Systems Insight Manager
cancel
Showing results for 
Search instead for 
Did you mean: 

Subscribe to WBEM Events for Domain Controllers

SOLVED
Go to solution
NJK-Work
Honored Contributor

Subscribe to WBEM Events for Domain Controllers

Does anyone know how to get WBEM indications working for domain controllers?  Prior to the DC promo I subscribed to the WBEM indications on the servers and they worked.  Now that they are domain controllers, the WBEM alerts no longer get sent to SIM.  I tried to re-subscribe to them but the subscription task fails.  Our domain account used with the WBEM providers is in the Builtin local group (I believe these were formerly called  "domain local" groups) called "Distributed COM Users" - which I believe is the group used by domain controllers (in the "BuiltIn" folder in AD).

 

Adding to the account to "Domain Admins" is not an option...

 

Thanks

NK

5 REPLIES
n0kia
Valued Contributor
Solution

Re: Subscribe to WBEM Events for Domain Controllers

NJK-Work
Honored Contributor

Re: Subscribe to WBEM Events for Domain Controllers

Thanks for the tip.

 

After reading it, all I can say is "Arrrggg!".  Looks like I will need to make the WBEM account a Domain Admin while I add the subscriptions and then remove it.  Not the worst thing in the world - but just silly how they design these things.

 

NK

Andrew_Haak
Honored Contributor

Re: Subscribe to WBEM Events for Domain Controllers

Hello there,

 

An other option is to go for the SNMP agents, this way you only need SNMP read rights. Write csn be handy for clearing logs but not needed as you can clear logs from logviewers on the server itself. Now config the trap to your SIM server and you will receive events.

 

If you want to use WBEM try the following:

 

You can also give the account remote dcom rights, read rights in all of the WMI tree exept for the wbem subscription part you would need wmi right rights.

Kind regards,

Andrew
NJK-Work
Honored Contributor

Re: Subscribe to WBEM Events for Domain Controllers

Yes - that worked.  I had to give the account READ access in WMI security.

Andrew_Haak
Honored Contributor

Re: Subscribe to WBEM Events for Domain Controllers

Perhaps an even easier way to do that is to run a repair and choose the option to set WBEM access to a non admin account, this way you need an admin account to fix the rights but then a non admin is set to be used to access the server. So the admin account is not saved in SIM but just used to set the non admin to be able to access the server.

This probably only works on member servers not DC's
Kind regards,

Andrew