How to troubleshoot a remote wmi query/access failure?

Posted by Roman on Server Fault See other posts from Server Fault or by Roman
Published on 2010-03-31T13:56:25Z Indexed on 2010/03/31 14:03 UTC
Read the original article Hit count: 567

Hi

I'm using Powershell to query a remote computer in a domain for a wmi object, eg: "gwmi -computer test -class win32_bios". I get this error message:

Value does not fall within the expected range

Executing the query local under the same user works fine. It seems to happen on both windows 2003 and also 2008 systems.

The user that runs the shell has admin rights on the local and remote server. I checked wmi and dcom permissions as far as I know how to do this, they seem to be the same on a server where it works, and another where it does not. I think it is not a network issue, all ports are open that are needed, and it also happens within the same subnet. When sniffing the traffic we see the following errors:

RPC: c/o Alter Cont Resp: Call=0x2 Assoc Grp=0x4E4E Xmit=0x16D0 Recv=0x16D0 Warning: GssAPIMechanism is not found, either caused by not reassembled, conversation off or filtering.

And an errormessage from Kerberos:

Kerberos: KRB_ERROR - KDC_ERR_BADOPTION (13)

The option code in the packet is 0x40830000

Any idea what I should look into?

© Server Fault or respective owner

Related posts about wmi

Related posts about powershell