|
|
| Subject: | Windows WMI Monitoring - someone help me please! |
| Author: | Mark H |
| Posted: | 2014-03-11 08:51 |
I am desperate, I am close to tears!
I have been trying to get Zenoss to monitor my Windows Server 2012 device from /Server/Windows/WMI for ages now.
I have tried tips from this Community, and from this page - https://zcaportal.org/wiki/bin/view/ZCA/SettingUpWMIWithNon-AdminUsersAg... , both to no avail.
Basically, I am getting 'failed NT status' errors. Here's the output of the wmic command from my zenoss server:
[zenoss @ zenoss]$ wmic -U zenoss%ss0nez! //10.72.210.113 "select * from Win32_ComputerSystem"
[librpc/rpc/dcerpc_connect.c:337:dcerpc_pipe_connect_ncacn_ip_tcp_recv()] failed NT status (c00000b5) in dcerpc_pipe_connect_ncacn_ip_tcp_recv
[librpc/rpc/dcerpc_connect.c:828:dcerpc_pipe_connect_b_recv()] failed NT status (c00000b5) in dcerpc_pipe_connect_b_recv
[librpc/rpc/dcerpc_connect.c:828:dcerpc_pipe_connect_b_recv()] failed NT status (c00000b5) in dcerpc_pipe_connect_b_recv
[librpc/rpc/dcerpc_connect.c:828:dcerpc_pipe_connect_b_recv()] failed NT status (c00000b5) in dcerpc_pipe_connect_b_recv
[wmi/wmic.c:196:main()] ERROR: Login to remote object.
NTSTATUS: NT code 0xc002001b - NT code 0xc002001b
My firewalls are open to all necessary ports.
What's really frustrating is I see no events on my Windows server to help troubleshoot :(
My 'zenoss' user on the Windows Server is a member of DCOM, Perf Monitor, Event Log Readers and Administrators groups.
I'm stuck :(
Any help hugely appreciated.
| Subject: | You have modify a lot of |
| Author: | [Not Specified] |
| Posted: | 2014-03-11 10:56 |
You have modify a lot of items to get a non administrator account to be able to monitor with WMI. Test it with the "administrator" user to confirm firewall settings are setup correctly and go from there.
Here is a link that may help, but I have not tested it: http://vniklas.djungeln.se/2012/08/22/set-up-non-admin-account-to-access...
Hydruid
| Subject: | Thanks |
| Author: | Mark H |
| Posted: | 2014-03-11 14:33 |
Hi Hydruid, thanks for your help as always! :)
I fixed this one in the last hour - the cause was being behind a NAT'ed firewall. I simply had to change the device name from an IP address to the server hostname et voila!
P.S. please see my latest post for my latest issue! Always got an issue ;)
| Subject: | Glad you got it worked out! |
| Author: | [Not Specified] |
| Posted: | 2014-03-11 14:40 |
Glad you got it worked out!
Hydruid
| < |
Previous Updated 4.2.4 Core to SP405 using Zenup - events broken/disappeared!!! |
Next Components not showing after modeling server |
> |