Zenoss ZenTech Community

WMI and SMBv1

Subject:	WMI and SMBv1
Author:	infra structure
Posted:	2017-05-17 04:00

Hi All,

Following last weekend attacks (WannaCry) and as a precaution, we deactivated SMBv1 from all our Windows servers. This move has an unexpected side effect: we lost WMI supervision from Zenoss (v 4.2.5) with all servers getting the same error:

Error collecting performance data: NT_STATUS_IO_TIMEOUT

In zenwinperf's log, no more useful info (real IP removed on purpose):

ERROR zen.CollectorCmdBase: Unable to scan device nnn.nnn.nnn.nnn: NT_STATUS_IO_TIMEOUT

I dig through all the web and didn't find any clue yet to get WMI monitoring back.
Any help would be greatly welcome!

------------------------------
infra structure
------------------------------

Subject:	RE: WMI and SMBv1
Author:	infra structure
Posted:	2017-08-17 05:03

We found a solution: The problem came from the "WMI Windows Monitor zenpack". Using the "Microsoft Windows" zenpack instead solved our problem.

------------------------------
infra structure
------------------------------

Previous
Zenoss 5 Core - Multiple Zenperfsnmp oddness

Next
Change zenhub resource in Zenoss 5