-
Titre
Advanced configuration for non-administrative users for WinRM -
Description
IC agent using WinRM with a non-administrator user fails to query Win32_Service. The following is found in the agent debug logs:
DEBUG [Quartz[0]-3008] com.quest.glue.core.remoteconnection.windows.wmi.WMIUtils - The remote system has indicated that the query "SELECT Name,DisplayName,ProcessId,State FROM Win32_Service" has failed, no results will be returned.
com.quest.glue.api.services.QueryFailedException: WinRM request to https://hostname:5986/wsman failed: The WS-Management service cannot process the request. The WMI service returned an 'access denied' error.The rest of the metrics are showing up fine.
-
Résolution
Complete steps under section "Granting required permissions to individual remote users" of the Foglight Agent Manager Guide to grant required permissions to individual remote users.
In addition to the steps it might be necessary to add the non-admin user to Remote Management Users group for WinRM connections.
If permission errors when accessing services, please consult the "Advanced System Configuration for WinRM" section of the latest release of "Foglight for Infrastructure User Guide" guide available for download from Supportlink here.
Beginning in the 6.3 release of the SQL Server cartridges, non-Administrator accounts can be used to monitor the OS.
STATUS
Enhancement request FOG-6162 for documentation improvements has been submitted to development for consideration in a future release of Foglight.
-
Identifiant du défaut
FOG-6162