Re: WMI Mapper 7.2 - windows 2008 & 2012 security settings (263 Views)
Reply
Occasional Advisor
TrevorT
Posts: 13
Registered: ‎08-29-2012
Message 1 of 3 (592 Views)

WMI Mapper 7.2 - windows 2008 & 2012 security settings

[ Edited ]

The release notes for version 2.7.1 say that

"WMI Mapper and WMI Mapper Indications  services with least privileges for Microsoft Windows Server 2008 R2 and Microsoft Windows 7, WMI Mapper service runs as "NT SERVICE\WMI Mapper" and WMI Mapper Indications Service runs as "NT SERVICE\WbemConsumer" on these 2 respective platforms.

 

Version 7.2 notes say

"Changed WMI Mapper installer to install services with least privileges even on Microsoft Windows Server 2012"

 

Release notes:

http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?swItem=MTX-39ce46ee34984271...

 

The install notes for WMI mapper say that for 2003 and XP, extra DCOM permissions must be added.

http://h20000.www2.hp.com/bizsupport/TechSupport/SoftwareDescription.jsp?swItem=MTX-39ce46ee34984271...

 

I need to setup hardware monitoring in a secure environment.  I can't use SNMP, and I can't have the DCOM permissions set the way they need to be set for 2003.

 

When I install WMI Mapper on 2008, it auto-sets the DCOM permissions the way it does for 2003.

 

I can't find any good documentation on how/why 2008/2012 is more secure that 2003.  Does 2008/2012 need those extra security holes that 2003 does?  What do those release notes mean - how is 2008 more secure?  What is the 'least priveledges' - is that some type os special / custom install?

 

How can I install WMI Mapper on Windows 2008 (or 2012) and have it not require the DCOM holes listed for 2003?

Please use plain text.
Valued Contributor
SwisspostIT
Posts: 177
Registered: ‎02-20-2012
Message 2 of 3 (532 Views)

Re: WMI Mapper 7.2 - windows 2008 & 2012 security settings

Hi,

 

because of the statement of Microsoft, that starting with Windows Server 2012 SNMP isn't supported anymore (it's there and usable but when you have problems you won't get support by MS), we also tried to move to WBEM. After few weeks of problems and investigations (we also had a Call at HP open) we decided to move away from HP SIM and now we try to make the hole HW Mangement with MS SCOM and Insight Control Plugins.

 

The main reason was, that we found out that you have to configure a lot more with WBEM based management (compared to SNMP when managing 1000+ servers) and you can work only with full administrator accounts (the settings described in the user guides from HP regarding to WBEM Management with non-administrative accounts didn't work)...

 

So, as far as we are informed the WBEM based management isn't as enterprise friendly as the SNMP based management was...

 

Regards,

Ville

Please use plain text.
Frequent Advisor
marcelkoedijk
Posts: 44
Registered: ‎05-29-2007
Message 3 of 3 (263 Views)

Re: WMI Mapper 7.2 - windows 2008 & 2012 security settings

I was running in the same problem, WMI install (update Insight Manager 7.2.2) has no primissions / windows server 2012.

 

I delete the WMI services in windows services, reboot de server and install only the WMI mapper 7.2 again, this time without issues. And IRS is "green" again. So in my case is the problem solved.

Please use plain text.
The opinions expressed above are the personal opinions of the authors, not of HP. By using this site, you accept the Terms of Use and Rules of Participation