VMware VCENTER APPLICATION DISCOVERY MANAGER 6.1.1 User Manual page 42

ADM User's Guide
To enable DCOM for a host running Windows XP or Windows 2003
1 Log in to the host as admin user (either a local administrator or a domain administrator).
2 Click Start menu, select Run and type DCOMCNFG. Component Services window appears.
3 From the Console Root left pane, select Component Services > Computers > My Computer.
4 Right‐click My Computer, and then click Properties. My Computer Properties window appears.
5 Select COM Security tab.
N In Windows 2000, the DCOM management console is simpler. So skip Step 3 and Step
OTE
6 Under Launch and Activation Permissions, click Edit Limits. Launch Permission window appears.
7 If the domain user (DOMAINUSER in this example) is not present in the Groups or user names list, Click
Add, to add the domain user.
8 Select the user you added from the Groups or user names list.
9 From the Permissions for Administrators list, select Remote Launch and Remote Activation.
10 Clear all other checkboxes and click OK to return to the My Computer Properties window.
11 Click Apply to save your changes and click OK.
Setting WMI Privileges
After WMI requests pass through the DCOM communication layer, Windows runs another authorization
check, for specific user permissions at the level of the WMI service. Therefore, to allow the domain user to run
WMI queries, the WMI service needs to be configured for every managed host. This is done either locally on
that host or remotely.
To configure WMI access on the managed hosts
1 If you are configuring a remote machine, use a domain administrative account. A local administrative
account will not work.
2 Log in as admin user (either local or remote administrator) to the target host.
3 Click Start menu, select Run and type wmimgmt.msc. The Windows Management Infrastructure (WMI)
window appears.
4 Right‐click WMI Control (Local) in the left pane and click Properties. WMI Control (Local) Properties
window appears.
N If you are configuring remote settings for WMI privileges, right‐click WMI Control (Local) and
OTE
select Connect to another computer. Type the name of the remote host and click OK. From this point,
configuration changes will be applied to the selected host instead of the local host.
5 Click Security tab and navigate to Root > Security. Security for Root window appears.
N By selecting the Security option in Root, you are allowing WMI queries to all available WMI
OTE
providers. In case Root cannot be used, CIMV2 should be used; this option is not recommended. Giving
the ADM user security permissions to Root provides little to no risk that queries will be nonintrusive.
6 Click Add. The Select Users or Groups window appears.
7 Type the user name in the following format:
Domain name\user name
For example, MYDOMAIN\DOMAINUSER
N Type the user name of the user who will be performing the Detail Discovery.
OTE
42
4.
VMware, Inc.