Problem
In Powershell after executing the following command ...
Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerName srv02.second.nl
... the following exception is thrown ...
Get-WmiObject : A security package specific error occurred. (Exception from HRESULT: 0x80070721)
At line:1 char:1
+ Get-WmiObject Win32_ComputerSystem -Credential second.nl\administrator -ComputerNa ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
+ CategoryInfo : InvalidOperation: (:) [Get-WmiObject], COMException
+ FullyQualifiedErrorId : GetWMICOMException,Microsoft.PowerShell.Commands.GetWmiObjectCommand
Scenario
- Server srv01 in AD domain first.nl
- Server srv02 in AD domain second.nl
When srv01 executes the command mentioned earlier. It results in the exception 80070721.
Workaround
Appending the DNS suffix (second.nl used by srv02) in the Advanced TCP/IP Settings on svr01 resolves this problem.
Question(s)
- Why does the WMI query work when appending the DNS suffix second.nl to srv01?
Local Computer Policy
->Windows Settings
->Security Settings
->Local Policies
->Security Options
, and then ensure theNetwork security: LAN Manager authentication level
is set toSend NTLMv2 response only
. If that works, let me know and I'll post as an answer with the source I found it.mp01.publiek.lan
see if that's what it is set to.