WMI Read access to my one service account

Hi
I need to provide my one service account READ access on all windows 7 /servers 2003,2008,2012 in my domain.
I found below article, but this is not for read access..
http://blogs.msdn.com/b/spatdsg/archive/2007/11/21/set-wmi-namespace-security-via-gpo-script.aspx?PageIndex=2#comments
Please help me to achieve it..
Thanks in advance.

Hi Mr.Raj,
Since solving this issue requires WMI scripting skills, I suggest you refer to The Official Scripting Guys Forum to get professional support:
The Official Scripting Guys Forum
http://social.technet.microsoft.com/Forums/scriptcenter/en-US/home?forum=ITCG
Thank you for your understanding and support.
Best Regards,
Amy

Similar Messages

How can WMI Read access on all workstations in domain

Hi All
Please help me get WMI Read access to my service account.
http://social.technet.microsoft.com/Forums/en-US/523dcf15-2ec7-4fbc-8a14-5007fa297604/wmi-read-access-to-my-one-service-account?forum=winserverDS

Thanks JRV
I got below article which is working fine to me.
http://wiki.splunk.com/Deploy:HOWTO_Enable_WMI_Access_for_Non-Admin_Domain_Users
But in this article, How can i achieve it through GPO:
Distributed Component Object Model rights assignments

How do you access more than one email account with Mail

I have multiple email accounts, and have already set up my pop, and smtp servers. But I cannot figure out how to access/ login into the other account. I have had one account setup for a while now. I just setup another account, but can only access the original account. I've looked under 'preferences' I can see that the new account has been created, but how do I log in to it? Can someone please help?
Thanx,
Mike Dunn

Hello Mike.
You can access multiple accounts and account types with the Mail.app with one exception.
You can access multiple accounts with Mail by the same provider (same account type and shares the same incoming mail server) and each account can have the same password as long as they are true accounts which means each email address or account has its own user name which is usually the portion of the email address in front of the @ sign only but with some providers it is the entire email address.
An additional email address or account by the same provider that shares the same user name and password as the primary account is really an alias account and cannot be accessed as a separate account with Mail.
An alias account or address to a primary account can be accessed with the primary account by adding the email address for the alias to the email address field separated by a comma under the Account Information tab for the primary account's preferences.
All messages addressed to the alias email address will be received and delivered to the Inbox mailbox for the primary account.

I am not able to access Firefox under one user account on my computer so I created another account. How can I transfer the bookmarks from the old account?

I use windows Vista and I cannot open Firefox under one user account (I keep receiving the "firefox profile cannot be loaded . . ." error message) on my computer so I created another account. How can I transfer the bookmarks from the old account?

NOTE: you can skip this 1st step.
Step 1
I'm on Win7 so the paths might be slightly different... C:\Users\(YOUR PC ACCOUNT)\AppData\Roaming\Mozilla\Firefox\Profiles\bnelgkol.default\bookmarkbackups ... Find the "bookmarks-[DATE].json" you want and copy it to the profile you want. You may want to change the date to a name you will recognize.
Step 2
Then on your browser "Bookmarks>Show All Bookmarks or Ctrl+Shift+B ". This will bring up the Bookmark Organizer, I think they call it Library now. From there click "Import & Back up>Restore" this will bring up a drop down with your back ups. If you followed step 1, find the json you added and select it. If you skipped step 1, from "Import & Back up>Restore" select "Choose File..." Then browser for the json you want to import. Which should be in a similar location as mentioned in step 1.
NOTE: "AppData" is a hidden folder, will have to set show hidden folders to be able to see it.

How do I access data from one user account to another?

I want to access data from a different user account. How do I make all the files available?

I have another post here in the forum that explains in detail about the rez problem. It was read by a lot of people with no responses. 1 thing that might be important is that I was using a Wacom drawing tablet when this problem started. I removed the Wacom software and no help.
My Apple 23" Cinema display has very large icons but the display prefs says it is at 1920 x 1200. It's not just a low screen rez but the dock and all icons will scroll on the screen when I move the mouse.
The resolution will not change to anything else. The rez is fine on other user names.
I have booted from the Apple DVD and run disk repair, repaired disk permissions. Booted and run Tech Tool.
Booted from the Disk Warrior cd and ran that.
I have zapped the PRAM. I have plugged the display into the other port on the video card.
When I change to the problem user name it is fine for about 1 second and then changes to the "problem". I have never seen this before and I have been using a Mac since 1990.
It's a G-5. Dual 2.0 ghz. 2.5 gb ram. OS 10.5.8. Apple keyboard. Logitech mouse and
Thanks.

