User`s guide

Table Of Contents
ADM User’s Guide
42 VMware, Inc.
To enable DCOM for a host running Windows XP or Windows 2003
1Logintothehostasadminuser(eitheralocaladministratororadomainadministrator).
2ClickStartmenu,selectRunandtypeDCOMCNFG.ComponentServiceswindowappears.
3FromtheConsoleRootleftpane,selectComponentServices>Computers>MyComputer.
4RightclickMyComputer,andthenclickProperties.
MyComputerPropertieswindowappears.
5 SelectCOMSecuritytab.
6UnderLaunchandActivationPermissions,clickEditLimits.LaunchPermissionwindowappears.
7Ifthedomainuser(DOMAINUSERinthisexample)isnotpresentintheGroupsorusernameslist,Click
Add,toaddthedomainuser.
8 Selecttheuseryou
addedfromtheGroupsorusernameslist.
9FromthePermissionsforAdministratorslist,selectRemoteLaunchandRemoteActivation.
10 ClearallothercheckboxesandclickOKtoreturntotheMyComputerPropertieswindow.
11 ClickApplytosaveyourchangesandclickOK.
Setting WMI Privileges
AfterWMIrequestspassthroughtheDCOMcommunicationlayer,Windowsrunsanotherauthorization
check,forspecificuserpermissionsattheleveloftheWMIservice.Therefore,toallowthedomainusertorun
WMIqueries,theWMIserviceneedstobeconfiguredforeverymanagedhost.Thisisdoneeitherlocally
on
thathostorremotely.
To configure WMI access on the managed hosts
1Ifyouareconfiguringaremotemachine,useadomainadministrativeaccount.Alocaladministrative
accountwillnotwork.
2Loginasadminuser(eitherlocalorremoteadministrator)tothetargethost.
3ClickStartmenu,selectRunandtypewmimgmt.msc.TheWindowsManagementInfrastructure
(WMI)
windowappears.
4RightclickWMIControl(Local)intheleftpaneandclickProperties.WMIControl(Local)Properties
windowappears.
5ClickSecuritytabandnavigatetoRoot>Security.SecurityforRootwindowappears.
6ClickAdd.TheSelectUsersorGroupswindowappears.
7Typetheusernameinthefollowing
format:
Domainname\username
Forexample,MYDOMAIN\DOMAINUSER
N
OTEInWindows2000,theDCOMmanagementconsoleissimpler.SoskipStep 3andStep 4.
N
OTEIfyouareconfiguringremotesettingsforWMIprivileges,rightclickWMIControl(Local)and
selectConnecttoanothercomputer.TypethenameoftheremotehostandclickOK.Fromthispoint,
configurationchangeswillbeappliedtotheselectedhostinsteadofthelocalhost.
N
OTEByselectingtheSecurityoptioninRoot,youareallowingWMIqueriestoallavailableWMI
providers.IncaseRootcannotbeused,CIMV2shouldbeused;thisoptionisnotrecommended.Giving
theADMusersecuritypermissionstoRootprovideslittletonoriskthatquerieswillbenonintrusive.
NOTETypetheusernameoftheuserwhowillbeperformingtheDetailDiscovery.