WMI fails locally, works fine remotely. Why?   

My web service, running as Network Service, uses the WMI COM API to modify a 
class instance. When working locally, it fails with 'Access Denied' errors, 
but works fine remotely.

I use CoSetProxyBlanket() on my IWbemServices object to set up impersonation 
of a local administrator. It seems that these settings are being utilized 
correctly when connecting to a remote machine, but are ignored when local.

If I change the web service's identity from Network Service to Local System, 
everything works fine. However, I don't want to have to do this.

How can I force the use of the security settings specified by 
CoSetProxyBlanket()? Failing that, are there any alternatives to just 
changing the Network Service to Local System?

date: Wed, 6 Aug 2008 15:12:11 -0700   author:   IdentityCrisis

Re: WMI fails locally, works fine remotely. Why?   

You just can't use impersonation on the local machine (you can't run
WMI with other privileges than those the user that runs the software
has, would be sort of a security issue locally).
Alternatives would be running on a virtual machine (so the local
machine's sole purpose is to analyze others)

rob'
On 7 août, 00:12, IdentityCrisis
 wrote:
> My web service, running as Network Service, uses the WMI COM API to modify a
> class instance. When working locally, it fails with 'Access Denied' errors,
> but works fine remotely.
>
> I use CoSetProxyBlanket() on my IWbemServices object to set up impersonation
> of a local administrator. It seems that these settings are being utilized
> correctly when connecting to a remote machine, but are ignored when local> If I change the web service's identity from Network Service to Local System,
> everything works fine. However, I don't want to have to do this.
>
> How can I force the use of the security settings specified by
> CoSetProxyBlanket()? Failing that, are there any alternatives to just
> changing the Network Service to Local System?

date: Fri, 8 Aug 2008 01:09:39 -0700 (PDT)   author:   RD