com - 连接到 WMI : 0x800706ba errors on some machines (but not all)

Question

当我尝试从 Powershell、ConfigMgr 或 WMI 资源管理器连接到 WMI 时，我可以与我的大多数计算机通信，但有些(可能是 30%？)返回 0x800706ba(RPC 服务器不可用)。

如果我关闭远程机器上的防火墙，查询就会开始工作。不过，我已经尝试了许多不同的防火墙设置配置，但我似乎无法弄清楚异常(exception)的正确组合是什么。

这是我在远程机器上的防火墙配置的相关部分。疯狂的部分是有不滴 pfirewall.log 中列出它不起作用时 - 但同样，如果我关闭远程计算机上的防火墙，一切都会开始运行。

我会照顾这个线程，因为我知道你可能需要更多的细节来诊断这个。

Domain profile configuration (current):
-------------------------------------------------------------------
Operational mode                  = Enable
Exception mode                    = Enable
Multicast/broadcast response mode = Enable
Notification mode                 = Enable

Service configuration for Domain profile:
Mode     Customized  Name
-------------------------------------------------------------------
Enable   No          Remote Desktop

Allowed programs configuration for Domain profile:
Mode     Name / Program
-------------------------------------------------------------------
Enable   Remote Assistance / C:\WINDOWS\system32\sessmgr.exe
Enable   Network Diagnostics for Windows XP / C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

Port configuration for Domain profile:
Port   Protocol  Mode     Name
-------------------------------------------------------------------
3389   TCP       Enable   Remote Desktop

Standard profile configuration:
-------------------------------------------------------------------
Operational mode                  = Enable
Exception mode                    = Enable
Multicast/broadcast response mode = Enable
Notification mode                 = Enable

Service configuration for Standard profile:
Mode     Customized  Name
-------------------------------------------------------------------
Enable   No          Remote Desktop

Allowed programs configuration for Standard profile:
Mode     Name / Program
-------------------------------------------------------------------
Enable   Remote Assistance / C:\WINDOWS\system32\sessmgr.exe
Enable   McAfee Framework Service / C:\Program Files\McAfee\Common Framework\FrameworkService.exe
Enable   Network Diagnostics for Windows XP / C:\WINDOWS\Network Diagnostic\xpnetdiag.exe

Port configuration for Standard profile:
Port   Protocol  Mode     Name
-------------------------------------------------------------------
3389   TCP       Enable   Remote Desktop

Log configuration:
-------------------------------------------------------------------
File location   = C:\WINDOWS\pfirewall.log
Max file size   = 4096 KB
Dropped packets = Disable
Connections     = Disable

Bluetooth Network Connection firewall configuration:
-------------------------------------------------------------------
Operational mode                  = Enable

Local Area Connection firewall configuration:
-------------------------------------------------------------------
Operational mode                  = Enable

Wireless Network Connection firewall configuration:
-------------------------------------------------------------------
Operational mode                  = Enable

1394 Connection firewall configuration:
-------------------------------------------------------------------
Operational mode                  = Enable

Answer 1

对此的一般修复是允许防火墙内置的“远程管理”异常(exception)。问题是 WMI 使用 RPC 端点映射器，因此涉及多个端口。 http://msdn.microsoft.com/en-us/library/aa389286(VS.85).aspx可能是关于该主题的最终讨论。