WMICollector Data Collector

The WMICollector Data Collector identifies data for certain types of WMI classes and namespaces. The WMICollector Data Collector is a core component of Enterprise Auditor, but the Windows Solution has preconfigured it. While the data collector is available with all Enterprise Auditor license options, the Windows Solution is only available with a special Enterprise Auditor license. See the Windows Solution topic for additional information.

Protocols

• RPC
• WMI

Ports

• TCP 135-139
• Randomly allocated high TCP ports

Permissions

• Member of the Local Administrators group

WMICollector Query Configuration

You configure the WMICollector Data Collector through the WMI Browser wizard, which contains the following wizard pages:

• Welcome
• WMICollector: Sample Host
• WMICollector: Classes
• WMICollector: Properties
• WMICollector: Summary (Results)

The Welcome page can be hidden by selecting the Don't display this page the next time checkbox when the wizard is open and configuration settings are saved.