unable to connect to WMI Service

[fiza]

We have built all computers from the same MDT/WDS image. They all have the exact same group policies applied. Yet sometimes I cannot ping machines and sometimes cannot connect to the WMI service. Sometimes VAMT 3.0 returns "Unable to connect to the WMI Services on the remote machine".

 

I know the machine is on. The user is merrily working on it. It is connected to the network, has all mapped drives and printers.

 

Anyone any ideas?

[sted]

firewall policy/service playing silly beggars?

[fiza]

This is where it gets confusing because they all pick up the same policy and the firewall should be off on all of them. They are all an indentical build too.

[Duke5A]

This is where it gets confusing because they all pick up the same policy and the firewall should be off on all of them. They are all an indentical build too.

 

Policies might not be applied correctly; give RSOP a look on one of the problem machines. Outside of that I really think about leaving the firewall up on client machines. I remember spending an entire week cleaning out the Blaster Worm from a 4,000 machine network back in the day. If something gets loose on the inside and you're not patched (if one has even been released) the built-in firewall will be your last line of defense. I force the firewall on on all staff systems and only open up things I need for remote management to only specific subnets.

 

Anyways, for WMIC through the firewall you're looking for Allow inbound remote administration exception.

[sted]

ive had ot set to firewall off but the service was being dumb as was just borked so it was wyrd

[mac_shinobi]

Presume windows 7 32 bit or 64 bit. If it was XP I may have been able to help with regards to re building / repairing WMI and giving access rights / permissions for dcom etc but haven't dealt with WMI issues for a while. I presume you are authenticating against the remote machine using a domain admin account