So, any ideas what permissions you need to read WMI objects exported by
Exchange (2003)?

 

I have a script that's looking at the emails the IMF filter is dropping
in the UCE archive.

 

Running it as my personal domain admin account it works just fine. As a
service account: permission denied.

 

Things I've done/checked:

 

- Delegate rights to account via Exchange SysMgr (view-only up thru
FullAdmin)

 

-Add svc account to local admins group on Exchange server

 

- Verified NTFS local access rights to the folder the script resides in

 

-Verified full perms on the MicrosoftExchangeV2 WMI object via the WMI
MMC (permissions are already there for local admin group)

 

 

The only thing I haven't done is make the service acct a Doman Admin,
which I'm hesitant to do for obvious reasons.

 

The WBEM logs and Windows Event logs aren't complaining about anything.
I don't have a debugger on this machine, so starting the script with the
debugging switches doesn't do anything.

 

Any other ideas? Any way to crank up logging on the script engines or
the WMI providers?

 

-sc

 

 


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

---
To manage subscriptions click here: 
http://lyris.sunbelt-software.com/read/my_forums/
or send an email to [email protected]
with the body: unsubscribe ntsysadmin

Reply via email to