Service Account Configuration - WMI

Question

I'm trying to enable read all my domain servers/workstation WMI record by using one service accounts and another software that will be my dashboard for showing all record/logs.

I have created a service accounts and tried to add it as a domain admin security group in order to have access to my domain resources to bring WMI records and logs. However, this is not a good practice and expose security issues. I want to know if there is another way to assign this service account the WMI required permission instead of giving it domain admin permissions? How can I accomplish this task?

Answer 1

Hi @Abdulrahman

You can follow this link to grant WMI permission for your service account:

Setting WMI access through Active Directory and Group Policy Object for non-admin user

You can also add the service account in local administrators group on target machines using group policy :

Computer Configuration -> Policies -> Windows Settings -> Security Settings -> Restricted Groups

Or Group Policy Preference: Manage Local Active Directory Groups using Group Policy Preferences

Please don't forget to mark helpful answer as accepted