Authorize WMI users and set permissions
Updated: January 21, 2005
Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2
To authorize WMI users and set permissions
Open WMI Control.
In the console tree, right-click WMI Control, and then click Properties.
Click the Security tab.
Select the namespace for which you want to give a user or group access, and then click Security.
In the Security dialog box, click Add.
In the Select Users, Computers, or Groups dialog box, enter the name of the object (user or group) that you want to add. Click the Check Names button to verify your entry and then click OK. You might have to change the location or use the Advanced button to query for objects. See the dialog box help for more details.
In the Security dialog box, under Permissions, select the permissions to allow or deny the new user or group.
Allows methods exported from the WMI classes or instances to be run.
Allows full read, write, and delete access to all WMI objects, classes, and instances.
Allows write access to static WMI objects.
Allows write access to objects that are provided by providers.
Allows read access to WMI objects.
Allows remote access to the namespace.
Allows read-only access to WMI security information.
Allows read and write access to WMI security information.
To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
To open the WMI Control console, click Start, click Run, type wmimgmt.msc, and then click OK.
You can set permissions on a remote computer or a local computer. To access a remote computer, right-click WMI Control, click Connect to another computer, click Another computer, and then type the name of the computer to which you want to connect. If you are using WMI Control from the Computer Management console, right-click the Computer Management node to connect to the other computer.
On computers running Windows 95, Windows 98, or Windows ME, all users have full control locally. Security settings are only relevant for remote connection to a computer running Windows 95, Windows 98, or Windows ME.
You can delete a user's or group's authorization to access WMI services by selecting that user or group and clicking Remove.
Information about functional differences
Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.