Problem with WMI Connection

Please help.
I have zenoss geting WMI data from many servers, and now i started installing windows from MDT/WDS, and WMI collection stoped working. It's the same for all of the servers.
Servers are in workgroup. user that i use to conect to zenoss is in local Administrator group, UAC i disabled
i use mostly win 2008 r2
This command from windows works fine (remotely):
WMIC /user:.\user /password:"password" /node:192.168.110.49 NTEVENT WHERE "LogFile='system' and Type>'0'" GET Message, TimeGenerated

And here are my errors from Zenoss:
in events:
Could not read the Windows event log (NT_STATUS_ACCESS_DENIED). Check your
username/password settings and verify network connectivity.

during modeling

[librpc/rpc/dcerpc_util.c:1290:dcerpc_pipe_auth_recv()] Failed to bind to uuid 4d9f4ab8-7d1c-11cf-861e-0020af6e7c57 - NT_STATUS_NET_WRITE_FAULT
[librpc/rpc/dcerpc_connect.c:828:dcerpc_pipe_connect_b_recv()] failed NT status (c0000022) in dcerpc_pipe_connect_b_recv
2015-01-27 14:00:54,089 WARNING zen.WMIClient: Unable to collect WMI data from 192.168.110.49: NT_STATUS_ACCESS_DENIED

I tried different things from different forums, but they are all for non-admin users.
Any help apprieciated.