WMI query of CCM_Program under LocalSystem RRS feed

  • Question

  • Hi,

    I am getting an empty result set without any errors when performing a CCM WMI query on CCM_Program while running under the LocalSystem account; is there any way to query the CCM_Program collection under the LocalSystem account?

    This is what I get when querying under a user account:

    PS C:\Users\XXXXX> Get-WmiObject -Namespace root\ccm\clientsdk -Query "SELECT * FROM CCM_Program" | Select-Object -Property FullName

    Pulse EXE - PulseEXE

    This is what I get under the LocalSystem account:

    PS C:\windows\system32> Get-WmiObject -Namespace root\ccm\clientsdk -Query "SELE
    CT * FROM CCM_Program" | Select-Object -Property FullName
    PS C:\windows\system32>

    PS C:\windows\system32> whoami
    nt authority\system
    PS C:\windows\system32> whoami /groups


    Group Name                             Type             SID          Attributes

    ====================================== ================ ============ ==================================================
    BUILTIN\Administrators                 Alias            S-1-5-32-544 Enabled bydefault, Enabled group, Group owner
    Everyone                               Well-known group S-1-1-0      Mandatory group, Enabled by default, Enabled group
    NT AUTHORITY\Authenticated Users       Well-known group S-1-5-11     Mandatory group, Enabled by default, Enabled group
    Mandatory Label\System Mandatory Level Label            S-1-16-16384

    Stoyan Sabev

    • Moved by Bill_Stewart Thursday, September 12, 2019 5:00 PM Move to more appropriate forum
    Thursday, September 12, 2019 3:59 PM

All replies

  • Hi again,

    Any suggestions? Maybe using a different CCM namespace, like root/ccm/policy/machine/actualconfig ? I couldn't find it documented, so not sure what I can use to get similar data.

    Stoyan Sabev

    Wednesday, September 18, 2019 2:52 PM