Share via

Authorize WMI users and set permissions

Applies To: Windows 7, Windows 8, Windows Server 2008 R2, Windows Server 2012

Procedures in this topic are slightly different in Windows Server 2012 and Windows 8. For information on new ways to do tasks in Windows Server 2012 and Windows 8, see Common Management Tasks and Navigation.

To authorize WMI users and set permissions

  1. Open the WMI Control console: Click Start , click Run , type wmimgmt.msc and then click OK .

  2. In the console tree, right-click WMI Control , and then click Properties .

  3. Click the Security tab.

  4. Select the namespace for which you want to give a user or group access, and then click Security .

  5. In the Security dialog box, click Add .

  6. In the Select Users, Computers, or Groups dialog box, enter the name of the object (user or group) that you want to add. Click Check Names to verify your entry and then click OK . You might have to change the location or click the Advanced button to query for objects. See the dialog box Help for more details.

  7. In the Security dialog box, under Permissions , select the permissions to allow or deny the new user or group:

Level Description

Execute Methods

Allows a user to execute WMI class methods.

Full Write

Allows full read, write, and delete access to all WMI objects, classes, and instances (dynamic and static).

Partial Write

Allows write access to static WMI objects.

Provider Write

Allows write access to dynamic WMI class instances.

Enable Account

Allows read access to WMI objects.

Remote Enable

Allows remote access to the namespace.

Read Security

Allows read-only access to security information.

Edit Security

Allows read and write access to security information.

Additional considerations

  • To perform this task on the local computer, you must be logged on as a member of the local Administrators group.

  • To perform this task on a remote computer, the account with which you are logged on must be a member of the Administrators group of that computer. To access a remote computer, right-click WMI Control , click Connect to another computer , click Another computer , and then type the name of the computer to which you want to connect. If you are using WMI Control from the Computer Management console, right-click Computer Management to connect to the other computer.

  • You can delete a user's or group's authorization to access WMI services by selecting that user or group and clicking Remove .

Additional references