WMI namespace security customizations are missing after upgrading to Windows Server 2008 R2

WMI namespace security customizations are missing after upgrading to Windows Server 2008 R2

This article applies to the following operating systems:

  • Windows Server® 2008 R2

Symptoms

After upgrading a Windows Server® 2008 or Windows Server®°2003 computer to Windows Server 2008 R2, WMI namespace security customizations are lost. This may affect third party applications or included roles, such as Hyper-V remote connections.

Cause

The upgrade process applies only default security settings for reliability reasons. Upgrades in place of Windows Server 2008 R2 are supported but not recommended.

Resolution

Prior to upgrading to Windows Server 2008 R2, note any WMI security customizations. After the upgrade, reapply the security customizations as needed.

It is possible to script exporting and importing the WMI security through the SetSecurityDescriptor and GetSecurityDescriptor methods of the __SystemSecurity WMI class. See the list below for further information.

  1. __SystemSecurity Class

  2. GetSecurityDescriptor Method

  3. SetSecurityDescriptor Method