Welcome to MSDN Blogs Sign in | Join | Help

Decrypt my World

Cryptography, Security, Debugging and more!

News

  • Any of my posts is supported under any Microsoft standard support program or service. They are provided "AS IS" without warranty of any kind, and confer no rights.

Where are my readers?

Locations of visitors to this page

Favorite Posts

WMI Diag won't work well in non-English Windows

Hi all,

If you ever use WMI Diag script (The WMI Diagnosis Utility -- Version 2.0) on a non-English version of Windows (i.e. Spanish, French, Italian, German...), you will get tons of errors when the script checks out default permissions on WMI namespaces or DCOM components related to WMI, for instance.

The cause is simple: the script checks permissions for groups of users which name is language-dependant.

If we use WMI Diag in i.e. a Spanish Windows, we will have to edit the script and replace:

- "BUILTIN\Administrators" with "BUILTIN\Administradores",

- "Everyone" with "Todos",

- "NT AUTHORITY\NETWORK SERVICE" with "NT AUTHORITY\Servicio de red",

- "NT AUTHORITY\LOCAL SERVICE" with "NT AUTHORITY\SERVICIO LOCAL",

- "NT AUTHORITY\Authenticated Users" with "NT AUTHORITY\Usuarios autentificados",

 

Now you can run the script and find out if your WMI is really broken.

I hope this helps.

Cheers,

 

Alex (Alejandro Campos Magencio)

Posted: Tuesday, June 10, 2008 11:40 AM by alejacma
Filed under:

Comments

Wolfgang Haunzwickl said:

I must have gotten something wrong. When I used the original WMIDiag I found lots of errors like you described. Example:

DCOM security for 'My Computer' (Access Permissions/Edit Limits): ................................................... MODIFIED.

23379 15:24:51 (1) !! ERROR: Default trustee 'NT AUTHORITY\ANONYMOUS LOGON' has been REMOVED!

So I translated the Anonymous Logon into German and now I get:

DCOM security for 'My Computer' (Access Permissions/Edit Limits): ................................................... MODIFIED.

22983 16:36:12 (1) !! ERROR: Default trustee 'NT AUTHORITY\ANONYME ANMELDUNG' has been REMOVED!

What did I do wrong???

Cheers

Wolf

# July 22, 2008 10:45 AM

alejacma said:

Did you check DCOM security? Maybe ANONYMOUS LOGON is actually missing... If it's there, take a look to the way your Windows translated the name to German. Sometimes the translation is not as obvious as it seems...

# July 22, 2008 3:11 PM
Leave a Comment

(required) 

(required) 

(optional)

(required) 

  
Enter Code Here: Required

Comment Notification

If you would like to receive an email when updates are made to this post, please register here

Subscribe to this post's comments using RSS

Page view tracker