To provide necessary permissions for a particular low-privilege user to connect remotely Via WMI and query the remote machine.
To provide necessary permissions for a particular low-privilege user to connect remotely Via WMI and query the remote machine follow the following steps:
If the user account that is on Computer A is not an administrator on Computer B, the user must be given DCOM Remote Launch and Remote Activation privileges on Computer B by running Dcomcnfg.exe at the command prompt. The 0x80070005 error occurs when this privilege is not set.
To grant DCOM remote launch and activation permissions for a user or group go to the remote computer and do the following:
Allowing Users Access to a Specific WMI Namespace
You can allow or disallow user's access to a specific WMI namespace by setting the "Remote Enable" permission in the WMI Control for a namespace. If a user tries to connect to a namespace they are not allowed access to, they will receive error 0x80041003. By default, this permission is enabled only for administrators. An administrator can enable remote access to specific WMI namespaces for a non-administrator user.
The following procedure sets remote enable permissions for a non-administrator user on a remote computer.
To set remote enable permissions