In my application I need to restrict some options so that only certain users (with appropriate privilege levels) are allowed to perform those operations. If I am using an ExecMethod on an instance object of a WMI class, is it possible for me (at an admin level) to modify the access rights on that class so that only certain groups of users can modify/set info? Any thoughts how I could go about this? Thanks, Priya
Hi Priya, I will perform some research on this issue and get back to you ASAP. Thanks. Best regards, Jeffrey Tan Microsoft Online Community Support Delighting our customers is our #1 priority. We welcome your comments and suggestions about how we can improve the support we provide to you. Please feel free to let my manager know what you think of the level of service provided. You can send feedback directly to my manager at: msdnmg@microsoft.com. ================================================== Get notification to my posts through email? Please refer to http://msdn.microsoft.com/subscriptions/managednewsgroups/default.aspx#notif ications. Note: The MSDN Managed Newsgroup support offering is for non-urgent issues where an initial response from the community or a Microsoft Support Engineer within 1 business day is acceptable. Please note that each follow up response may take approximately 2 business days as the support professional working with you may need further investigation to reach the most efficient resolution. The offering is not appropriate for situations that require urgent, real-time or phone-based interactions or complex project analysis and dump analysis issues. Issues of this nature are best handled working with a dedicated Microsoft Support Engineer by contacting Microsoft Customer Support Services (CSS) at http://msdn.microsoft.com/subscriptions/support/default.aspx. ================================================== This posting is provided "AS IS" with no warranties, and confers no rights.
Hi Priya, Sorry for letting you wait. Based on my research, WMI security is at the namespace level so you can't set an ACL on a specific class without moving that class to a different namespace. If the action is privileged, then the provider is responsible for doing that check. Is the provider owned by the application or is it a standard WMI class? The articles below talk about how to set the permission for WMI namespace: "How to change the Security Descriptor of WMI objects " http://blogs.msdn.com/alejacma/archive/2008/03/14/how-to-change-the-security -descriptor-of-wmi-objects.aspx "WMI Namespace Security" http://www.codeproject.com/KB/system/WmiSecurity.aspx "Set WMI namespace security via GPO (script)" http://blogs.msdn.com/spatdsg/archive/2007/11/21/set-wmi-namespace-security- via-gpo-script.aspx Hope it helps. Best regards, Jeffrey Tan Microsoft Online Community Support ========================================= Delighting our customers is our #1 priority. We welcome your comments and suggestions about how we can improve the support we provide to you. Please feel free to let my manager know what you think of the level of service provided. You can send feedback directly to my manager at: msdnmg@microsoft.com. This posting is provided "AS IS" with no warranties, and confers no rights.
