Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection

From: Roger Abell (mvpNOSpam_at_asu.edu)
Date: 08/14/04

  • Next message: Steven L Umbach: "Re: Track a specific users share access activity?" 
    Date: Sat, 14 Aug 2004 09:40:13 -0700

    I have never heard of WMI running other than with its
    predefined account settings, and frankly, doubt whether
    this is possible. WMI is a rather deeply connected, core
    service, with need to access very many places in the OS.
    >From you sketch, it does not seem that it is a matter of
    access to the ODBC connection, but to what ODBC
    connects, and changing to another local account would
    not be changing that anyway.
    You may need to look into the whole strategy here, like
    whether the evernt might need to be causing instancing
    of some con component that you can specific launchs as
    a specific account, and/or what account is specified in
    the ODBC connection to be used at the other end of the
    connection, etc. 

    -- 
Roger Abell
Microsoft MVP (Windows Server System: Security)
MCSE (W2k3,W2k,Nt4)  MCDBA
"Anthony LaMark" <anthony@eXcSoftware.com> wrote in message
news:eT0MZqZgEHA.596@TK2MSFTNGP11.phx.gbl...
> Hi All,
>
> I have a WMI Event Provider (hosted by WinMgmt since it is on Windows
2000)
> which spawns another process (cmd.exe which invokes cscript.exe [i.e. a
> JScript]).  This spawned process needs to open an ODBC connection to a SQL
> server on another computer in the network.  WMI is currently running as
> (i.e. "Log on As") LocalSystem (again this is W2K).  I tried to change the
> "Log on As" to a local system account that has the proper priviledges to
the
> ODBC connection.  I verified that this account had the "Log on as a
service"
> local policy.  When I try to start WMI using the new account though it
fails
> to start.  The event log did not offer any clues.  Does any one have any
> thoughts on:
> 1.  What might be making WMI fail to start when it is changed from
> LocalSystem to another user account (do I need to change something in
> dcomcfg?)
> 2.  If WMI has any dependency services and if so, do they need to be
changed
> to the other user account as well?
> 3.  What security auditing can I enable to troubleshoot this type of
> problem?
>
> Thanks in advance,
>
> Anthony LaMark
> eXc Software
>
>
  • Next message: Steven L Umbach: "Re: Track a specific users share access activity?"

    Relevant Pages

    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... I have never heard of WMI running other than with its ... predefined account settings, and frankly, doubt whether ... access to the ODBC connection, ...
      (microsoft.public.win32.programmer.wmi)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... another user [that which is allowed to to the odbc connection]. ... > predefined account settings, and frankly, doubt whether ... WMI is a rather deeply connected, ... > Microsoft MVP (Windows Server System: ...
      (microsoft.public.win32.programmer.wmi)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... another user [that which is allowed to to the odbc connection]. ... > predefined account settings, and frankly, doubt whether ... WMI is a rather deeply connected, ... > Microsoft MVP (Windows Server System: ...
      (microsoft.public.windows.server.security)
    • RE: Event 63 Warning
      ... to use the LocalSystem account. ... From what little I've found refers to a Server. ... This happen if a security updates been applied and the WMI is up and running ... This happen if a security updates been applied and the WMI ...
      (microsoft.public.windowsxp.general)
    • Re: Get/set local security settings programmatically
      ... We are aware of the registry settings and the WMI ... there are no native Win32 APIs for these two local security settings. ... Account policies include password policies ...
      (microsoft.public.platformsdk.security)