Users Guide

If the PSRemoting command is disabled, run enable the PSRemoting command using the following commands.
i. Run the command: Enable-PSRemoting
ii. In the confirmation message, type Y.
b. In PowerShell, run the command: Get-ExecutionPolicy.
If the policy is not set to RemoteSigned, then set it to RemoteSignedusing the following commands.
i. Run the command: Set-ExecutionPolicy RemoteSigned.
ii. In the confirmation message, type Y.
2. Configure user access to Windows Management Instrumentation (WMI). For more information, see the Configuring user
access to WMI.
3. Provide share and folder permissions to write files to the inboxes folder.
To grant share and folder permissions to write files to the DDR inbox:
a. From the Configuration Manager console, under Administration, grant the user permission to write to the
SMS_<sitecode> share.
b. Using File Explorer, go to the share location SMS_<sitecode> share, and then to the ddm.box folder. Grant full
control to the domain user for the following folders:
● SMS_<sitecode>
● Inboxes
● ddm.box
Configuring user access to WMI
To configure user access to WMI remotely:
NOTE: Make sure that firewall of the system does not block the WMI connection.
1. To access the Distributed Component Object Model (DCOM) remotely, provide permissions to the enrolled SCCM user.
To grant user permissions for DCOM:
a. Launch dcomcnfg.exe.
b. From the left pane, in the Component Services console, expand Computers, right-click My Computer, and select
Properties.
c. On COM Security:
● From Access Permissions, click Edit Limits and select Remote Access.
● From Launch and Activation Permission, click Edit Limits and select Local Launch, Remote Launch, and
Remote Activation.
2. To access the DCOM Config Windows Management and Instrumentation (WMI) components, provide user permissions to
the enrolled user.
To grant user permissions for DCOM Config WMI:
a. Launch dcomcnfg.exe.
b. Expand My Computer > DCOM Config.
c. Right-click Windows Management and Instrumentation, and select Properties.
d. On Security, from Launch and Activation Permission, click Edit and select the Remote Launch and Remote
Activation permissions.
3. Set the namespace security and grant permissions.
To set namespace security and grant permissions:
a. Launch wmimgmt.msc
b. In WMI Control pane, right-click WMI Control, select Properties, and then select Security.
c. Navigate to ROOT\SMS Namespace.
d. Select the Execute Methods, Provider Write, Enable Account, and the Remote Enable permissions.
e. Navigate to Root\cimv2\OMIMSSC.
f. Select the Execute Methods, Provide Write, Enable Account, and the Remote Enable permissions .
Alternatively, the Configuration Manager user becomes a member of the SMS_Admin group, and you can grant Remote
Enable to the existing permissions of the group.
94
Trouble shooting scenarios