How to enable WMI monitoring on Windows

by

First, set the local security policy

You’ll need to make sure the local security policy for network adapters is set to private, rather than public or not configured. The steps below describe how to set that policy against unidentified networks. But you should also check any other listed networks to avoid strange errors when configuring WinRM.

  1. From the start menu, open Control Panel.
  2. Select Administrative Tools.
  3. Click Local Security Policy.
  4. Click Network List Manager Policies.
  5. Right-click on Unidentified Networks. Select Properties.
  6. Change the location type from Not configured to Private.
  7. Click OK.
  8. Close the Local Security Policy window.
  9. Close the Administrative Tools window.
  10. Close the Control Panel window.

Next, configure WinRM

  1. If you’re not logged in as the local administrator, run a command prompt (cmd.exe) by right-clicking on the service and selecting Run as Administrator.
  2. Run the following command: winrm quickconfig
  3. Type Y to make the changes. If the configuration is successful, the output looks like this:WinRM has been updated for remote management.

    WinRM service type changed to delayed auto start.
    WinRM service started.
    Created a WinRM listener on HTTP://* to accept WS-Man requests to any IP on this machine.
  4. Test the WinRM configuration by running the following command: winrm identify -r:http://localhost:5985 -auth:noneIf the test is successful, you’ll see something like this:IdentifyResponse ProtocolVersion = http://schemas.dmtf.org/wbem/wsman/1/wsman.xsd ProductVendor = Microsoft Corporation ProductVersion = OS: 0.0.0 SP: 0.0 Stack: 3.

https://support.auvik.com/hc/en-us/articles/204610500-How-to-enable-WMI-monitoring-on-a-single-Windows-device