Shared Services, create read access to a cube into an application us a grou

Hi,
I have an application with 3 cubes. I have created a group in Shared Services, and i want to give read access only to one cube.
If i give provision to this group , i only can give read to all the application, so all the cubes are going to have read access.
How must i do to give only read access to one cube and not to all,
Thnx
Guillermo

Hi,
This post will help answer your question :- Assigning database access using Shared Services
If you are using Shared Services access is applied at application level and you can't select individual access to each database.
Cheers
John
http://john-goodwin.blogspot.com/

Multiple ATVs for one Itunes account

Trying to find out if I can use, say, 4 ATVs to stream the exact song or show from one computer (one itunes account) to multiple locations? Thanks!

It's not clear from your question whether you are asking about playing the same songs or videos on all the Apple TV's in sync or just being able to access the files to play.
The current situation is.
You can use home sharing to access files from one iTunes account on multiple Apple TV's. The only restriction here is your network speed.
In addition, using Airplay you can currently play a song and use multiple Apple TV's as remote speakers. This works very well in my experience and the synchronisation is very good. I don't see any problem with doing this on 4 Apple TVs unless you have a very slow network.
It is expected that Airplay will soon work with video as well. It seems that this will require an update to the Apple TV firmware and it's fairly likely that this will happen soon. Obviously due to video using more bandwidth, you are more likely to run into problems with the network speed if you are trying to involve 4 Apple TV's than you would with music.

Service Accounts - Your Ideas

I have been tasked to install SQL 2012 on a new machine(2012 R2) which we will move all current 2008 R2 databases over too (approx. 26).
This machine will also hold a new instance of SharePoint (not sure if this makes any difference).
I have gone through the setup.exe process, up to Service Accounts tab to see what accounts are needed: (They are:)
1. SQL Server Agent
2. SQL Server Database Engine
3. SQL Server Reporting Services
4. SQL Server Integration Services 11.0
5. SQL Server Browser
I have read that you should at least create two basic AD accounts (like domain\sqluser1, domain\sqluser2) with sqluser1 being a Local Admin
on the box? Setting #2 as sqluser1 (refer to above list) and the rest as being sqluser2
I have also read I should have at least two as above but - use sqluser1 to log into the machine and do the install, then after the install to disable, but not delete the AD account?
I have also read that you need one AD account per Service Accounts?
Here are my thoughts and please Advise is this will not work or if there is a security issue:
(I understand that every install is different, but any info will help - Thanks)
I will create two regular BASIC AD accounts domain\SQLAdmin and domain\SQLWorker
I will set domain\SQLAdmin up as a Local Admin to the machine
I will set up the following:
1. SQL Server Agent    domain\SQLAdmin
2. SQL Server Database Engine   domain\SQLAdmin
3. SQL Server Reporting Services  NETWORKSERVICE
4. SQL Server Integration Services 11.0  domain\SQLWorker
5. SQL Server Browser    domain\SQLWorker
Thanks for any advice,
(An Accidental DBA)

Hi,
Its not advised and not considered as good security practice to run SQL Server service with account having admin privileges on machine. In your case account domain\SQLAdmin, you are adding this as local admin which is not a good practice as per security.
I strongly suggest you to spend some time on below Microsoft Link
http://msdn.microsoft.com/en-gb/library/ms143504.aspx
You are correct with creating separate account just rights should be minimum and above link will guide you
Please mark this reply as answer if it solved your issue or vote as helpful if it helped so that other forum members can benefit from it.
My TechNet Wiki Articles

Question : Service Accounts for SQL Server 2012

Hello,
I am planning to create AD accounts for SQL Server 2012 services that will be installed on Windows 2012 server.
I was reading the following
Configure Windows Service Accounts and Permissions
and
Windows Privileges and Rights
Is there a recommendation / document that would list that assocation of SQL Server Services with Actvie Directory service accounts / privileges required for installation and starting the services.
Isn't it recommended to create separate account for every service and they should not be local accounts ?
Hope to hear soon as to what industry standards are being followed for production systems ?
Thank you very much in advance.
Regards
Nikunj

