Commit Error: Need to Config WMI Account and Password for Querying Microsoft Directory Servers. Commit Failed

The following error is encountered when trying to commit:

VSYS1

  Error: Need to config WMI account and password for querying Microsoft directory servers

Commit failed

• PaloAlto Firewalls
  • User-id environment 

• Commit errors

Enter the WMI account information and commit the changes:

1. Go to Device > User Identification > User Mapping
2. Click the icon next to Palo Alto Networks User-ID Agent Setup
3. Select WMI Authentication, as shown below:
   
4. Specify the WMI account and password here.
   This is a user account that exists on the user's domain that has the ability to read the security logs from domain controllers on the user's network.
5. Commit to apply the changes.

This will allow a successful connection to the server, as shown below:

Additional WMI configuration can also be found on the “Device > user identification > User mapping > Server monitoring > User identification monitored server > Transport protocol” section of the config, pls see screenshot below for reference

If still experiencing incorrect permissions, refer to the following documents as the user needs to have permissions to have access to the WMI API on Windows:

• Agentless User-ID 'access denied' Error in Server Monitor
• How to Configure Agentless User-ID

owner: jlala