Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection

From: Manfred Braun (aa_at_bb.cc)
Date: 08/15/04

  • Next message: Lars Olaussen: "Re: Certificate revoke" 
    Date: Sun, 15 Aug 2004 22:10:22 +0200

    Hi All,

    another would be to use a COM[+] component and run this declaratively with
    another user [that which is allowed to to the odbc connection]. This
    component can also be written as *.wsc component/file.

    May be, this helps. I wrote a GUI component, configured to run "as the
    interactive user" to allow a wmi-process, which was started remotely, to
    display a message to the user.

    Best regards,
    Manfred Braun

    (Private)
    Mannheim
    Germany

    mailto:_manfred.braun_@manfbraun.de
    (Remove the anti-spam-underscore to mail me!)

    "Roger Abell" <mvpNOSpam@asu.edu> wrote in message
    news:O%2345R0hgEHA.2468@TK2MSFTNGP12.phx.gbl...
    > I have never heard of WMI running other than with its
    > predefined account settings, and frankly, doubt whether
    > this is possible. WMI is a rather deeply connected, core
    > service, with need to access very many places in the OS.
    > From you sketch, it does not seem that it is a matter of
    > access to the ODBC connection, but to what ODBC
    > connects, and changing to another local account would
    > not be changing that anyway.
    > You may need to look into the whole strategy here, like
    > whether the evernt might need to be causing instancing
    > of some con component that you can specific launchs as
    > a specific account, and/or what account is specified in
    > the ODBC connection to be used at the other end of the
    > connection, etc.
    > --
    > Roger Abell
    > Microsoft MVP (Windows Server System: Security)
    > MCSE (W2k3,W2k,Nt4) MCDBA
    > "Anthony LaMark" <anthony@eXcSoftware.com> wrote in message
    > news:eT0MZqZgEHA.596@TK2MSFTNGP11.phx.gbl...
    > > Hi All,
    > >
    > > I have a WMI Event Provider (hosted by WinMgmt since it is on Windows
    > 2000)
    > > which spawns another process (cmd.exe which invokes cscript.exe [i.e. a
    > > JScript]). This spawned process needs to open an ODBC connection to a
    SQL
    > > server on another computer in the network. WMI is currently running as
    > > (i.e. "Log on As") LocalSystem (again this is W2K). I tried to change
    the
    > > "Log on As" to a local system account that has the proper priviledges to
    > the
    > > ODBC connection. I verified that this account had the "Log on as a
    > service"
    > > local policy. When I try to start WMI using the new account though it
    > fails
    > > to start. The event log did not offer any clues. Does any one have any
    > > thoughts on:
    > > 1. What might be making WMI fail to start when it is changed from
    > > LocalSystem to another user account (do I need to change something in
    > > dcomcfg?)
    > > 2. If WMI has any dependency services and if so, do they need to be
    > changed
    > > to the other user account as well?
    > > 3. What security auditing can I enable to troubleshoot this type of
    > > problem?
    > >
    > > Thanks in advance,
    > >
    > > Anthony LaMark
    > > eXc Software
    > >
    > >
    >
    >

  • Next message: Lars Olaussen: "Re: Certificate revoke"

    Relevant Pages

    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... If you have a manchine called anthony-devbox, ... and that machine has an account in the Directory Serivces, ... and, each one of them, in order to recreate the identity of the security ... The ODBC connection can be configured to use the current-executing-code ...
      (microsoft.public.win32.programmer.wmi)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... If you have a manchine called anthony-devbox, ... and that machine has an account in the Directory Serivces, ... and, each one of them, in order to recreate the identity of the security ... The ODBC connection can be configured to use the current-executing-code ...
      (microsoft.public.windows.server.security)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... I have never heard of WMI running other than with its ... predefined account settings, and frankly, doubt whether ... access to the ODBC connection, ...
      (microsoft.public.win32.programmer.wmi)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... another user [that which is allowed to to the odbc connection]. ... > predefined account settings, and frankly, doubt whether ... WMI is a rather deeply connected, ... > Microsoft MVP (Windows Server System: ...
      (microsoft.public.win32.programmer.wmi)
    • Re: W2K/WMI service (WinMgmt.exe) accessing an ODBC connection
      ... I have never heard of WMI running other than with its ... predefined account settings, and frankly, doubt whether ... access to the ODBC connection, ...
      (microsoft.public.windows.server.security)