Hi Will,

> Something about our default security configuration for Windows 2003 and
> Windows XP breaks WMI. What file system and registry ACLs are required for
> WMI's proper function?

You are asking the question back-to-front. You should KNOW the exact
changes made by your security policy and then be able to determine what
will be affected by them. Some quick checks you can do.

Log on to the Admin workstation with a Domain Admin account. Use
WBEMTEST to query a domain joined remote machine, if it fails try
disabling the firewall and try again, if it still fails, try right-click
"Computer" then "Manage", then "WMI Properties", make sure you can
access the properties, if you can't, go to the remote box and try
DCOMCNFG and make sure the computer properties are set to defaults

--
Gerry Hickman (London UK)