Enumerate WMI namespace group/users and permissions.

[mharcourt]

I can open wmimgmt.msc, go to Properties, then security and expose all the namespaces. After selecting a namespace I can select security and see the group/user names and permissions.

What I am trying to accomplish is using a list of server names to audit WMI and enumerate the namespace group/users and permissions.


My questions is Can you do this from a script and if so HOW?
Anyone have suggestion on how I can accomplish this task?

Thanks

 

[tsuji]

Hello mharcourt,

Enum the namespace is recursive. Connect to root and query the __namespace system class.

strComputer="."
set svc=getobject("winmgmts:\\" & strComputer)
sQuery="select * from __namespace"
set cns=svc.execquery(sQuery)
'      wscript.echo cns.count
for each ons in cns
    wscript.echo ons.path_
next

regards - tsuji

 

[mharcourt]

Thanks. I know I can enumerate namespaces and enumerate the methods and qualifers for WMI:__SystemSecurity. But this does not give me the information I need.

I need the User\groups names and their permissions.

 

[tsuji]

mharcourt,

I know my posting certainly won't solve your problem. I guess you have read and are looking for script version of the gui operation as discussed in ms article 325353 (or win2000 version):

http://support.microsoft.com/default.aspx?scid=kb;en-us;325353

But binary arrays are everywhere for security settings here which stretch too far scripting. Maybe other members better informed would voluntee, I certainly hope so...

- tsuji