Group policy results wizard - Access denied "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> 28.06.2007 14:24:36 While logged on as a domain admin, we are getting Access Denied when trying to run the Group Policy Results Wizard on our WinXP SP2 systems. I can remotely manage the systems, so I think WMI is working. Also, firewalls are disabled. Not sure when this stopped working, used to work fine. Could it be a policy setting, such as Access this computer from the network or Remotely accessible registry paths that are mucked up?? I have searched the Inet until I am blind, and no suggestion I have found has been helpful. Mike

Re: Group policy results wizard - Access denied "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> 28.06.2007 15:50:21 Well, even though I can remotely manage the boxes, when I try to connect via the WMI Control snap-in, I get wmi control failed to connect because win32:access denied Again, I have searched this error until I am blue in the face with no resolutions working. -- Mike "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... [Quoted Text] > While logged on as a domain admin, we are getting Access Denied when > trying to run the Group Policy Results Wizard on our WinXP SP2 systems. I > can remotely manage the systems, so I think WMI is working. Also, > firewalls are disabled. > > Not sure when this stopped working, used to work fine. Could it be a > policy setting, such as Access this computer from the network or Remotely > accessible registry paths that are mucked up?? > > > I have searched the Inet until I am blind, and no suggestion I have found > has been helpful. > > Mike >

Re: Group policy results wizard - Access denied "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> 28.06.2007 16:04:29 There could be any number of things causing this. Is it happening on more than one remote system? If so, have any security policies been changed recently? Change in SMB signing level? Darren -- Darren Mar-Elia MS-MVP-Windows Server--Group Policy Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub: FAQs, Training Videos, Whitepapers and Utilities for all things Group Policy-related "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... [Quoted Text] > Well, even though I can remotely manage the boxes, when I try to connect > via the WMI Control snap-in, I get > wmi control failed to connect because win32:access denied > > Again, I have searched this error until I am blue in the face with no > resolutions working. > -- > > Mike > > "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message > news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >> While logged on as a domain admin, we are getting Access Denied when >> trying to run the Group Policy Results Wizard on our WinXP SP2 systems. I >> can remotely manage the systems, so I think WMI is working. Also, >> firewalls are disabled. >> >> Not sure when this stopped working, used to work fine. Could it be a >> policy setting, such as Access this computer from the network or Remotely >> accessible registry paths that are mucked up?? >> >> >> I have searched the Inet until I am blind, and no suggestion I have found >> has been helpful. >> >> Mike >> > >

Re: Group policy results wizard - Access denied "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> 29.06.2007 13:54:27 Well, all our servers work fine - it's just the WinXP workstations. Could you give me a hint of what security policies I need to check and what they would probably need to be?? -- Mike "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A[ at ]microsoft.com... [Quoted Text] > There could be any number of things causing this. Is it happening on more > than one remote system? If so, have any security policies been changed > recently? Change in SMB signing level? > > Darren > > -- > Darren Mar-Elia > MS-MVP-Windows Server--Group Policy > > Simplify Group Policy Troubleshooting with the NEW GPExpert > Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php > > Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy > Information Hub: > FAQs, Training Videos, Whitepapers and Utilities for all things Group > Policy-related > > "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message > news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... >> Well, even though I can remotely manage the boxes, when I try to connect >> via the WMI Control snap-in, I get >> wmi control failed to connect because win32:access denied >> >> Again, I have searched this error until I am blue in the face with no >> resolutions working. >> -- >> >> Mike >> >> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >> news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >>> While logged on as a domain admin, we are getting Access Denied when >>> trying to run the Group Policy Results Wizard on our WinXP SP2 systems. >>> I can remotely manage the systems, so I think WMI is working. Also, >>> firewalls are disabled. >>> >>> Not sure when this stopped working, used to work fine. Could it be a >>> policy setting, such as Access this computer from the network or >>> Remotely accessible registry paths that are mucked up?? >>> >>> >>> I have searched the Inet until I am blind, and no suggestion I have >>> found has been helpful. >>> >>> Mike >>> >> >> >