From MSDN:
Each service in SQL Server represents a process or a set of processes to manage authentication of SQL Server operations with Windows. Each service can be configured to use its own service account. This facility is exposed
at installation. SQL Server provides a special tool, SQL Server Configuration Manager, to manage the services configuration.
When choosing service accounts, consider the principle of least privilege. The service account should have exactly the privileges that it needs to do its job and no more privileges. You also need to consider account isolation; the service accounts should
not only be different from one another, they should not be used by any other service on the same server. Do not grant additional permissions to the SQL Server service account or the service groups.
From Glen Berry's Blog:
You should request that a dedicated domain user account be created for use by the SQL Server service. This should just be a regular, domain account with no special rights on the domain. You do not need or want this account to be a local admin on the machine
where SQL Server will be installed. The SQL Server setup program will grant the necessary rights on the machine to that account during installation.
You will also want a separate, dedicated domain user account for the SQL Server Agent service. If you are going to be installing and using other SQL Server related services such as SQL Server Integration Services (SSIS), SQL Server Reporting Services (SSRS),
or SQL Server Analysis Services (SSAS), you will want dedicated domain accounts for each service. The reason you want separate accounts for each service is because they require different rights on the local machine, and having separate accounts is both more
secure and more resilient, since a problem with one account won’t affect all of the SQL Server Services.
Depending on your organization, getting these domain accounts created could take anywhere from minutes to weeks to complete, so make sure to allow time for this. For each one of these accounts, you will need their logon credentials for the SQL Server setup
program. You are going to want to make sure that the accounts don’t have a temporary password that must be changed during the next login. If they are set up that way, make sure to change them to use a strong password, and record this information in a secure
location.
Please Mark This As Answer if it solved your issue
Please Mark This As Helpful if it helps to solve your issue
Thanks,
Shashikant

How to show a database to a user for which only he has the read access?

Hi All,
We have a SQL Server and it has say 10 datatabases, we have created a login and also a user which has read access to just one of the 10 databases.
I used
use [master]
DENY VIEW ANY DATABASE to msam_test
To hide all the databases from explorer for that user if he logsin with msam_test.Now, i want this user to see a database named suresh3_test for which he has a read access.
Can someone please help me if this is achievable?
Thanks

hi,
It is not possible to look at one database if the user only have read access in your scenario.
either you revoke the DENY VIEW ANY DATABASE permission, which will list all the databases for the user
or You need to make the user database owner by doing so:
First delete the user from the database
Right click on the database and select properties and change the owner to msam_test as shown in the pic below
But the user will have owner rights on the database.
Hope this clarifies your doubt. The same was explained in your earlier post as well
Thanks
Bhanu

SQL Server Service Account - Domain Account - WMI Provider Error - 0x80092004

Hi,
if I try to use an domain account for SQL service start using SQL configuration Manager I receive the error
WMI Provider Error - 0x80092004
in Popup Window and in Eventlog 5 Error Events from Source MSSQLSERVER:
26014:
Unable to load user-specified certificate [Cert Hash(sha1) "BA78B5DBF93CCD7EFA1860C99B0D6141D480199A"]. The server will not accept a connection. You should verify that the certificate is correctly installed. See "Configuring Certificate for
Use by SSL" in Books Online.
17182:
TDSSNIClient initialization failed with error 0x80092004, status code 0x80. Reason: Unable to initialize SSL support. Cannot find object or property. "
17182:
TDSSNIClient initialization failed with error 0x80092004, status code 0x1. Reason: Initialization failed with an infrastructure error. Check for previous errors. Cannot find object or property.
17826:
Could not start the network library because of an internal error in the network library. To determine the cause, review the errors immediately preceding this one in the error log.
17120:
SQL Server could not spawn FRunCommunicationsManager thread. Check the SQL Server error log and the Windows event logs for information about possible related problems.
After I put the account in local administrator group the service starts up.
I want to use the lowest privileges. Do I really need the SQL server service account in local administrator group? How to fix the error?
thanks

Hi baschuel,
It is recommended to run SQL Server service by using the lowest possible user rights and it is supported to use a domain account instead of an account from local Administrators group to configure SQL Server service. According to your error messages, the
issue could be due to that the incorrect certificate is used, or the domain account has no access to the Crypto folder(C:\ProgramData\Microsoft\Crypto). To troubleshoot the issue, you could follow the two solutions below.
1.Import the correct certificate following the steps in the article:
http://windows.microsoft.com/en-hk/windows/import-export-certificates-private-keys#1TC=windows-7
2.Grant the domain account full access to the Crypto folder.
Regards,
Michelle Li
If you have any feedback on our support, please click
here.

Getting Error ID 4625 when one service tries to access a shared path on another machine

