BLinz am 24. Juni 2012 um 19:20 Uhr

2012-06-24T19:20:53Z

Neue Seite

[[Kategorie:Windows]][[Kategorie:Windows_XP]][[Kategorie:Windows_Server_2008]][[Kategorie:Windows_Vista]][[Kategorie:Windows_7]]
Unter Windows XP, Windows Server 2003 / 2003 R2, Windows Vista, Windows 7, Windows Server 2008 / 2008 R2 
lässt sich die Funktion der WMI Schnittstelle eines entfernten Rechners schnell in einer Eingabeaufforderung testen: 
WMIC /NODE:Rechnername /USER:Domäne\Benutzername /PASSWORD:Passwort CPU

Klappte das nicht: 
* Firewall mal abschalten bzw. Ausnahme eintragen
* In Arbeitsgruppen unter Windows Vista / 7 : UAC Modus ausschalten
 
Für Arbeitsgruppen unter Windows 7 gibt es auch ein Script um WMI zu ermöglichen: 
 
Stammt von: http://community.spiceworks.com/scripts/show/866-enable-secure-work-group-scanning-in-windows-7-good-for-unknowns-and-issues-with-wmi-and-firewalls 

<source lang="DOS">
REM Spiceworks "enable scanning" script for Windows 7, tailored to a workgroup. Changes firewall settings to allow remoteadmin to the spiceworks server only, opens WMI, DCOM to the server only and opens basic pinging. Preemptively deletes the WMI repository then rebuilds and re-registers the files in case of of WMI issues. Creates passworded admin account "SysAdmin", clears windows update temp files and resets automatic updates.

REM In the next line replace XXX.XXX.XXX.XXX with your server IP, and on line 73 replace p455w0rd with a secure password.
set AdmIP=XXX.XXX.XXX.XXX

REM MUST be run from an ADMINISTRATOR COMMAND PROMPT

REM Major sources are from the following posts:
REM http://community.spiceworks.com/scripts/show/181-resolving-spiceworks-unknowns-unofficial
REM http://community.spiceworks.com/how_to/show/377
REM http://community.spiceworks.com/education/projects/Windows_Firewall
REM http://community.spiceworks.com/how_to/show/317
REM http://community.spiceworks.com/topic/36751-spiceworks-script-for-unknowns-and-permission-or-firewall-issue-workgroup
REM Apologies to any I've missed

REM disabling the Internet Connection Firewall (ICF)/Internet Connection Sharing (ICS) service
net stop sharedaccess

REM disabling WMI
net stop winmgmt /y

REM clearing WBEM repository and rebuilding it
cd /d %windir%\system32\wbem
rd /S /Q repository
regsvr32 /s %systemroot%\system32\scecli.dll
regsvr32 /s %systemroot%\system32\userenv.dll
mofcomp cimwin32.mof
mofcomp en-us\cimwin32.mfl
mofcomp rsop.mof
mofcomp en-us\rsop.mfl

REM Registering all items in wbem folder
for /f %%s in ('dir /b /s *.dll') do regsvr32 /s %%s
REM for /f %%s in ('dir /b /s *.exe') do call :FixSrv %%s
for /f %%s in ('dir /b *.mof') do mofcomp %%s
REM note different directory for .mfl files
cd %windir%\system32\wbem\en-us
for /f %%s in ('dir /b *.mfl') do mofcomp %%s

cd %windir%\system32\wbem

net stop winmgmt

net start winmgmt

gpupdate /force

REM Enable Ping
REM old version: netsh firewall set icmpsetting 8
netsh advfirewall firewall set rule name="File and Printer Sharing (Echo Request - ICMPv4-In)" new enable=yes

REM Instead of opening 1000 ports, enable remoteadmin to the spiceworks server only
netsh advfirewall firewall add rule name="Allow RemoteAdmin to Spiceworks" dir=in protocol=tcp remoteip=%AdmIP% action=allow enable=yes

REM Dcom setup
reg add HKLM\SOFTWARE\Microsoft\Ole /v LegacyAuthenticationLevel /t REG_DWORD /d "2" /f
reg add HKLM\SOFTWARE\Microsoft\Ole /v LegacyImpersonationLevel /t REG_DWORD /d "3" /f

REM Setting up remote account access

REM Disabling Forceguest - Unless this is disabled, all remote logins are guest only
reg add HKLM\SYSTEM\CurrentControlSet\Control\Lsa /v forceguest /t REG_DWORD /d "0" /f

REM Disable UAC for remote logins - safe as long as remoteadmin rules are set to server IP or subnet ONLY
reg add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System /v LocalAccountTokenFilterPolicy /t REG_DWORD /d "1" /f

REM Enabling "SysAdmin" Account. Move along. Nothing to see here.
REM Per http://community.spiceworks.com/topic/36751-spiceworks-script-for-unknowns-and-permission-or-firewall-issue-workgroup
net user SysAdmin p455w0rd /ADD
net localgroup Administrators SysAdmin /ADD
REM hides account from login screen
REM Thanks cyberbill for the correction
reg add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\SpecialAccounts\UserList" /v SysAdmin /t REG_DWORD /d "0" /f

REM Win7 Firewall setup

REM Setting up WMI components individually to limit services access to Spiceworks server only

netsh advfirewall firewall add rule dir=in name="DCOM" program=%systemroot%\system32\svchost.exe service=rpcss action=allow protocol=TCP remoteip=%AdmIP% localport=135

netsh advfirewall firewall add rule dir=in name ="WMI" program=%systemroot%\system32\svchost.exe service=winmgmt action = allow protocol=TCP remoteip=%AdmIP% localport=any

netsh advfirewall firewall add rule dir=in name ="UnsecApp" program=%systemroot%\system32\wbem\unsecapp.exe action=allow remoteip=%AdmIP%

netsh advfirewall firewall add rule dir=out name ="WMI_OUT" program=%systemroot%\system32\svchost.exe service=winmgmt action=allow protocol=TCP remoteip=%AdmIP% localport=any

REM To undo WMI firewall changes using separate rules for DCOM, WMI, callback sink and outgoing connections
REM 1. To disable the DCOM exception.
REM netsh advfirewall firewall delete rule name="DCOM"
REM 2. To disable the WMI service exception.
REM netsh advfirewall firewall delete rule name="WMI"
REM 3. To disable the sink exception.
REM netsh advfirewall firewall delete rule name="UnsecApp"
REM 4. To disable the outgoing exception.
REM netsh advfirewall firewall delete rule name="WMI_OUT"

REM Check winmgmt is started, there are occasionally problems with it not starting on win7
net start winmgmt

REM Resetting Automatic Updates

net stop bits
net stop wuauserv
del /f /s /q %windir%\SoftwareDistribution\*.*
net start bits
net start wuauserv

REM Forcing AU detection and resetting authorization tokens...
wuauclt.exe /resetauthorization /detectnow

echo Please reboot
</source>
<comments />

Windows:WMI Verbindung über das Netzwerk testen - Versionsgeschichte

BLinz am 24. Juni 2012 um 19:20 Uhr