Re: Group policy results wizard - Access denied "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> 12.07.2007 18:24:17 Anyone have any ideas?? -- Mike Matheny "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:OAQjDUluHHA.1184[ at ]TK2MSFTNGP04.phx.gbl... [Quoted Text] > Well, all our servers work fine - it's just the WinXP workstations. Could > you give me a hint of what security policies I need to check and what > they would probably need to be?? > > -- > > Mike > > "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message > news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A[ at ]microsoft.com... >> There could be any number of things causing this. Is it happening on more >> than one remote system? If so, have any security policies been changed >> recently? Change in SMB signing level? >> >> Darren >> >> -- >> Darren Mar-Elia >> MS-MVP-Windows Server--Group Policy >> >> Simplify Group Policy Troubleshooting with the NEW GPExpert >> Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php >> >> Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy >> Information Hub: >> FAQs, Training Videos, Whitepapers and Utilities for all things Group >> Policy-related >> >> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >> news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... >>> Well, even though I can remotely manage the boxes, when I try to connect >>> via the WMI Control snap-in, I get >>> wmi control failed to connect because win32:access denied >>> >>> Again, I have searched this error until I am blue in the face with no >>> resolutions working. >>> -- >>> >>> Mike >>> >>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>> news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >>>> While logged on as a domain admin, we are getting Access Denied when >>>> trying to run the Group Policy Results Wizard on our WinXP SP2 systems. >>>> I can remotely manage the systems, so I think WMI is working. Also, >>>> firewalls are disabled. >>>> >>>> Not sure when this stopped working, used to work fine. Could it be a >>>> policy setting, such as Access this computer from the network or >>>> Remotely accessible registry paths that are mucked up?? >>>> >>>> >>>> I have searched the Inet until I am blind, and no suggestion I have >>>> found has been helpful. >>>> >>>> Mike >>>> >>> >>> >> > >

Re: Group policy results wizard - Access denied "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> 12.07.2007 19:05:47 Sorry for the delay- I would check anything that would have modified DCOM permissions on those XP systems, since WMI uses DCOM. Also, can you check to see if you can get any kind of remote WMI access to the system? Like, using wmic or another remote WMI tool? That will help understand if its a WMI access issue or an RSOP issue. -- Darren Mar-Elia MS-MVP-Windows Server--Group Policy Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub: FAQs, Training Videos, Whitepapers and Utilities for all things Group Policy-related "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:%23hXzcHLxHHA.2132[ at ]TK2MSFTNGP04.phx.gbl... [Quoted Text] > Anyone have any ideas?? > > -- > > Mike Matheny > > > "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message > news:OAQjDUluHHA.1184[ at ]TK2MSFTNGP04.phx.gbl... >> Well, all our servers work fine - it's just the WinXP workstations. Could >> you give me a hint of what security policies I need to check and what >> they would probably need to be?? >> >> -- >> >> Mike >> >> "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message >> news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A[ at ]microsoft.com... >>> There could be any number of things causing this. Is it happening on >>> more than one remote system? If so, have any security policies been >>> changed recently? Change in SMB signing level? >>> >>> Darren >>> >>> -- >>> Darren Mar-Elia >>> MS-MVP-Windows Server--Group Policy >>> >>> Simplify Group Policy Troubleshooting with the NEW GPExpert >>> Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php >>> >>> Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy >>> Information Hub: >>> FAQs, Training Videos, Whitepapers and Utilities for all things Group >>> Policy-related >>> >>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>> news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... >>>> Well, even though I can remotely manage the boxes, when I try to >>>> connect via the WMI Control snap-in, I get >>>> wmi control failed to connect because win32:access denied >>>> >>>> Again, I have searched this error until I am blue in the face with no >>>> resolutions working. >>>> -- >>>> >>>> Mike >>>> >>>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>>> news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >>>>> While logged on as a domain admin, we are getting Access Denied when >>>>> trying to run the Group Policy Results Wizard on our WinXP SP2 >>>>> systems. I can remotely manage the systems, so I think WMI is working. >>>>> Also, firewalls are disabled. >>>>> >>>>> Not sure when this stopped working, used to work fine. Could it be a >>>>> policy setting, such as Access this computer from the network or >>>>> Remotely accessible registry paths that are mucked up?? >>>>> >>>>> >>>>> I have searched the Inet until I am blind, and no suggestion I have >>>>> found has been helpful. >>>>> >>>>> Mike >>>>> >>>> >>>> >>> >> >> > >

