WMI Async callback and Active Directory

Question

Hi,

Could you please help me? I faced a problem with event registration in Power Shell. I'm trying to register event by WQL to know if VM state has been changes (Power On/Off). I tried to run that script from Windows based computer that isn't registered in any domain. When I tried it to connect to Hyper-V server that isn't in domain it worked fine but if I try to do same thing and connect to Hyper-V server in AD domain I can see than sync queries work fine but I can't see any events from server.

Thanks.

Answer 1

Dear TT Firm,

This behavior is likely related to security and authentication boundaries between the non-domain client and the domain-joined server. While sync queries can succeed over DCOM or WMI with basic authentication, event subscriptions often require persistent callbacks, which are blocked or unsupported across domain boundaries without proper trust or configuration.

1. Run the script from a domain-joined machine For event registration to work reliably, the client should ideally be part of the same domain as the Hyper-V server.
2. Use alternate authentication methods If joining the domain isn’t possible, consider using CredSSP or Kerberos delegation, though these require careful configuration and may not be supported in all environments.
3. Check firewall and DCOM settings Ensure that the domain-joined server allows remote event subscriptions and that necessary ports (e.g., TCP 135 for DCOM) are open.
4. Consider using CIM sessions PowerShell’s New-CimSession with WSMan protocol may offer better compatibility across domains, especially when using HTTPS and certificate-based authentication.

If this guidance proves helpful, feel free to click “Accept Answer” so we know we’re heading in the right direction 😊. And of course, I’m here if you need further clarification or support.

Warm regards,

Domic Vo.