Authorize WMI users and set permissions

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To authorize WMI users and set permissions

Open WMI Control.
In the console tree, right-click WMI Control, and then click Properties.
Click the Security tab.
Select the namespace for which you want to give a user or group access, and then click Security.
In the Security dialog box, click Add.
In the Select Users, Computers, or Groups dialog box, enter the name of the object (user or group) that you want to add. Click the Check Names button to verify your entry and then click OK. You might have to change the location or use the Advanced button to query for objects. See the dialog box help for more details.

In the Security dialog box, under Permissions, select the permissions to allow or deny the new user or group.

Level	Description
Execute Methods	Allows methods exported from the WMI classes or instances to be run.
Full Write	Allows full read, write, and delete access to all WMI objects, classes, and instances.
Partial Write	Allows write access to static WMI objects.
Provider Write	Allows write access to objects that are provided by providers.
Enable Account	Allows read access to WMI objects.
Remote Enable	Allows remote access to the namespace.
Read Security	Allows read-only access to WMI security information.
Edit Security	Allows read and write access to WMI security information.

Notes

To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.
To open the WMI Control console, click Start, click Run, type wmimgmt.msc, and then click OK.
You can set permissions on a remote computer or a local computer. To access a remote computer, right-click WMI Control, click Connect to another computer, click Another computer, and then type the name of the computer to which you want to connect. If you are using WMI Control from the Computer Management console, right-click the Computer Management node to connect to the other computer.
On computers running Windows 95, Windows 98, or Windows ME, all users have full control locally. Security settings are only relevant for remote connection to a computer running Windows 95, Windows 98, or Windows ME.
You can delete a user's or group's authorization to access WMI services by selecting that user or group and clicking Remove.

Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.