Re: Group policy results wizard - Access denied "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> 12.07.2007 20:34:35 I get an error running wmimgmt.msc (Failed to connect to [computer name] because "Win32: Access denine"), however, I can fully manage the systems remotely using computer management. I don't understand how to run wmic. I get Event ID 1202 and 1085 regularly in the affected machines (all WinXP SP2, no firewall) I have searched WMI and RSOP issues on the net until I am blue in the face, still no help. I have created a new OU, moved a test machine into it (no GPOs applied) and reset the security on the local box by running secedit /configure /cfg %windir%\repair\secsetup.inf /db c:\secsetup.sdb /verbose & forced a gpupdate - still no joy!! -- Mike Matheny "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message news:F3A374E7-03E6-4D17-8DAB-CF5E6BD48588[ at ]microsoft.com... [Quoted Text] > Sorry for the delay- > I would check anything that would have modified DCOM permissions on those > XP systems, since WMI uses DCOM. Also, can you check to see if you can get > any kind of remote WMI access to the system? Like, using wmic or another > remote WMI tool? That will help understand if its a WMI access issue or an > RSOP issue. > > -- > Darren Mar-Elia > MS-MVP-Windows Server--Group Policy > > Simplify Group Policy Troubleshooting with the NEW GPExpert > Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php > > Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy > Information Hub: > FAQs, Training Videos, Whitepapers and Utilities for all things Group > Policy-related > > "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message > news:%23hXzcHLxHHA.2132[ at ]TK2MSFTNGP04.phx.gbl... >> Anyone have any ideas?? >> >> -- >> >> Mike Matheny >> >> >> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >> news:OAQjDUluHHA.1184[ at ]TK2MSFTNGP04.phx.gbl... >>> Well, all our servers work fine - it's just the WinXP workstations. >>> Could you give me a hint of what security policies I need to check and >>> what they would probably need to be?? >>> >>> -- >>> >>> Mike >>> >>> "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message >>> news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A[ at ]microsoft.com... >>>> There could be any number of things causing this. Is it happening on >>>> more than one remote system? If so, have any security policies been >>>> changed recently? Change in SMB signing level? >>>> >>>> Darren >>>> >>>> -- >>>> Darren Mar-Elia >>>> MS-MVP-Windows Server--Group Policy >>>> >>>> Simplify Group Policy Troubleshooting with the NEW GPExpert >>>> Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php >>>> >>>> Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy >>>> Information Hub: >>>> FAQs, Training Videos, Whitepapers and Utilities for all things Group >>>> Policy-related >>>> >>>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>>> news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... >>>>> Well, even though I can remotely manage the boxes, when I try to >>>>> connect via the WMI Control snap-in, I get >>>>> wmi control failed to connect because win32:access denied >>>>> >>>>> Again, I have searched this error until I am blue in the face with no >>>>> resolutions working. >>>>> -- >>>>> >>>>> Mike >>>>> >>>>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>>>> news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >>>>>> While logged on as a domain admin, we are getting Access Denied when >>>>>> trying to run the Group Policy Results Wizard on our WinXP SP2 >>>>>> systems. I can remotely manage the systems, so I think WMI is >>>>>> working. Also, firewalls are disabled. >>>>>> >>>>>> Not sure when this stopped working, used to work fine. Could it be a >>>>>> policy setting, such as Access this computer from the network or >>>>>> Remotely accessible registry paths that are mucked up?? >>>>>> >>>>>> >>>>>> I have searched the Inet until I am blind, and no suggestion I have >>>>>> found has been helpful. >>>>>> >>>>>> Mike >>>>>> >>>>> >>>>> >>>> >>> >>> >> >> >

