I’ve run into quite a few unknowns and it’s always a pain in the butt to manually troubleshoot using these steps outlined here:
http://community.spiceworks.com/help/Resolving_Unknown_Devices
can you write a standalone app or script that can be run from the spiceworks server (if it’s integrated into spiceworks, can you make it accessible on Remote Office setups too, this is where I run into it most often)?
Ideally the script would ask for the remote computer name then check in the order that spiceworks inventories a system:
For example:
Is firewall OK? Yes
Is WMI OK? Yes
Is DCOM OK? Yes
etc…
This way we’ll know what aspect needs to addressed.
5 Spice ups
cernig
(Gregg C)
2
I believe someone already wrote a script that can be run locally on the offending machine’s. It wouldn’t really make alot of sense to do this over the network becuase if WMIC isn’t enabled or the firewall is blocking the ports then you wont be able to tell/change anything.
kso
(HankRearden)
3
I ran this script (both manually and via logon script) and it didn’t do the trick.
What I was hoping for was something that would test each of these things from the spiceworks server and report back…
Testing firewall: firewall OK
testing WMI: WMI OK
testing DCOM: DCOM failed… try this
this way I’ll know exactly what the issue is with each system I test for and can begin troubleshooting from there. Cause now that this script didn’t work either I am at square 1 and need to manually test each of these. A quick server based script would get me a much better starting point
cernig
(Gregg C)
5
I use three things to prep a machine for spiceworks,
i use this command
from my machine to see if wmic will respond
wmic
/user:username /password:yourpassword /node:“remotemachine” systemenclosure get serialnumber
Dcom enable script that I downloaded from another spiceworks user
EnableDCOM.vbs (1.1 KB)
cernig
(Gregg C)
6
Also turn off force Guest access, file included below
And Finally in a cmd window I copy and paste the following three lines to open up just enough ports on my network to allow spiceworks.
(change the scope as needed to match your network skeme)
NETSH.EXE FIREWALL SET SERVICE REMOTEADMIN ENABLE CUSTOM 192.168.0.0/255.255.0.0
NETSH.EXE FIREWALL SET ALLOWEDPROGRAM %SYSTEMROOT%\SYSTEM32\WBEM\UNSECAPP.EXE WMICALLBACKS ENABLE CUSTOM 192.168.0.0/255.255.0.0
netsh firewall add portopening protocol = ALL port = 135 name = RPC/DCOM mode = ENABLE scope = CUSTOM addresses = 192.168.0.0/255.255.0.0
TurnOffForceGuest.reg (254 Bytes)
cernig
(Gregg C)
7
Other then ever dell machine I have needing to have WMIC installesd still, appently it doesn’t come installed by default or one of Micro$oft’s patches disabled it allong the way, but I find that typing wmic in a command window always gets me the following result.
“Please wait while WMIC is being installed.”
still playing with it, but i updated the script to include more and be able run as a logon script
swss_updated.bat (2.45 KB)
cernig
(Gregg C)
9
in your bat file you refer to "cscript “\server\shrapps\dcomfix.vbs”
whats that one doing for ya?
that’s the enableDCOM that you posted above, just calling it from the batch file (since i added this stuff to a logon script)
timlucas
(Tim with IT)
11
I’ve been using the original swss.bat file with lots of success. I actually remove the shutdown -i command so that I can run it manually remotely while people are using it. I normally copy it to their hard drive then run it using psexec from pstools.
psexec \machinename cmd.exe
There are times that they still won’t update without the restart, but often it does.
Many thanks to whoever came up with that script…just wish it didn’t take so long to add all of those ports.
I trimmed the ports from 1024 to 1035… should be all you need according to:
http://community.spiceworks.com/education/projects/Windows_Firewall