Shouldn't really be a problem. You have a firewall in between that regulates whats allowed and whats not. That's why I moved the controlling server from the DMZ to the inside, since I didn't want to open up for all the ports it needed to the inside.
But theres people out there that knows much more than me about security stuff, so maybe they can give a better answer. Sverre -----Original Message----- From: Van den Bossche Eric [mailto:[EMAIL PROTECTED] Sent: 30. oktober 2003 12:02 To: Sverre Munthe; [EMAIL PROTECTED] Subject: RE: [mrtg] Re: WMI - access denied Ok, but what if people want to monitor servers in the dmz using WMI? Is there a secure sollution for this? Eric -----Original Message----- From: Sverre Munthe [mailto:[EMAIL PROTECTED] Sent: Thursday, 30 October, 2003 11:42 To: Van den Bossche Eric; [EMAIL PROTECTED] Subject: [mrtg] Re: WMI - access denied It's not in the DMZ, it's on the inside. Sverre -----Original Message----- From: Van den Bossche Eric [mailto:[EMAIL PROTECTED] Sent: 30. oktober 2003 11:27 To: [EMAIL PROTECTED] Subject: [mrtg] Re: WMI - access denied Isn't this a big risk when you do this on a server in the DMZ ? Eric -----Original Message----- From: Sverre Munthe [mailto:[EMAIL PROTECTED] Sent: Wednesday, 29 October, 2003 22:15 To: [EMAIL PROTECTED] Subject: [mrtg] Re: WMI - access denied If anyone else gets this problem, here's the solution: Run dcomcnfg.exe Select Default properties Tick Enable distributed COM on this computer Click OK and reboot (This was on a W2K server) Sverre -----Original Message----- From: Sverre Munthe Sent: 29. oktober 2003 21:20 To: [EMAIL PROTECTED] Subject: [mrtg] WMI - access denied I have this script (kixtart) I run that works on/from all servers/machines I've tested it on except on the primary domain controller (PDC). When I run it on any servers/machines to check on the PDC it isn't allowed access. And when I run it on the PDC to check any other server/machine it isn't allowed access. Any ideas? Sverre -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi -- Unsubscribe mailto:[EMAIL PROTECTED] Archive http://www.ee.ethz.ch/~slist/mrtg FAQ http://faq.mrtg.org Homepage http://www.mrtg.org WebAdmin http://www.ee.ethz.ch/~slist/lsg2.cgi