Re: Group policy results wizard - Access denied "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> 13.07.2007 00:02:51 Have you modified the security group membership of any of the local groups on those machines? I"m assuming that you're connecting as a member of the local Administrators group on those remote machines? -- Darren Mar-Elia MS-MVP-Windows Server--Group Policy Simplify Group Policy Troubleshooting with the NEW GPExpert Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy Information Hub: FAQs, Training Videos, Whitepapers and Utilities for all things Group Policy-related "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message news:ekgoQQMxHHA.4076[ at ]TK2MSFTNGP06.phx.gbl... [Quoted Text] >I get an error running wmimgmt.msc (Failed to connect to [computer name] >because "Win32: Access denine"), however, I can fully manage the systems >remotely using computer management. I don't understand how to run wmic. I >get Event ID 1202 and 1085 regularly in the affected machines (all WinXP >SP2, no firewall) > > I have searched WMI and RSOP issues on the net until I am blue in the > face, still no help. I have created a new OU, moved a test machine into it > (no GPOs applied) and reset the security on the local box by running > secedit /configure /cfg %windir%\repair\secsetup.inf /db c:\secsetup.sdb > /verbose & forced a gpupdate - still no joy!! > > > > -- > > Mike Matheny > > > "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message > news:F3A374E7-03E6-4D17-8DAB-CF5E6BD48588[ at ]microsoft.com... >> Sorry for the delay- >> I would check anything that would have modified DCOM permissions on those >> XP systems, since WMI uses DCOM. Also, can you check to see if you can >> get any kind of remote WMI access to the system? Like, using wmic or >> another remote WMI tool? That will help understand if its a WMI access >> issue or an RSOP issue. >> >> -- >> Darren Mar-Elia >> MS-MVP-Windows Server--Group Policy >> >> Simplify Group Policy Troubleshooting with the NEW GPExpert >> Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php >> >> Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy >> Information Hub: >> FAQs, Training Videos, Whitepapers and Utilities for all things Group >> Policy-related >> >> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >> news:%23hXzcHLxHHA.2132[ at ]TK2MSFTNGP04.phx.gbl... >>> Anyone have any ideas?? >>> >>> -- >>> >>> Mike Matheny >>> >>> >>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>> news:OAQjDUluHHA.1184[ at ]TK2MSFTNGP04.phx.gbl... >>>> Well, all our servers work fine - it's just the WinXP workstations. >>>> Could you give me a hint of what security policies I need to check and >>>> what they would probably need to be?? >>>> >>>> -- >>>> >>>> Mike >>>> >>>> "Darren Mar-Elia" <dmanonymous[ at ]microsoft.com> wrote in message >>>> news:2B0550BC-AC6A-4F24-9DF6-CB90DCBC142A[ at ]microsoft.com... >>>>> There could be any number of things causing this. Is it happening on >>>>> more than one remote system? If so, have any security policies been >>>>> changed recently? Change in SMB signing level? >>>>> >>>>> Darren >>>>> >>>>> -- >>>>> Darren Mar-Elia >>>>> MS-MVP-Windows Server--Group Policy >>>>> >>>>> Simplify Group Policy Troubleshooting with the NEW GPExpert >>>>> Troubleshooting Pak 1.0 at http://www.sdmsoftware.com/products.php >>>>> >>>>> Visit the GPOGUY: http://www.gpoguy.com -- The Windows Group Policy >>>>> Information Hub: >>>>> FAQs, Training Videos, Whitepapers and Utilities for all things Group >>>>> Policy-related >>>>> >>>>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>>>> news:O3jMLwZuHHA.4952[ at ]TK2MSFTNGP04.phx.gbl... >>>>>> Well, even though I can remotely manage the boxes, when I try to >>>>>> connect via the WMI Control snap-in, I get >>>>>> wmi control failed to connect because win32:access denied >>>>>> >>>>>> Again, I have searched this error until I am blue in the face with no >>>>>> resolutions working. >>>>>> -- >>>>>> >>>>>> Mike >>>>>> >>>>>> "Mike Matheny" <thomasdotmdotmathenyatnasadotgov> wrote in message >>>>>> news:OGO9OAZuHHA.4572[ at ]TK2MSFTNGP02.phx.gbl... >>>>>>> While logged on as a domain admin, we are getting Access Denied when >>>>>>> trying to run the Group Policy Results Wizard on our WinXP SP2 >>>>>>> systems. I can remotely manage the systems, so I think WMI is >>>>>>> working. Also, firewalls are disabled. >>>>>>> >>>>>>> Not sure when this stopped working, used to work fine. Could it be a >>>>>>> policy setting, such as Access this computer from the network or >>>>>>> Remotely accessible registry paths that are mucked up?? >>>>>>> >>>>>>> >>>>>>> I have searched the Inet until I am blind, and no suggestion I have >>>>>>> found has been helpful. >>>>>>> >>>>>>> Mike >>>>>>> >>>>>> >>>>>> >>>>> >>>> >>>> >>> >>> >> > >