Permission Denied when trying to access remote computer with VBScr

hello,

i'm writing a script that access WMI on a remote computer to perform certain
actions. i've tried using the GetObject as follows:


Set objWMIService = GetObject _
("winmgmts:{impersonationLevel=impersonate,(Shutdo wn)}\\" & _
strComputerName & "\root\cimv2")

and i've also tried using whe sWbemLocator ConnectServer method as follows:

Set objSWbemLocator = CreateObject("WbemScripting.sWbemLocator")
Set objWMIService = objSWbemLocator.ConnectServer(strComputerName, _
"\root\CIMV2", _
strUser, _
strPassword, _
"MS_409", _
"NTLMDomain:" + strComputerName)

when i use the first method, i get
error code: 800A0046
Error: Permission denied: 'GetObject'
System: the remote server has been paused or is in the process of being
started.

when i use the second method, i get:
error Code: 80070005
Error: Access is denied
Source: SWbemLocator
System: Access is denied

the remote computer is a Windows XP sp2, i'm running a network with a
windows 2003 domain controler. i'm running the script as a domain
administrator.
i have searched all around on a way to fix this. i have followed all
instructions in how to set securiy and impersonation level, and access level,
and still my scripts error out.
i suspect that some recent windows update is blocking access to local wmi
from the network.
all the variables are declared explicitly and are assigned values before
reaching this part of the code.
i have disabled the firewall on the local machines using a gpo, so it's not
a firewall issue.
if i'm locally on the machine, all the scripts run without a problem. it's
only remotely that i have a problem.

thanks and regards,

Since it is working on your local machine and you are getting error for
remote case and you get a 0x80070005 (DCOM ACCESS_DENIED) error
, it suggests that your settings are not properly enabled for remote
connections. Please follow the instruction at this link Connecting to WMI
Through Windows Firewall.

This posting is provided "AS IS" with no warranties, and confers no rights.
Manbinder Pal Singh[ MSFT]
Team - WMI
1. Official WMI FAQ :
http://www.microsoft.com/technet/scr...es/wmifaq.mspx
2. Programmer Focused WMI Newsgroup - microsoft.public.wmi.programmer (
NOTE: this is a replacement to microsoft.public.win32.programmer.wmi )
3. Technet ScriptCenter Resources :
http://www.microsoft.com/technet/scr...r/default.mspx


"ricardo" <ricardo@discussions.microsoft.com> wrote in message
news:324B1204-CC1F-4189-982E-9E4B21F9DE68@microsoft.com...

> hello,
>
> i'm writing a script that access WMI on a remote computer to perform
> certain
> actions. i've tried using the GetObject as follows:
>
>
> Set objWMIService = GetObject _
> ("winmgmts:{impersonationLevel=impersonate,(Shutdo wn)}\\" & _
> strComputerName & "\root\cimv2")
>
> and i've also tried using whe sWbemLocator ConnectServer method as
> follows:
>
> Set objSWbemLocator = CreateObject("WbemScripting.sWbemLocator")
> Set objWMIService = objSWbemLocator.ConnectServer(strComputerName, _
> "\root\CIMV2", _
> strUser, _
> strPassword, _
> "MS_409", _
> "NTLMDomain:" + strComputerName)
>
> when i use the first method, i get
> error code: 800A0046
> Error: Permission denied: 'GetObject'
> System: the remote server has been paused or is in the process of being
> started.
>
> when i use the second method, i get:
> error Code: 80070005
> Error: Access is denied
> Source: SWbemLocator
> System: Access is denied
>
> the remote computer is a Windows XP sp2, i'm running a network with a
> windows 2003 domain controler. i'm running the script as a domain
> administrator.
> i have searched all around on a way to fix this. i have followed all
> instructions in how to set securiy and impersonation level, and access
> level,
> and still my scripts error out.
> i suspect that some recent windows update is blocking access to local wmi
> from the network.
> all the variables are declared explicitly and are assigned values before
> reaching this part of the code.
> i have disabled the firewall on the local machines using a gpo, so it's
> not
> a firewall issue.
> if i'm locally on the machine, all the scripts run without a problem. it's
> only remotely that i have a problem.
>
> thanks and regards,
>
>

I don't see the link for "Connecting to WMI Through Windows Firewall."


