Tuesday, February 19, 2013 1:01 AM
I am trying to monitor windows events remotely through WMI.
When we connect to the remote PC wbemtest we are getting empty outputs:Select * From Win32_NTLogEvent where Logfile="Our Custom Event Log"0 objectsBut when we run wbemtest locally on that remote server we can get all the events:Select * From Win32_NTLogEvent where Logfile="Our Custom Event Log"191 objectsI have checked all DCOM, RPC, WMI settings for the account I am trying. There are also no firewall rules blocking the details as I can see other metrics just not events. Here are the steps I took for permissions:start->run->DCOMCNFG
My Computer->DCOM Config->Windows Management and Intrumentation->Properties->Security->all!
Right Click My Computer->Properties->COM Secutiry->all!I have restarted the remote server, and rebuilt WMI multiple times:wmiadap /fI have followed these instructions and scowered the internet before I came here as a last resort. Please help!
Wednesday, February 20, 2013 3:41 AMModerator
Based on my research, I would like suggest you check if you set DCOM Security to Allow a User to Access a Computer Remotely.
Hope this helps.
TechNet Community Support
- Marked As Answer by Spencer XiMicrosoft Contingent Staff, Moderator Wednesday, February 27, 2013 4:48 AM