Error: Need to Config WMI Account and Password for Querying Microsoft Directory Servers. Commit Failed""

Issue

The following error is encountered when trying to commit:

VSYS1

  Error: Need to config WMI account and password for querying Microsoft directory servers

Commit failed

Resolution

Enter the WMI account information and commit the changes:

1. Go to Device > User Identification > User Mapping
2. Click the icon next to Palo Alto Networks User-ID Agent Setup
3. Select WMI Authentication, as shown below:
   
4. Specify the WMI account and password here.
   This is a user account that exists on the user's domain that has the ability to read the security logs from domain controllers on the user's network.
5. Commit to apply the changes.

This will allow a successful connection to the server, as shown below:

If still experiencing incorrect permissions, refer to the following documents as the user needs to have permissions to have access to the WMI API on Windows:

• Agentless User-ID 'access denied' Error in Server Monitor
• How to Configure Agentless User-ID

owner: bsyeda