Setting preferences for collecting remote WMI information

Windows Management Instrumentation (WMI) is a Microsoft tool for web-based enterprise management. The WMI can be used to check your device and collect information from your device.

Basic Requirements

To use WMI on a Windows endpoint, verify the following settings: Remote WMI is only available when joined to an AD domain

  • Port 135/TCP must be available for WMI communication.

  • The following services should be running:

    • Server

    • Windows Management Instrumentation (WMI)

  • WMI communication must be enabled in network firewalls.

Additional Configuration/Troubleshooting Options

Verify/implement the following configuration settings to work with WMI.

  1. Configure the following Active Directory settings. You can configure some of these settings on endpoints using a Group Policy.

    • Member of Domain Administrators or Local Administrators group

    • Member of the following domain groups:

      • Performance Log Users

      • Distributed COM Users

    • Member of a group with the following permissions:

      • Act as part of Operating System

      • Log on as a batch job

      • Log on as a service

      • Replace a process

  2. Run the dcomcnfg utility and configure the following endpoint permissions:

    • Access Permissions: Enable all

    • Launch and Activation Permissions: Enable all

  3. Run the wmimgmt.msc utility and configure WMI namespace security settings. Assign permissions to the following namespaces:

    • rootCIMv2

    • rootDefault

    • rootSecurityCenter

    • rootSecurityCenter2

    Assign the following permissions to each of the namespaces:

    • Execute Methods

    • Enable Account

    • Remote Enable

    • Read Security