Active Directory Server WMI could not be accessed

[This topic is intended to address a specific issue called out by the Exchange Server Analyzer Tool. You should apply it only to systems that have had the Exchange Server Analyzer Tool run against them and are experiencing that specific issue. The Exchange Server Analyzer Tool, available as a free download, remotely collects configuration data from each server in the topology and automatically analyzes the data. The resulting report details important configuration issues, potential problems, and nondefault product settings. By following these recommendations, you can achieve better performance, scalability, reliability, and uptime. For more information about the tool or to download the latest versions, see "Microsoft Exchange Analyzers" at https://go.microsoft.com/fwlink/?linkid=34707.]  

Topic Last Modified: 2005-11-17

The Microsoft® Exchange Server Analyzer Tool queries the Win32_ComputerSystem Microsoft Windows® Management Instrumentation (WMI) class to determine whether a value is set for the Name key on the domain controller. If the WMI query fails, the Exchange Server Analyzer displays an error.

There are two likely causes for this error:

  • The account that runs the Exchange Server Analyzer does not have sufficient permissions to query WMI information

  • A network issue is preventing the Exchange Server Analyzer from contacting the computer.

To correct this error

  1. Make sure that the Exchange Server computer has been started and is connected to the network.

  2. Use the PING command to see if the Exchange Server computer is reachable.

  3. If there is a firewall, check to see if RPC ports are blocked.

  4. Examine the permissions for the account under which the Exchange Server Analyzer is running. The account under which the Exchange Server Analyzer is running must have local Administrator permissions on each Exchange Server computer that it is scanning.

    Alternatively, you can grant specific WMI permission to the account under which the Exchange Server Analyzer is running.

    1. On the Exchange computer, open the Computer Management MMC console tree.

    2. Under Services and Applications, right-click WMI Control, and then click Properties.

    3. On the WMI Controls Property page, click the Security tab, and then expand Root.

    4. Select the CIMV2 folder, and click Security.

    5. On the Security for ROOT\CIMV2 page, add the account under which the Exchange Server Analyzer runs.

    6. Select the account that you added in Step e; in Permissions for Selected_Account, under the Allow column, check both Remote Enable and Read Security, and then click OK.

For more information about troubleshooting network connectivity problems, see the following:

For more information about port requirements, see the Knowledge Base article 832017, "Service overview and network port requirements for the Windows Server system" (https://go.microsoft.com/fwlink/?linkid=3052&kbid=832017).