Hi guys .. I have a scenario where there are two machines involved, both of which are using
Windows Server 2008 Standard. One is called the IS Server (has IP 10.1.1.89 and machine name bxtwmistv1) and the other is called the
MWS Server (has IP 10.1.1.88 and machine name bxtwmmwstv1). They are both part of the
infosix.root domain. Their users are also part of this domain. On the IS server, there is a drive, R:\, which is shared on the network through the UNC path
\\bxtwmistv1\R. On MWS server, there is a service called
MWS Service, which is supposed to access that shared folder \\bxtwmistv1\R. The MWS service is running using a domain username to start itself:
[email protected] On the IS server, I have given Full Control rights for the domain user [email protected], for the shared drive.
However despite doing all the above, MWS service is unable to access the shared folder, and when it tries to access it, I get the following error on IS Server's Event Viewer:
An account failed to log on.
Subject:
Security ID:
NULL SID
Account Name:
Account Domain:
Logon ID:
0x0
Logon Type: 3
Account For Which Logon Failed:
Security ID:
NULL SID
Account Name:
svcWebDev
Account Domain:
bxt1
Failure Information:
Failure Reason:
Unknown user name or bad password.
Status:
0xc000006d
Sub Status:
0xc000006a
Process Information:
Caller Process ID:
0x0
Caller Process Name:
Network Information:
Workstation Name:
BXTWMMWSTV1
Source Network Address:
10.1.1.88
Source Port:
55768
Detailed Authentication Information:
Logon Process:
NtLmSsp
Authentication Package:
NTLM
Transited Services:
Package Name (NTLM only):
Key Length:
0
I've tried my best to try and figure out what's wrong here, but I can't. Can someone tell me what might be the problem ?
Also, I tried logging into the MWS Server using the [email protected] domain user account (which the MWS service is using to start itself), and I was able to access the shared folder, and write to it as well.

According to the post of the error, the wrong domain name is specified for the service:
Account For Which Logon Failed:
Security ID:
NULL SID
Account Name:
svcWebDev
Account Domain:bxt1
But you said the accounts were: "They
are both part of the infosix.root domain"
Mark B. Cooper, President and Founder of PKI Solutions Inc., former Microsoft Senior Engineer and subject matter expert for Microsoft Active Directory Certificate Services (ADCS). Known as “The PKI Guy” at Microsoft for 10 years.

When I access my google e-mail account on the I-pad my inbox has at least 6 e-mails with no sender and no subject (absent via I-phone, Mac or PC) I cannot delete them as they cannot be selected- how do I stop them and clear the ones there now?

When I access my google e-mail account on the I-pad my inbox has at least 6 e-mails with no sender and no subject (absent via I-phone, Mac or PC) I cannot delete them as they cannot be selected- how do I stop them and clear the ones there now?

Try turning the account off and on : Settings > Mail, Contacts, Calendars , then tap the account on the right, slide Mail to 'off', exit settings and go back into the Mail app, and then go back to Settings and slide Mail back to 'on'
If that doesn't work then try closing the Mail app completely : from the home screen (i.e. not with the Mail app 'open' on-screen) double-click the home button to bring up the taskbar, then press and hold any of the apps on the taskbar for a couple of seconds or so until they start shaking, then press the '-' in the top left of the Mail app to close it, and touch any part of the screen above the taskbar so as to stop the shaking and close the taskbar.
Also do a reset : press and hold both the sleep and home buttons for about 10 to 15 seconds (ignore the red slider), after which the Apple logo should appear - you won't lose any content, it's the iPad equivalent of a reboot.

My old laptop crashed, and took my iTunes account with it. I got a new laptop, and want to sync my iTouch to my new iTunes account. It gives me an error message stating that I can't sync to multiple iTunes accounts, but I can't access my old one! Help!

My old laptop crashed, and took my iTunes account with it. I got a new laptop, and want to sync my iTouch to iTunes. It gives me an error message stating that I can't sync to multiple iTunes accounts, but I can't access my old one!
How can I get my new iTunes account to allow me to Sync my iTouch? The only option it gives me is to "transfer purchases" from my iTouch to iTunes, but that is only about 25% of my iTunes library-most of it is CDs I have uploaded. How can I Sync without losing all my music from my iTouch???
Also, I have lectures and photos, etc. on my iTouch that I don't want to lose.
I've tried a few of the iPod copy programs-the free ones and the ones you have to pay for, but I can't find one that will work for ALL my content on an iTouch.
Right now, I can't get anything from my iTouch to iTunes, and I can't update my iTouch with my new iTunes purchases, so I'm stuck! Help!

Also-I tried to use my backup hard drive, but I wasn't able to drag/transfer/send/move any of my muic files onto my iTouch when the iTouch was connected to my computer. I can't figure out why it won't let me do that.
The only thing I can see when I open my iTouch on my computer is my file with photos. I can't see videos, music, or anything else. What's going on?

HT1473 My girlfriend and I both have iTunes account with our own music libraries and we want to combine our two libraries into one icloude accounts so can both then access our one shared libary at anytime in the cloud. How do we do this?

My girlfriend and I both have iTunes account with our own music libraries and we want to combine our two libraries into one icloude accounts so can both then access our one shared libary at anytime in the cloud. How do we do this?

No it is not possible. Content purchased from the iTunes Store is permanently tied to the account from which it was originally purchased, and Apple does not provide a way to change it.

WMI Read access to my one service account

Similar Messages

Maybe you are looking for