WMI create remote process and Domain servers... please HELP

[Benoît Bianchi]

Hi,

My goal is to manage our servers backup from one an only one server.
I've got two AD 2003 domain, with bi-directionnal trust
relationshionship and i've add the domain1 admin account to the builtin
Administrators account on the domain2.
My script is running from a domain1 controller, admin account , but I'm
not able to create remote process neither on domain1 member serveur nor
domain2 controller ...

Here is my code for that 2 serveurs:

Dim serveur ' server's name
...
Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")
Set objWMIService = objSWbemLocator.ConnectServer(serveur, _
"root\cimv2",,,,"Kerberos:" + serveur)
...

But this leads to an RPC error
I need the Kerberos cause I save the ntbackup backup file on a share on the
domain1 controller.

For the domain1 controller I use :
set objWMIService = GetObject("winmgmts:{impersonationLevel=Delegate}!\\" _
& serveur & "\root\cimv2")
Which works perfectly ....

I've tried many other way (googled) but without any success, can you please
help?
thanks

[Jeffrey Tan[MSFT]]

Hi,

I will perform some research in this issue and get back to you ASAP.
Thanks.

A quick question: can you provide some more details regarding the RPC
error? Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Jeffrey Tan[MSFT]]

Hi,

Sorry for letting you wait.

Can you tell us what is the RPC error? If it is RPC_S_SERVER_UNAVAILBLE
then it could be firewall that is blocking the WMI connection. Has firewall
exception there for WMI? Can you try in wbemtest to connect to remote
machine?

Start->wbemtest->connect->Namespace \\<machinename>\root\cimv2, authority
"KERBEROS:<machinename"->Connect

As I understand, the backup is stored in a domain1 controller's share. By
launching an application in another machine, the application would access
the share from the domain1 controller machine. For this you need to
connect to WMI using DELEGATE.

Hope this helps.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Benoît Bianchi]

Hi,

Thank you first for the answer, I've done the test with wbemtest it failed
the same way my script does, here is the error:

Numéro : 0x800706ba
Environnement : Win32
Description : Le serveur RPC n'est pas disponible.

(It's French but says : The RPC server is unavalaible )

I do not have any firewall setup neither on the calling nor the called
server ...
They are on different IP subnet but routed without any ACL ...

Post by Jeffrey Tan[MSFT]
Hi,
Sorry for letting you wait.
Can you tell us what is the RPC error? If it is RPC_S_SERVER_UNAVAILBLE
then it could be firewall that is blocking the WMI connection. Has firewall
exception there for WMI? Can you try in wbemtest to connect to remote
machine?
Start->wbemtest->connect->Namespace \\<machinename>\root\cimv2, authority
"KERBEROS:<machinename"->Connect
As I understand, the backup is stored in a domain1 controller's share. By
launching an application in another machine, the application would access
the share from the domain1 controller machine. For this you need to
connect to WMI using DELEGATE.
Hope this helps.
Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.
Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Benoît Bianchi]

In addition to my previous post, I've tried testing as described here :
http://www.microsoft.com/technet/scriptcenter/resources/wmifaq.mspx

So I've entered at the command prompt:

C:\>WMIC /NODE:"Urgences" /IMPLEVEL:Delegate
/AUTHORITY:"Kerberos:ADMIN\Urgences" OS GET Caption,CSDVersion,CSName

Noeud - Urgences
ERREUR :
Code = 0x80070721
Description = Une erreur spécifique du package de sécurité s'est produite.
Facilité = Win32

This was done on the Domain1 DC , Admin is the Domain2's NAME and Urgences
the Domain2's DC.

You'll find attached the corresponding %systemroot%\system32\WBEM logs on
the Urgences Server

Thanks for your further help.
Benoît.

[Jeffrey Tan[MSFT]]

Hi Beno,

Thanks for your information and effort.

I will perform some research on it and get back to you ASAP. Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Jeffrey Tan[MSFT]]

Hi Beno,

Sorry for letting you wait. I have contacted a WMI developer to help cowork
on this issue.

Since you are getting RPC_S_SERVER_UNAVAILABLE from the domain1 server
(that does not have anything to do with domain trust), it looks like
firewall (or) DCOM permission settings issue. Can you tell us whether
settings are as specified in
http://msdn2.microsoft.com/en-us/library/aa393266.aspx

Also, can you run WMIDiag run in the machine having WMI service and send us
the zipped logs.

Thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[Jeffrey Tan[MSFT]]

Hi Beno,

Have you reviewed my last reply to you? Have you managed to collect the
DCOM permission setting and the WMIDiag log? If you still need any help or
have any concern, please feel free to tell me, thanks.

Best regards,
Jeffrey Tan
Microsoft Online Community Support
==================================================
Get notification to my posts through email? Please refer to
http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif
ications.

Note: The MSDN Managed Newsgroup support offering is for non-urgent issues
where an initial response from the community or a Microsoft Support
Engineer within 1 business day is acceptable. Please note that each follow
up response may take approximately 2 business days as the support
professional working with you may need further investigation to reach the
most efficient resolution. The offering is not appropriate for situations
that require urgent, real-time or phone-based interactions or complex
project analysis and dump analysis issues. Issues of this nature are best
handled working with a dedicated Microsoft Support Engineer by contacting
Microsoft Customer Support Services (CSS) at
http://msdn.microsoft.com/subscriptions/support/default.aspx.
==================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

[unknown]

Hello,
I am trying to access remote computer running windows xp sp2 using WMI - Wbemtest utility, but it is unable to connect when windows firewall of remote computer is on, Even I have added firewall exception ports 135,445 and done setting using dcomfonfg, please help.

Thanks
Salahuddin

EggHeadCafe - .NET Developer Portal of Choice
http://www.eggheadcafe.com/default.aspx?ref=ng

[unknown]

Hello,
I am trying to access remote computer running windows xp sp2 using WMI - Wbemtest utility, but it is unable to connect when windows firewall of remote computer is on, Even I have added firewall exception ports 135,445 and done setting using dcomfonfg, please help.

Thanks
Salahuddin

EggHeadCafe - .NET Developer Portal of Choice
http://www.eggheadcafe.com/default.aspx?ref=ng