
> > > >
> > > > Thanks in advance for the help.
> > > > --
> > > > Horsepower
> > > >
> > >
>
> Is the user member of the Administrators group? Try logging on as
> Administrator and see if you can connect to root\cimv2. You can also try
> granting that user acces to WMI namespaces through WMI control.
>
> --
> urkec