Sign in
 
HomeWindows 8Windows 7Windows VistaWindows XPMDOPWindows IntuneLibraryForums
Windows Client >
> 
> 
WMI fails to provide event logs remotely

Answered WMI fails to provide event logs remotely

  • Tuesday, February 19, 2013 1:01 AM
     
     
    Sign In to Vote
    0

    I am trying to monitor windows events remotely through WMI.

    When we connect to the remote PC wbemtest we are getting empty outputs:

    Select * From Win32_NTLogEvent where Logfile="Our Custom Event Log"
    0 objects
    But when we run wbemtest locally on that remote server we can get all the events:
     
    Select * From Win32_NTLogEvent where Logfile="Our Custom Event Log"
    191 objects
     
    I have checked all DCOM, RPC, WMI settings for the account I am trying.  There are also no firewall rules blocking the details as I can see other metrics just not events.  Here are the steps I took for permissions:
     
    start->run->DCOMCNFG
    My Computer->DCOM Config->Windows Management and Intrumentation->Properties->Security->all!
    Right Click My Computer->Properties->COM Secutiry->all!
     
    I have restarted the remote server, and rebuilt WMI multiple times:
     
    wmiadap /f
     
    I have followed these instructions and scowered the internet before I came here as a last resort.  Please help!
     

All Replies