Home / server / Questions / 749059
Accepted
John
Asked: 2016-01-15 03:23:44 +0800 CST

root\MsCluster - The WMI provider returned an 'access denied' error

  • 772

I have prepared the non-administrator user for collecting data using WMI.

I can query any namespace using this user except root/MSCluster. For root/MSCluster it returns 'access denied'. At the same time, I can successfully query it using domain administrator account.

Get-WSManInstance wmi/root/mscluster/* -Enumerate -Filter "SELECT * FROM MSCluster_Resource" -ComputerName host1.corp.com -Authentication Kerberos -Credential [email protected]

'[email protected]' is added to 'Performance Monitor Users', 'Distributed COM Users' and 'WinRMRemoteWMIUsers__' groups, 'Event Log Read Permission' is granted, full access is granted for all WMI namespaces, full DCOM access is granted

windows-server-2012-r2

2 Answers

  1. You asked for the entire class to be instantiated. Looking at the class enumerator on msdn I'm not surprised it failed needing administrator access.

    You could try querying the specific properties you need and see if you trigger an exception, but most will require admin access.

    Here's the msdn page for the class you're using:

    https://msdn.microsoft.com/en-us/library/windows/desktop/aa371464(v=vs.85).aspx

    • 0
  2. Best Answer

    I found that querying root/MsCluster requires additional privileges. This privileges may be granted using Grant-ClusterAccess (https://technet.microsoft.com/en-us/library/ee460969.aspx).

    Also querying root/virtualization/v2 requires user to be added to 'Hyper-V Administrators' local group

    • -2