This article describes how to set Windows Management
Instrumentation (WMI) namespace security in Windows Server 2003.
security is based on namespaces. The schema is logically partitioned into
namespaces for organizational and security purposes. Use the WMI Control
snap-in to modify the security on WMI namespaces. With this tool, you can set
security that is based off the root or select individual namespaces. You can
also set inheritance that is based on namespace hierarchy.
How To Set WMI Namespace Security
- Click Start, click Run, type wmimgmt.msc in the Open box, and then click OK.
- Right-click WMI Control, and then click Properties.
- Click the Security tab
- Click the namespace for which you want to configure
security, and then click Security.
- Do one of the following:
- To change permissions for an existing user or group,
click the user or group whose permissions you want to modify in the
Group or user names list.
- To configure permissions for a new user or group, click
Add. Type the user or group name in the Enter the object
names to select box, click Check Names to verify your entry or entries, and then click OK.
- In the Permissions for User or
Group list, click to select the Allow check box next to the permission that you want to permit, or
click to select the Deny check box next to the permission that you want to deny. You can
set the following permissions:
Execute Methods: Permits methods that are exported from the WMI classes or
instances to be run. Or, to remove a user or group from the Group or user
names list, click Remove.
Full Write: Permits full read, write, and delete access to all WMI objects,
classes, and instances.
Partial Write: Permits write access to static WMI objects.
Provider Write: Permits write access to objects that are provided by the
Enable Account: Permits read access to WMI objects.
Remote Enable: Permits remote access to the namespace.
Read Security: Permits read-only access to WMI security information.
Edit Security: Permits read and write access to WMI security information.
- If you want to set the inheritance on the namespace, follow
- Click Advanced.
- In the Permission entries list, click
the user or group whose permissions you want to modify, and then click Edit.
- To modify permissions for the user or group that you
selected, in the Permissions list, click to select the Allow check box next to the permission that you want to permit, or
click to select the Deny check box next to the permission that you want to deny.
NOTE: This is the same list of permissions as described in step 6.
- In the Apply onto box, click one of
the following options, and then click OK:
This namespace only
This namespace and subnamespaces
- Click OK three times.
- Quit the WMI Control snap-in.
For more information about how to configure WMI settings by
using the WMI Control, see WMI Control Help. In the WMI Control snap-in, click Help
on the Action
menu, and then click Windows Management Instrumentation