"Manbinder Pal Singh [MSFT]" wrote:

> Since it is working on your local machine and you are getting error for
> remote case and you get a 0x80070005 (DCOM ACCESS_DENIED) error
> , it suggests that your settings are not properly enabled for remote
> connections. Please follow the instruction at this link Connecting to WMI
> Through Windows Firewall.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> Manbinder Pal Singh[ MSFT]
> Team - WMI
> 1. Official WMI FAQ :
> http://www.microsoft.com/technet/scr...es/wmifaq.mspx
> 2. Programmer Focused WMI Newsgroup - microsoft.public.wmi.programmer (
> NOTE: this is a replacement to microsoft.public.win32.programmer.wmi )
> 3. Technet ScriptCenter Resources :
> http://www.microsoft.com/technet/scr...r/default.mspx
>
>
> "ricardo" <ricardo@discussions.microsoft.com> wrote in message
> news:324B1204-CC1F-4189-982E-9E4B21F9DE68@microsoft.com...

>
>
>

as i said, the windows firewall is disabled on my DNS domain.
the script runs locally on every machine on my network. it just doesn't run
remotely.


"Manbinder Pal Singh [MSFT]" wrote:

> Since it is working on your local machine and you are getting error for
> remote case and you get a 0x80070005 (DCOM ACCESS_DENIED) error
> , it suggests that your settings are not properly enabled for remote
> connections. Please follow the instruction at this link Connecting to WMI
> Through Windows Firewall.
>
> This posting is provided "AS IS" with no warranties, and confers no rights.
> Manbinder Pal Singh[ MSFT]
> Team - WMI
> 1. Official WMI FAQ :
> http://www.microsoft.com/technet/scr...es/wmifaq.mspx
> 2. Programmer Focused WMI Newsgroup - microsoft.public.wmi.programmer (
> NOTE: this is a replacement to microsoft.public.win32.programmer.wmi )
> 3. Technet ScriptCenter Resources :
> http://www.microsoft.com/technet/scr...r/default.mspx
>
>
> "ricardo" <ricardo@discussions.microsoft.com> wrote in message
> news:324B1204-CC1F-4189-982E-9E4B21F9DE68@microsoft.com...

>
>
>

I am having a simular problem with a remote script.
I am using the following to access the Services on a remote 2000 Server.
The server is not part of a domain. The script work fine from an XP
workstation, Another standalone 2000 Server, and a 2003 AD controller. It
will not work from a 2003 server that is in a workgroup.
I get:

Error: Access is denied
Code: 80070005
Source: swbbemlocator

'//////////////////////////////////////////////////////////////////////////////
Set objSWbemLocator = CreateObject("WbemScripting.SWbemLocator")
Set objSWbemServices = objSWbemLocator.ConnectServer(strComputer,
"root\cimv2", strUser, strPassword)
objSWbemServices.Security_.authenticationLevel =
WbemAuthenticationLevelPktPrivacy

Set objSWbemObject = objSWbemServices.Get(strService)

Wscript.Echo "Name: " & objSWbemObject.Name & vbCrLf & _
"Display Name: " & objSWbemObject.DisplayName & vbCrLf & _
"Start Mode: " & objSWbemObject.StartMode & vbCrLf & _
"Pre-State: " & objSWbemObject.Stat
'//////////////////////////////////////////////////////////////////////////////



"ricardo" wrote:

> hello,
>
> i'm writing a script that access WMI on a remote computer to perform certain
> actions. i've tried using the GetObject as follows:
>
>
> Set objWMIService = GetObject _
> ("winmgmts:{impersonationLevel=impersonate,(Shutdo wn)}\\" & _
> strComputerName & "\root\cimv2")
>
> and i've also tried using whe sWbemLocator ConnectServer method as follows:
>
> Set objSWbemLocator = CreateObject("WbemScripting.sWbemLocator")
> Set objWMIService = objSWbemLocator.ConnectServer(strComputerName, _
> "\root\CIMV2", _
> strUser, _
> strPassword, _
> "MS_409", _
> "NTLMDomain:" + strComputerName)
>
> when i use the first method, i get
> error code: 800A0046
> Error: Permission denied: 'GetObject'
> System: the remote server has been paused or is in the process of being
> started.
>
> when i use the second method, i get:
> error Code: 80070005
> Error: Access is denied
> Source: SWbemLocator
> System: Access is denied
>
> the remote computer is a Windows XP sp2, i'm running a network with a
> windows 2003 domain controler. i'm running the script as a domain
> administrator.
> i have searched all around on a way to fix this. i have followed all
> instructions in how to set securiy and impersonation level, and access level,
> and still my scripts error out.
> i suspect that some recent windows update is blocking access to local wmi
> from the network.
> all the variables are declared explicitly and are assigned values before
> reaching this part of the code.
> i have disabled the firewall on the local machines using a gpo, so it's not
> a firewall issue.
> if i'm locally on the machine, all the scripts run without a problem. it's
> only remotely that i have a problem.
>
> thanks and regards,
>
>