My ability to remote access WMI has been lost. This was working fine and I was able to access whatever I needed until the first week of April. I can no longer remote access WMI on anything in my environment (2003/2008 servers or XP/7 workstations).
Here some specifics:
1) I am a Domain Admin and verified I'm a local Administrator of every workstation/server I log into. I can also access WMI on a server or workstation while logged in.
2a) Thinking something in Group Policy had changed or went awry I joined to brand new images to the domain and moved them to a container that has no policies applied. This did not help.
2b) Along the same line of thinking I wanted to verify another web application or system update did not cause this problem so I tested with a fresh install of XP/7 and had no success.
3) Since this happened I've been researching articles and have looked and verified the WMI and DCOM security settings were correct. I've tried changing the settings on several machines to see if anything would work with no success.
4) WBEMTEST works fine. I can connect locally and query anything I want. It does not work if I try it remotely. I recieve a "Number: 0x80070005 Access Denied" error.
5) Scanned for virus' and malware and have turned up nothing.
6) As a side note, I created a domain controller and a windows 7 VM on a private network. Without changing a thing I verified remote WMI work just fine. Comparing ACL's and security settings between the test domain environment and my prodcution
showed the same exact settings.
What else am I missing? Obviously something changed in my environment and has locked down WMI but I can't find what it is. Anyone have any other suggestions?
