What is the workaround for WMI remote connection failure with Access Denied error when client runs with Local System account?
http://msdn.microsoft.com/en-us/library/aa826699(v=vs.85).aspx
refer to above link.
solution: To solve the problem, UAC filtering for local accounts must be disabled by creating the following DWORD registry entry and setting its value to 1:
[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System] LocalAccountTokenFilterPolicy
reason: "In a workgroup, the account connecting to the remote computer is a local user on that computer. Even if the account is in the Administrators group, UAC filtering means that a script runs as a standard user"
When you get an Access is denied. [0x00000005]
error, apply the following patch to the registry:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System
- create or modify 32-bit DWORD:
LocalAccountTokenFilterPolicy
- set the value to: 1
Windows Server 2012 (64bit) To connect to Windows Server 2012, Change Permission for following registry key to Full Control:
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID{72C24DD5-D70A-438B-8A42-98424B88AFB8}
-
HKEY_CLASSES_ROOT\CLSID{76A64158-CB41-11D1-8B02-00600806D9B6}
- Launch
regedit
(as Administrator) - Find (Ctrl+F) the following registry key:
{72C24DD5-D70A-438B-8A42-98424B88AFB8}
inHKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\
- Right click and select 'Permissions'
- Change owner to administrators group (Advanced...).
- Change permissions for administrators group. Grant Full Control.
- Change owner back to TrustedInstaller (user is
NT Service\TrustedInstaller
on local machine) - Repeat the steps 1-6 for
HKEY_CLASSES_ROOT\CLSID{76A64158-CB41-11D1-8B02-00600806D9B6}
- Restart Remote Registry Service (Administrative Tools / Services) If the service is not starting (both from Jenkins or manually), check that you have the .NET Framework 3.5 SP1 installed.
- Launch
Follow these steps if you encounter errors during the installation of the Framework: https://stackoverflow.com/questions/14192244/offline-installer-for-net-3-5-sp1-not-working