Microsoft KB Archive/298928

= XADM: Error Message: Setup Was Unable to Set Permissions on the WMI Namespace =

Article ID: 298928

Article Last Modified on 2/27/2007

-

APPLIES TO


 * Microsoft Exchange 2000 Server Standard Edition

-



This article was previously published under Q298928



SYMPTOMS
If you install Exchange 2000 Server Service Pack 1 (SP1), you may receive the following error message:

Setup was unable to set permissions on the WMI Namespace



CAUSE
Exchange 2000 Setup grants the Everyone group &quot;Read All Properties&quot; permission for the Exchange Organization object in Active Directory; this permission is inherited down to the Server object. The System attendant (MAD) then stamps the server permissions on the CIMV2 and Exchange WMI namespaces, so that anyone with rights to read the server object has rights to monitor that server remotely.

When you install Exchange 2000 SP1, this behavior is modified so that only objects with &quot;Write All Properties&quot; permission on the server object are able to remotely monitor the server. The Exchange 2000 SP1 update first removes all of the explicit permissions on the WMI namespaces, and then when the System attendant starts, it stamps the correct permissions on the namespaces.

This issue can occur if the Exchange 2000 SP1 update program cannot update the permissions for some reason; if this occurs, the error message in the &quot;Symptoms&quot; section of this article is displayed during Setup. This gives the administrator the opportunity to manually change the permissions in the WMI namespaces after the Exchange 2000 SP1 update is complete.



RESOLUTION
To resolve this issue, manually update the WMI namespace permissions on the Exchange 2000 server:  Click Start, click Run, and then type the following command in the Open box:

wmimgmt.msc

Click OK. In the Windows Management Control Microsoft Management Console (MMC), right-click WMI Control(Local), and then click Properties. Click the Security tab. Click to expand Root, click CIMV2, and then click Security. Click the Everyone group, and if the Remote Enable check box is selected, click to clear the Remote Enable check box. Click the Authenticated Users group, and if the Remote Enable check box is selected, click to clear the Remote Enable check box.</li> Click OK to close the Security dialog box.</li> Click to expand CIMV2, click to expand Applications, click Exchange, and then click Security.</li> Click the Everyone group, and if the Remote Enable check box is selected, click to clear the Remote Enable check box.</li> Click the Authenticated Users group, and if the Remote Enable check box is selected, click to clear the Remote Enable check box.</li></ol>

<div class="workaround_section">

WORKAROUND
To work around this issue, if the WMI service was disabled when the error message was displayed during Exchange 2000 SP1 Setup, enable the WMI service by setting it to Automatic or Manual, and then run Exchange 2000 SP1 Update.exe again.

<div class="moreinformation_section">

MORE INFORMATION
The CIMV2 namespace allows methods to be run so that you can perform file operations on the local computer, provided that you are granted these permissions on the file system.

Additional query words: exch2kp2w

Keywords: kberrmsg kbprb KB298928

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.