ためしてみた - 鬱なエンジニア

DCOMエラーは無くなってる　(イベントビューア上は）
~~が。。winmgmtの警告はやはりのこってる~~
あとevent id 63　のWinmgmtは再起動で消える
初期設定の警告みたいだが　きもちわるい

あとプリンタドライバが新しくなった

以下設定は明日やろう

WMIDIAGの結果は以下

18216 00:46:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18217 00:46:40 (0) ** WMI service DCOM setup: ............................................................................................. OK.
18218 00:46:40 (2) !! WARNING: WMI DCOM components registration is missing for the following EXE/DLLs: .................................... 1 WARNING(S)!
18219 00:46:40 (0) ** - C:\WINDOWS\SYSTEM32\WBEM\WBEMPROX.DLL (\CLSID\{A1044801-8F7E-11D1-9E7C-00C04FC324A8}\InProcServer32)
18220 00:46:40 (0) ** => WMI System components are not properly registered as COM objects, which could make WMI to
18221 00:46:40 (0) ** fail depending on the operation requested.
18222 00:46:40 (0) ** => For a .DLL, you can correct the DCOM configuration by executing the 'REGSVR32.EXE ' command.
18223 00:46:40 (0) **
18224 00:46:40 (0) ** WMI ProgID registrations: ........................................................................................... OK.
18225 00:46:40 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
18226 00:46:40 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
18227 00:46:40 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
18228 00:46:40 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
18229 00:46:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18230 00:46:40 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18231 00:46:40 (1) !! ERROR: Default trustee 'BUILTIN\ADMINISTRATORS' has been REMOVED!
18232 00:46:40 (0) ** - REMOVED ACE:
18233 00:46:40 (0) ** ACEType: &h0
18234 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18235 00:46:40 (0) ** ACEFlags: &h0
18236 00:46:40 (0) ** ACEMask: &h1
18237 00:46:40 (0) ** DCOM_RIGHT_EXECUTE
18238 00:46:40 (0) **
18239 00:46:40 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18240 00:46:40 (0) ** Removing default security will cause some operations to fail!
18241 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18242 00:46:40 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
18243 00:46:40 (0) **
18244 00:46:40 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18245 00:46:40 (1) !! ERROR: Default trustee 'NT AUTHORITY\INTERACTIVE' has been REMOVED!
18246 00:46:40 (0) ** - REMOVED ACE:
18247 00:46:40 (0) ** ACEType: &h0
18248 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18249 00:46:40 (0) ** ACEFlags: &h0
18250 00:46:40 (0) ** ACEMask: &h1
18251 00:46:40 (0) ** DCOM_RIGHT_EXECUTE
18252 00:46:40 (0) **
18253 00:46:40 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18254 00:46:40 (0) ** Removing default security will cause some operations to fail!
18255 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18256 00:46:40 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
18257 00:46:40 (0) **
18258 00:46:40 (0) ** DCOM security for 'Microsoft WBEM UnSecured Apartment' (Launch & Activation Permissions): ........................... MODIFIED.
18259 00:46:40 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED!
18260 00:46:40 (0) ** - REMOVED ACE:
18261 00:46:40 (0) ** ACEType: &h0
18262 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18263 00:46:40 (0) ** ACEFlags: &h0
18264 00:46:40 (0) ** ACEMask: &h1
18265 00:46:40 (0) ** DCOM_RIGHT_EXECUTE
18266 00:46:40 (0) **
18267 00:46:40 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18268 00:46:40 (0) ** Removing default security will cause some operations to fail!
18269 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18270 00:46:40 (0) ** For DCOM objects, this can be done with 'DCOMCNFG.EXE'.
18271 00:46:40 (0) **
