WMI through VPN different domain to XP SP3 machines

Posted on 2009-02-09
Last Modified: 2012-05-06
I am trying to run some WMI queries on a clients computer running XP SP3 over a VPN.  The client is running an SBS2003 Domain which I have a Domain Admin account and full control of.  While trying to run queries is get an Access Denied error.  I know I am using the right credentials because the same command ran against the server returns the appropriate response.

I have already googled this and spend many of hours troubleshooting.  Below is a list of things that I have done.

I have modified the SBS Firewall GPO to allow remote administration (no i can run the query from the server)
I have Added my local subnet as well as * to the allowed list under the above selection.
I have granted the user the appropriate permissions within WMI
I have messed with the DCOM settings VIA a GPO

We do have another vpn to another client running XP SP2 and the queries work just fine.  Same devices.
Question by:thecureis
    LVL 15

    Accepted Solution


    Have you tried running this command on the workstation first?

    Open a command prompt and type 'wmic'
    Once completed, retry.
    LVL 3

    Author Comment

    I have not ran anything on the client PC's.  Everything has been done through group policy and forced using PSExec (a program which allows an admin to remotely run commands, such as gpupdate).  I will try this later tonight and let you know what happens.
    LVL 3

    Author Comment

    I attempted to run wmic through psexec and it just hung.  I will vnc to their pc during lunch and run the command.
    LVL 3

    Author Comment

    Running WMIC using PSexec from the server apparently worked.  On my previous test I had used the wrong password.

    Points to you MarkMichael, I tip my hat.
    LVL 15

    Expert Comment

    Thank you, glad it worked :)

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Use email signature images to promote corporate certifications and industry awards.
    Today, still in the boom of Apple, PC's and products, nearly 50% of the computer users use Windows as graphical operating systems. If you are among those users who love windows, but are grappling to keep the system's hard drive optimized, then you s…
    In this fifth video of the Xpdf series, we discuss and demonstrate the PDFdetach utility, which is able to list and, more importantly, extract attachments that are embedded in PDF files. It does this via a command line interface, making it suitable …
    To add imagery to an HTML email signature, you have two options available to you. You can either add a logo/image by embedding it directly into the signature or hosting it externally and linking to it. The vast majority of email clients display l…

    733 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    23 Experts available now in Live!

    Get 1:1 Help Now