Authorize WMI users and set permissions

Applies To: Windows Server 2003, Windows Server 2003 R2, Windows Server 2003 with SP1, Windows Server 2003 with SP2

To authorize WMI users and set permissions

  1. Open WMI Control.

  2. In the console tree, right-click WMI Control, and then click Properties.

  3. Click the Security tab.

  4. Select the namespace for which you want to give a user or group access, and then click Security.

  5. In the Security dialog box, click Add.

  6. In the Select Users, Computers, or Groups dialog box, enter the name of the object (user or group) that you want to add. Click the Check Names button to verify your entry and then click OK. You might have to change the location or use the Advanced button to query for objects. See the dialog box help for more details.

  7. In the Security dialog box, under Permissions, select the permissions to allow or deny the new user or group.

    Level Description

    Execute Methods

    Allows methods exported from the WMI classes or instances to be run.

    Full Write

    Allows full read, write, and delete access to all WMI objects, classes, and instances.

    Partial Write

    Allows write access to static WMI objects.

    Provider Write

    Allows write access to objects that are provided by providers.

    Enable Account

    Allows read access to WMI objects.

    Remote Enable

    Allows remote access to the namespace.

    Read Security

    Allows read-only access to WMI security information.

    Edit Security

    Allows read and write access to WMI security information.


  • To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure. As a security best practice, consider using Run as to perform this procedure.

  • To open the WMI Control console, click Start, click Run, type wmimgmt.msc, and then click OK.

  • You can set permissions on a remote computer or a local computer. To access a remote computer, right-click WMI Control, click Connect to another computer, click Another computer, and then type the name of the computer to which you want to connect. If you are using WMI Control from the Computer Management console, right-click the Computer Management node to connect to the other computer.

  • On computers running Windows 95, Windows 98, or Windows ME, all users have full control locally. Security settings are only relevant for remote connection to a computer running Windows 95, Windows 98, or Windows ME.

  • You can delete a user's or group's authorization to access WMI services by selecting that user or group and clicking Remove.

Information about functional differences

  • Your server might function differently based on the version and edition of the operating system that is installed, your account permissions, and your menu settings. For more information, see Viewing Help on the Web.

See Also


WMI Control Overview
Modify permissions or delete authorized users
Managing WMI security
Working with MMC console files
Permissions for files and folders