Unable to access the Win32_NTLogEvent class system or application data remotely from WMI

四點壹木 1 Reputation point
2020-05-18T05:59:48.297+00:00

WMI remote access Win32_NTLogEvent class administrator user administrator can access normally. Switch to other users and set DCOM permission connection and namespace permission. At present, WMI remote access to Win32_NTLogEvent class logfile is security, which can return data normally. When logfile is system or application, it cannot return data. What's the reason? And solutions? Thank you
8452-wmi-win32-ntlogevent-application.png

8453-wmi-win32-ntlogevent-system.png

8384-wmi-win32-ntlogevent-application.png

8299-wmi-win32-ntlogevent-security.png

Not Monitored
Not Monitored
Tag not monitored by Microsoft.
23,777 questions
No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Fay Wang - MSFT 5,121 Reputation points
    2020-05-19T09:01:11.23+00:00

    Hello,

    Welcome to Microsoft Q&A!

    Currently, your issue about WMI is not supported right now. But you could go to this forum to ask this issue.

    Thanks.