DetailPage-MSS-KB

Microsoft small business knowledge base

Article ID: 325353 - Last Review: December 3, 2007 - Revision: 6.3

This article was previously published under Q325353

On This Page

SUMMARY

This article describes how to set Windows Management Instrumentation (WMI) namespace security in Windows Server 2003.

WMI security is based on namespaces. The schema is logically partitioned into namespaces for organizational and security purposes. Use the WMI Control snap-in to modify the security on WMI namespaces. With this tool, you can set security that is based off the root or select individual namespaces. You can also set inheritance that is based on namespace hierarchy.


How To Set WMI Namespace Security

  1. Click Start, click Run, type wmimgmt.msc in the Open box, and then click OK.
  2. Right-click WMI Control, and then click Properties.
  3. Click the Security tab
  4. Click the namespace for which you want to configure security, and then click Security.
  5. Do one of the following:
    • To change permissions for an existing user or group, click the user or group whose permissions you want to modify in the Group or user names list.
    • To configure permissions for a new user or group, click Add. Type the user or group name in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
  6. In the Permissions for User or Group list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny. You can set the following permissions:
    Execute Methods: Permits methods that are exported from the WMI classes or instances to be run.
    Full Write: Permits full read, write, and delete access to all WMI objects, classes, and instances.
    Partial Write: Permits write access to static WMI objects.
    Provider Write: Permits write access to objects that are provided by the provider.
    Enable Account: Permits read access to WMI objects.
    Remote Enable: Permits remote access to the namespace.
    Read Security: Permits read-only access to WMI security information.
    Edit Security: Permits read and write access to WMI security information.
    Or, to remove a user or group from the Group or user names list, click Remove.
  7. If you want to set the inheritance on the namespace, follow these steps:
    1. Click Advanced.
    2. In the Permission entries list, click the user or group whose permissions you want to modify, and then click Edit.
    3. To modify permissions for the user or group that you selected, in the Permissions list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny.

      NOTE: This is the same list of permissions as described in step 6.
    4. In the Apply onto box, click one of the following options, and then click OK:
      This namespace only
      This namespace and subnamespaces
      Subnamespaces only
  8. Click OK three times.
  9. Quit the WMI Control snap-in.

REFERENCES

For more information about how to configure WMI settings by using the WMI Control, see WMI Control Help. In the WMI Control snap-in, click Help on the Action menu, and then click Windows Management Instrumentation Control.


APPLIES TO
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, 64-Bit Datacenter Edition
  • Microsoft Windows Server 2003, Enterprise x64 Edition
  • Microsoft Windows Small Business Server 2003 Standard Edition
  • Microsoft Windows Small Business Server 2003 Premium Edition
Keywords: 
kbmgmtservices kbenv kbhowto kbhowtomaster KB325353
Share
Additional support options
Ask The Microsoft Small Business Support Community
Contact Microsoft Small Business Support
Find Microsoft Small Business Support Certified Partner
Find a Microsoft Store For In-Person Small Business Support