Decrypt my World

Cryptography, Security, Debugging and more!

WMI Diag won't work well in non-English Windows

WMI Diag won't work well in non-English Windows

  • Comments 2

Hi all,

If you ever use WMI Diag script (The WMI Diagnosis Utility -- Version 2.0) on a non-English version of Windows (i.e. Spanish, French, Italian, German...), you will get tons of errors when the script checks out default permissions on WMI namespaces or DCOM components related to WMI, for instance.

The cause is simple: the script checks permissions for groups of users which name is language-dependant.

If we use WMI Diag in i.e. a Spanish Windows, we will have to edit the script and replace:

- "BUILTIN\Administrators" with "BUILTIN\Administradores",

- "Everyone" with "Todos",

- "NT AUTHORITY\NETWORK SERVICE" with "NT AUTHORITY\Servicio de red",

- "NT AUTHORITY\LOCAL SERVICE" with "NT AUTHORITY\SERVICIO LOCAL",

- "NT AUTHORITY\Authenticated Users" with "NT AUTHORITY\Usuarios autentificados",

 

Now you can run the script and find out if your WMI is really broken.

I hope this helps.

Cheers,

 

Alex (Alejandro Campos Magencio)

  • I must have gotten something wrong. When I used the original WMIDiag I found lots of errors like you described. Example:

    DCOM security for 'My Computer' (Access Permissions/Edit Limits): ................................................... MODIFIED.

    23379 15:24:51 (1) !! ERROR: Default trustee 'NT AUTHORITY\ANONYMOUS LOGON' has been REMOVED!

    So I translated the Anonymous Logon into German and now I get:

    DCOM security for 'My Computer' (Access Permissions/Edit Limits): ................................................... MODIFIED.

    22983 16:36:12 (1) !! ERROR: Default trustee 'NT AUTHORITY\ANONYME ANMELDUNG' has been REMOVED!

    What did I do wrong???

    Cheers

    Wolf

  • Did you check DCOM security? Maybe ANONYMOUS LOGON is actually missing... If it's there, take a look to the way your Windows translated the name to German. Sometimes the translation is not as obvious as it seems...

Page 1 of 1 (2 items)
Leave a Comment
  • Please add 5 and 3 and type the answer here:
  • Post
Translate This Page