How To Set WMI Namespace Security in Windows XP (295292)

SUMMARY

This article describes how to set namespace security in Windows Management Instrumentation (WMI). WMI security is based on namespaces. The schema is logically partitioned into namespaces for organizational and security purposes. You should use the Wmimgmt.msc Microsoft Management Console (MMC) snap-in to modify the security on WMI namespaces. In this tool, you can set security that is based off of the root or select individual namespaces. You can also use inheritance that is based on namespace hierarchy.

back to the top

To Set WMI Namespace Security

1. Click Start, click Run, type wmimgmt.msc, and then click OK.
2. Right-click WMI Control, and then click Properties.
3. On the Security tab, click Security to see the following allowable permissions:

   Enable: To grant read access to objects within the namespace.
   Execute Methods: Allows object methods exported from the CIM Object Manager to be run.
   Full Control: To grant full read/write/delete access to all CIM objects, classes, and instances.
   Partial Write: To grant write access to static objects in the repository.
   Provider Write: To grant write access to objects that are provided by the provider.
   Read Security: To grant read-only access to WMI security information.
   Edit Security: To grant read/write access to WMI security information.
   Remote Access: To grant a remote computer the same rights that are allowed when connecting from a local computer.

4. Set the inheritance on the namespace:
   1. Click Advanced, click the specified user for whom you wish to edit the access control list, and then click Edit.
   2. Choose the permissions that you want to grant or deny, and then under Apply Onto, you see the following options:

      This namespace only
      This namespace and subnamespaces
      Subnamespaces only

back to the top