Resolve Errors when Configuring CDOM and WMI for Remote Monitoring Systems

If you encounter an ‘Access Denied’ error when attempting to access Windows systems, you can resolve the issue by configuring DCOM and WMI settings on the target machine.

Configuring DCOM

To configure DCOM permissions:

  1. On the target system, open the DCOM Configuration Tool by clicking Start > Run

    -OR-

    press WIN + R.

  2. Type dcomcnfg, and click OK or press Enter.

  3. In the Component Services window, expand Component Services > Computers. Right-click My Computer and select Properties.

  4. Navigate to the COM Security tab.

  5. Under Launch and Activation Permissions, click Edit Limits.

    • Select Distributed COM Users.

    • Enable the Allow option for Remote Access.

  6. Under Access Permissions, click Edit Limits.

    • Select Distributed COM Users.

    • Enable the Allow option for Remote Access.

  7. Click OK to apply the changes.

Add Required Users to Local Groups

To add user accounts to required groups:

  1. Open Computer Management > Local Users and Groups.

  2. Add the following: 

    • Add the user account to the Distributed COM Users group.

    • Add the user account to the Performance Log Users group.

 

Configuring WMI

To configure DCOM permissions:

  1. On the target system, open the DCOM Configuration Tool by clicking Start > Run

    -OR-

    press WIN + R.

  2. Type wmimgmt.msc, and click OK or press Enter.

  3. In the WMI Control window, right-click WMI Control and select Properties.

  4. Navigate to the Security tab and select the Root namespace.

  5. Click Security> Add to add the user account.

  6. In the Select Users, Computers, or Groups window

    • Enter the user account and check names to verify the entry.

    • Click OK.

  7. Ensure the permissions propagate to all subnamespaces.

    • In the Security window, under Permissions for Authenticated Users, check Enable Account and Remote Enable.

    • Under Security > Advanced, double-click the user/group to open properties.

    • Set the Scope to This namespace and subnamespaces.

  8. Click OK to apply the changes.