HOW TO: Set WMI Namespace Security in Windows Server 2003 (325353)

SUMMARY

This article describes how to set Windows Management Instrumentation (WMI) namespace security in Windows Server 2003.

WMI security is based on namespaces. The schema is logically partitioned into namespaces for organizational and security purposes. Use the WMI Control snap-in to modify the security on WMI namespaces. With this tool, you can set security that is based off the root or select individual namespaces. You can also set inheritance that is based on namespace hierarchy.

back to the top

How To Set WMI Namespace Security

1. Click Start, click Run, type wmimgmt.msc in the Open box, and then click OK.
2. Right-click WMI Control, and then click Properties.
3. Click the Security tab
4. Click the namespace for which you want to configure security, and then click Security.
5. Do one of the following:
   • To change permissions for an existing user or group, click the user or group whose permissions you want to modify in the Group or user names list.
   • To configure permissions for a new user or group, click Add. Type the user or group name in the Enter the object names to select box, click Check Names to verify your entry or entries, and then click OK.
6. In the Permissions for User or Group list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny. You can set the following permissions:

   Execute Methods: Permits methods that are exported from the WMI classes or instances to be run.
   Full Write: Permits full read, write, and delete access to all WMI objects, classes, and instances.
   Partial Write: Permits write access to static WMI objects.
   Provider Write: Permits write access to objects that are provided by the provider.
   Enable Account: Permits read access to WMI objects.
   Remote Enable: Permits remote access to the namespace.
   Read Security: Permits read-only access to WMI security information.
   Edit Security: Permits read and write access to WMI security information.

   Or, to remove a user or group from the Group or user names list, click Remove.
7. If you want to set the inheritance on the namespace, follow these steps:
   1. Click Advanced.
   2. In the Permission entries list, click the user or group whose permissions you want to modify, and then click Edit.
   3. To modify permissions for the user or group that you selected, in the Permissions list, click to select the Allow check box next to the permission that you want to permit, or click to select the Deny check box next to the permission that you want to deny.
      
      NOTE: This is the same list of permissions as described in step 6.
   4. In the Apply onto box, click one of the following options, and then click OK:

      This namespace only
      This namespace and subnamespaces
      Subnamespaces only

8. Click OK three times.
9. Quit the WMI Control snap-in.

back to the top