Hi,
I am using SQL Server 2014 Express and try to get WMI information with my monitoring software (called PRTG). When creating this "sensor" in PRTG, it tries to determine the name of the SQL instance. As long as the user used by this action is not member of the local administrators on the target sql server, this fails.
In detail:
SQL server 2014 express is running the standard instance called SQLEXPRESS. There are various small databases. Some users work on this, so in generell access from the outside is no problem.
Using the performance monitor I can see the appropriate values of this instance. The WMI management security is setup with the permissions (on root element with sub) for a special windows domain-account-group, in where only one user account is in. This user account is used by the monitoring software "PRTG" to access the sql server. I can also get various other, non-sql-related information over WMI in PRTG, everything is fine.
When creating a new PRTG-sensor (this is an item that tracks a specific information) of type SQL server 2014, it tries to detect the name of the sql server instance, as it would also be able to do this with non-express. This fails, the name cannot be detected. When I put the user account into the sql servers local administrator group, the detection runs perfectly. But of course I do not want to have a monitoring having admin rights for this task. Same also when using a WMI tester software doing the WQL (see below) with a admin accound and the monitoring account.
The support for PRTG gets me this information about what happens during instance detection:
"The sensor must be allowed to access the namespace **root\Microsoft\SqlServer\ComputerManagement12** . It then performs this WQL statement:
{{{ SELECT ServiceName,DisplayName FROM SQLService WHERE SQLServiceType = 1 }}} "
So my question is what permissions might need to be set to get a result on this WQL without putting the monitoring user account into local administrators. Any idea is appreciated ... thanks a lot !!
Best regards
Dominic
I am using SQL Server 2014 Express and try to get WMI information with my monitoring software (called PRTG). When creating this "sensor" in PRTG, it tries to determine the name of the SQL instance. As long as the user used by this action is not member of the local administrators on the target sql server, this fails.
In detail:
SQL server 2014 express is running the standard instance called SQLEXPRESS. There are various small databases. Some users work on this, so in generell access from the outside is no problem.
Using the performance monitor I can see the appropriate values of this instance. The WMI management security is setup with the permissions (on root element with sub) for a special windows domain-account-group, in where only one user account is in. This user account is used by the monitoring software "PRTG" to access the sql server. I can also get various other, non-sql-related information over WMI in PRTG, everything is fine.
When creating a new PRTG-sensor (this is an item that tracks a specific information) of type SQL server 2014, it tries to detect the name of the sql server instance, as it would also be able to do this with non-express. This fails, the name cannot be detected. When I put the user account into the sql servers local administrator group, the detection runs perfectly. But of course I do not want to have a monitoring having admin rights for this task. Same also when using a WMI tester software doing the WQL (see below) with a admin accound and the monitoring account.
The support for PRTG gets me this information about what happens during instance detection:
"The sensor must be allowed to access the namespace **root\Microsoft\SqlServer\ComputerManagement12** . It then performs this WQL statement:
{{{ SELECT ServiceName,DisplayName FROM SQLService WHERE SQLServiceType = 1 }}} "
So my question is what permissions might need to be set to get a result on this WQL without putting the monitoring user account into local administrators. Any idea is appreciated ... thanks a lot !!
Best regards
Dominic