Windows 10 WMI and Event Viewer access denied

Solution 1:

have you tried the following:

  • Checked a local wmi query to make sure there is not corruptions or anything from the local side?
  • Checked with procmon to see if there are any access denied messages on the remote machine or on the initiator side machine?
  • Make sure with gpresult or rsop that all the gpos you are using to set the permissions actually apply.

In general i haven't seen this problem in our environment, but it sounds like a local corruption in wmi or a permissions that aren't set on the client side.

shachaf