James
December 14th 03, 07:43 AM
Does anyone know how to change the WMI permissions
back to their default state?
In an effort to secure my laptop from remote
attacks, I inadvertantly changed some security
settings such that I can no longer modify
the root WMI permissions.
Here is the what I did:
Running as Administrator, within the "WMI
Control Properties" dialog under the
"Security" tab, I removed all access
to "Everyone" and "NETWORK_SERVICE", while
keeping full access for "Administators" and
the default access permissions for "LOCAL_SERVICE"
accounts.
After closing everything, I could no longer
run things like "tasklist", and other services
ceased to function. I realized (too late)
that the "NETWORK_SERVICE" permissions seem
to be vital for the functioning of WinXP.
(I had thought that they had something to do
with network/remote users accessing WMI).
How do I change the permissions
back to their default state?
Now, when I open the Computer Management console,
open the "WMI Control" and select "Properties",
the dialog box appears with the following
error: "Failed to initialize all required WMI
classes".
Win32_Processor: WMI: Provider load failure
Win32_WMISetting: Successful
Security Information: Successful
Win32_OperatingSystem: WMI: Provider load failure
The dialog is "frozen" and I cannot select
the "Security" tab at all.
This is despite the fact that I am running
as "Administrator" and I supposedly have
"Full Control" permission. I think it has to
do something with impersonating as "NETWORK_SERVICE"
bit I am not sure.
What shoud I do?
Any help would be greatly appreciated.
Thanks,
-James
back to their default state?
In an effort to secure my laptop from remote
attacks, I inadvertantly changed some security
settings such that I can no longer modify
the root WMI permissions.
Here is the what I did:
Running as Administrator, within the "WMI
Control Properties" dialog under the
"Security" tab, I removed all access
to "Everyone" and "NETWORK_SERVICE", while
keeping full access for "Administators" and
the default access permissions for "LOCAL_SERVICE"
accounts.
After closing everything, I could no longer
run things like "tasklist", and other services
ceased to function. I realized (too late)
that the "NETWORK_SERVICE" permissions seem
to be vital for the functioning of WinXP.
(I had thought that they had something to do
with network/remote users accessing WMI).
How do I change the permissions
back to their default state?
Now, when I open the Computer Management console,
open the "WMI Control" and select "Properties",
the dialog box appears with the following
error: "Failed to initialize all required WMI
classes".
Win32_Processor: WMI: Provider load failure
Win32_WMISetting: Successful
Security Information: Successful
Win32_OperatingSystem: WMI: Provider load failure
The dialog is "frozen" and I cannot select
the "Security" tab at all.
This is despite the fact that I am running
as "Administrator" and I supposedly have
"Full Control" permission. I think it has to
do something with impersonating as "NETWORK_SERVICE"
bit I am not sure.
What shoud I do?
Any help would be greatly appreciated.
Thanks,
-James