Configure Account Access for Passing WMI

The appropriate Windows users or groups must be configured to allow access to the following WMI namespaces:

  • root\cimv2. Allows for discovery of any windows device using WMI.
  • root\virtualization\v2. Allows for discovery of Hyper-V host (2012 server, 2012 R2 server, and Windows 8).
  • \root\default. Allows for discovery of any additional registry information available.

Align Host OS for Hyper-V/WMI Firewall Rules

The following firewall exceptions must be created:

  • Port 135 must be opened for data collection using WMI.
  • TCP/UDP traffic must be allowed on ports 1024-65535 or monitored objects using WMI will not be accessible.

WMI communications use a random port between 1024 and 65535 per Microsoft Windows specifications. The actual port used is determined by the remote machine. The port number range is based on the operating system being queried. The administrator can reduce or increase the range in most Windows operating systems.

Check Order of Credentials in the Discovery Scan

WhatsUp Gold attempts discovery using Windows credentials in priority order. The first credential used that is allowed any WMI access is selected. However, if that credential does not have access to each of the required namespaces discussed previously, Windows is successfully detected, but other device details which require additional namespace access fail. The result is the target device is discovered as a Windows device, but is not recognized as a Hyper-V Host.

Note: Procedures for configuring conditions for successful Hyper-V device discover may vary depending on core versus full installation as well as the operating system on which the configuration is being performed.