Solved

WMI query from remote computer fails with Impersonation failed - access denied and WDM call returned error: 4200

Posted on 2008-10-23
4
7,678 Views
Last Modified: 2013-11-05
Hi all,

We have a remote querying a server using WMI to check on the status of various services, however for some reason it has now started to fail.

The wmiprov.log shows:

Impersonation failed - access denied
WDM call returned error: 4200

I believe the account has the correct rights, but for some reason it still keeps on failing.

Does anyone have any ideas on how to troubleshhot and resolve this ?

Thanks

Matt
0
Comment
Question by:themoogy
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
  • 2
4 Comments
 
LVL 41

Expert Comment

by:graye
ID: 22812908
Tell us more about the "remote" end of this scenario....    Domain vs Workgroup?, Windows Server 2003?,  With Service Pack 2?   Any recent firewall adjustments, etc.
0
 
LVL 1

Author Comment

by:themoogy
ID: 22813077
Both windows 2003 sp2, with all the latest hotfixes. Both a memeber of the same domain and in the same OU, no firewall between the hosts or enabled on the hosts.

I have confimred that the host affected is rejecting all WMI queries over the network, WMI only works when queried on the host itself.
Thanks

Matt
0
 
LVL 41

Accepted Solution

by:
graye earned 250 total points
ID: 22816528
OK... I recommend the next step be to download and run the WMIDiag script on the remote PC.
http://www.microsoft.com/downloads/details.aspx?familyid=d7ba3cd6-18d1-4d05-b11e-4c64192ae97d&displaylang=en
There might be some that pops out at us.
Just curious... does the "reverse direction" work?   Can you sucessfully run a script with Impersonation from the "failed" server to the "good" server?
0
 
LVL 1

Author Comment

by:themoogy
ID: 22833358
Great tool, thanks for pointing me in the right direction, it proved to be a dcom error, the tool suggested registry changes and after a reboot all the problems were solved.
Thanks for your help

Matt
0

Featured Post

Ransomware: The New Cyber Threat & How to Stop It

This infographic explains ransomware, type of malware that blocks access to your files or your systems and holds them hostage until a ransom is paid. It also examines the different types of ransomware and explains what you can do to thwart this sinister online threat.  

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

I guess it is not common knowledge to most Wintel engineers/administrators: If you have an SNMP-based monitoring system in your environment (and it's common to have SNMP or Syslog) it's reasonably easy to enable monitoring of the Windows Event logs,…
Many of us need to configure DHCP server(s) in their environment. We can do that simply via DHCP console on server or using MMC snap-in on each computer with Administrative Tools installed in a network. But what if we have to configure many DHCP ser…
In this video we outline the Physical Segments view of NetCrunch network monitor. By following this brief how-to video, you will be able to learn how NetCrunch visualizes your network, how granular is the information collected, as well as where to f…
Monitoring a network: why having a policy is the best policy? Michael Kulchisky, MCSE, MCSA, MCP, VTSP, VSP, CCSP outlines the enormous benefits of having a policy-based approach when monitoring medium and large networks. Software utilized in this v…

622 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question