locked
WMI DNS Query Access Denied Error RRS feed

  • Question

  • Not sure where to post this so trying here. 

    I'm trying to add DNS entries via WMI, and it works on 2 servers (one is a DC and the other is a standalone DNS server). We're moving the DNS server off the currently standalone server to a server which also hosts IIS.  The DNS entries are added/changed/deleted via a webservice call (therefore executed as the app pool user). 

    This is the error I'm getting

    Generic failure 

     at System.Management.ManagementException.ThrowWithExtendedInfo(ManagementStatus errorCode)

    <INSTANCE CLASSNAME="__ExtendedStatus">
    	<QUALIFIER NAME="abstract" PROPAGATED="true" TYPE="boolean" OVERRIDABLE="false" TOINSTANCE="true">
    		<VALUE>TRUE</VALUE>
    	</QUALIFIER>
    	<PROPERTY NAME="__PATH" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
    	<PROPERTY NAME="__NAMESPACE" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
    	<PROPERTY NAME="__SERVER" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
    	<PROPERTY.ARRAY NAME="__DERIVATION" CLASSORIGIN="___SYSTEM" TYPE="string">
    		<VALUE.ARRAY>
    			<VALUE>__NotifyStatus</VALUE>
    		</VALUE.ARRAY>
    	</PROPERTY.ARRAY>
    	<PROPERTY NAME="__PROPERTY_COUNT" CLASSORIGIN="___SYSTEM" TYPE="sint32">
    		<VALUE>5</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="__RELPATH" CLASSORIGIN="___SYSTEM" TYPE="string"></PROPERTY>
    	<PROPERTY NAME="__DYNASTY" CLASSORIGIN="___SYSTEM" TYPE="string">
    		<VALUE>__NotifyStatus</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="__SUPERCLASS" CLASSORIGIN="___SYSTEM" TYPE="string">
    		<VALUE>__NotifyStatus</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="__CLASS" CLASSORIGIN="___SYSTEM" TYPE="string">
    		<VALUE>__ExtendedStatus</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="__GENUS" CLASSORIGIN="___SYSTEM" TYPE="sint32">
    		<VALUE>2</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="Description" CLASSORIGIN="__ExtendedStatus" TYPE="string">
    		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
    			<VALUE>string</VALUE>
    		</QUALIFIER>
    		<VALUE>ERROR_ACCESS_DENIED</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="Operation" CLASSORIGIN="__ExtendedStatus" TYPE="string">
    		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
    			<VALUE>string</VALUE>
    		</QUALIFIER>
    		<VALUE>ExecQuery</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="ParameterInfo" CLASSORIGIN="__ExtendedStatus" TYPE="string">
    		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
    			<VALUE>string</VALUE>
    		</QUALIFIER>
    		<VALUE>SELECT * FROM MicrosoftDNS_ResourceRecord WHERE DomainName='paretoplatform.com'</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="ProviderName" CLASSORIGIN="__ExtendedStatus" TYPE="string">
    		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
    			<VALUE>string</VALUE>
    		</QUALIFIER>
    		<VALUE>WinMgmt</VALUE>
    	</PROPERTY>
    	<PROPERTY NAME="StatusCode" CLASSORIGIN="__NotifyStatus" PROPAGATED="true" TYPE="uint32">
    		<QUALIFIER NAME="CIMTYPE" PROPAGATED="true" TYPE="string" TOINSTANCE="true">
    			<VALUE>uint32</VALUE>
    		</QUALIFIER>
    	</PROPERTY>
    </INSTANCE>

    I've tried in WMI security settings -> MicrosoftDNS that BOTH the app pool user and the executing user have all permissions as well as both administrators on the machine.

    Am I missing something?


    Thank you in advance for your help. If you think you may be able to help with any of my unanswered threads please look at them here

    Tuesday, April 10, 2012 3:52 PM

Answers

All replies