WMI Monitoring Prerequisites

WMI Monitoring Prerequisites

To enable WMI-based monitoring of Windows devices using Cloudmon, ensure the following prerequisites are met:

📍 Probe Requirements

  • The Cloudmon Probe must be installed on a Windows Server running version 2016 or later.
  • Ensure the following services are running on the Probe:
    • Remote Procedure Call (RPC)
    • Windows Management Instrumentation (WMI)
    • Windows Remote Management (WinRM)
  • ✅ Allow inbound firewall access for port 135 and ports 49152–65535 (required for WMI communication over RPC/DCOM).

📍 Target Device Requirements

  • Create a dedicated domain (e.g., cloudmon.local) and join all devices to this domain.
  • Use a common domain credential with administrative privileges for monitoring.

🔹 Benefits: Centralized access, no per-device credential setup, easy onboarding of new devices.

  • Ensure the following services are running on all target devices:
    • Remote Procedure Call (RPC)
    • Windows Management Instrumentation (WMI)
    • Windows Remote Management (WinRM)
  • ✅ Allow inbound firewall access on each device for port 135 and ports 49152–65535 (required for WMI communication over RPC/DCOM).

🔐 Permissions & Access Control

  • WMI-based monitoring requires appropriate administrative or delegated permissions on target Windows systems.
  • It is recommended to use a Domain Administrator account, or a dedicated domain service account added to the Local Administrators group on monitored machines.
  • For limited (non-administrative) access, ensure the account has:
    • WMI/DCOM permissions
    • Membership in Performance Log Users
    • Membership in Distributed COM Users
    • Membership in Event Log Readers (required only if event log monitoring is enabled)