Y
YogiJ
I have an interesting issue. Attempting to run wbemtest to check WMI connection from a production server to a server in my DMZ.
And I get the classic error 0x80070005 Access is denied.
now normally this means the account has not been provided access to either DCOM or WMI on the machine but I assured everything was provided. (I get the same issue when using my domain admin account to run these tests).
Here's where it gets a little interesting Prod Server to DMZ DC and the WMI connection works no issue, DMZ DC to DMZ Server and WMI connection works no issue, PROD Server to DMZ Server and I get the described Access is denied error.
Which means the WMI is working when everything is internal Domain, but not when going cross forest to this particular PC only, all other machines no issue to WMI cross forest.
All servers in question are server 2012 R2. I've looked at firewall rules in going cross forest to this machine and to help troubleshoot we allowed all traffic and this didn't fix the issue so I can rule that out too.
Continue reading...
And I get the classic error 0x80070005 Access is denied.
now normally this means the account has not been provided access to either DCOM or WMI on the machine but I assured everything was provided. (I get the same issue when using my domain admin account to run these tests).
Here's where it gets a little interesting Prod Server to DMZ DC and the WMI connection works no issue, DMZ DC to DMZ Server and WMI connection works no issue, PROD Server to DMZ Server and I get the described Access is denied error.
Which means the WMI is working when everything is internal Domain, but not when going cross forest to this particular PC only, all other machines no issue to WMI cross forest.
All servers in question are server 2012 R2. I've looked at firewall rules in going cross forest to this machine and to help troubleshoot we allowed all traffic and this didn't fix the issue so I can rule that out too.
Continue reading...