18272 00:46:40 (0) ** WMI namespace security for 'ROOT/SERVICEMODEL': ..................................................................... MODIFIED.
18273 00:46:40 (1) !! ERROR: Actual trustee 'NT AUTHORITY\NETWORK SERVICE' DOES NOT match corresponding expected trustee rights (Actual->Default)
18274 00:46:40 (0) ** - ACTUAL ACE:
18275 00:46:40 (0) ** ACEType: &h0
18276 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18277 00:46:40 (0) ** ACEFlags: &h2
18278 00:46:40 (0) ** CONTAINER_INHERIT_ACE
18279 00:46:40 (0) ** ACEMask: &h1
18280 00:46:40 (0) ** WBEM_ENABLE
18281 00:46:40 (0) ** - EXPECTED ACE:
18282 00:46:40 (0) ** ACEType: &h0
18283 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18284 00:46:40 (0) ** ACEFlags: &h12
18285 00:46:40 (0) ** CONTAINER_INHERIT_ACE
18286 00:46:40 (0) ** INHERITED_ACE
18287 00:46:40 (0) ** ACEMask: &h13
18288 00:46:40 (0) ** WBEM_ENABLE
18289 00:46:40 (0) ** WBEM_METHOD_EXECUTE
18290 00:46:40 (0) ** WBEM_WRITE_PROVIDER
18291 00:46:40 (0) **
18292 00:46:40 (0) ** => The actual ACE has the right(s) '&h12 WBEM_METHOD_EXECUTE WBEM_WRITE_PROVIDER' removed!
18293 00:46:40 (0) ** This will cause some operations to fail!
18294 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the removed right.
18295 00:46:40 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18296 00:46:40 (0) ** Note: WMIDiag has no specific knowledge of this WMI namespace.
18297 00:46:40 (0) ** The security diagnostic is based on the WMI namespace expected defaults.
18298 00:46:40 (0) ** A specific WMI application can always require a security setup different
18299 00:46:40 (0) ** than the WMI security defaults.
18300 00:46:40 (0) **
18301 00:46:40 (0) ** WMI namespace security for 'ROOT/SERVICEMODEL': ..................................................................... MODIFIED.
18302 00:46:40 (1) !! ERROR: Actual trustee 'NT AUTHORITY\LOCAL SERVICE' DOES NOT match corresponding expected trustee rights (Actual->Default)
18303 00:46:40 (0) ** - ACTUAL ACE:
18304 00:46:40 (0) ** ACEType: &h0
18305 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18306 00:46:40 (0) ** ACEFlags: &h2
18307 00:46:40 (0) ** CONTAINER_INHERIT_ACE
18308 00:46:40 (0) ** ACEMask: &h1
18309 00:46:40 (0) ** WBEM_ENABLE
18310 00:46:40 (0) ** - EXPECTED ACE:
18311 00:46:40 (0) ** ACEType: &h0
18312 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18313 00:46:40 (0) ** ACEFlags: &h12
18314 00:46:40 (0) ** CONTAINER_INHERIT_ACE
18315 00:46:40 (0) ** INHERITED_ACE
18316 00:46:40 (0) ** ACEMask: &h13
18317 00:46:40 (0) ** WBEM_ENABLE
18318 00:46:40 (0) ** WBEM_METHOD_EXECUTE
18319 00:46:40 (0) ** WBEM_WRITE_PROVIDER
18320 00:46:40 (0) **
18321 00:46:40 (0) ** => The actual ACE has the right(s) '&h12 WBEM_METHOD_EXECUTE WBEM_WRITE_PROVIDER' removed!
18322 00:46:40 (0) ** This will cause some operations to fail!
18323 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the removed right.
18324 00:46:40 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18325 00:46:40 (0) ** Note: WMIDiag has no specific knowledge of this WMI namespace.
18326 00:46:40 (0) ** The security diagnostic is based on the WMI namespace expected defaults.
18327 00:46:40 (0) ** A specific WMI application can always require a security setup different
18328 00:46:40 (0) ** than the WMI security defaults.
18329 00:46:40 (0) **
18330 00:46:40 (0) ** WMI namespace security for 'ROOT/SERVICEMODEL': ..................................................................... MODIFIED.
18331 00:46:40 (1) !! ERROR: Default trustee 'EVERYONE' has been REMOVED!
18332 00:46:40 (0) ** - REMOVED ACE:
18333 00:46:40 (0) ** ACEType: &h0
18334 00:46:40 (0) ** ACCESS_ALLOWED_ACE_TYPE
18335 00:46:40 (0) ** ACEFlags: &h12
18336 00:46:40 (0) ** CONTAINER_INHERIT_ACE
18337 00:46:40 (0) ** INHERITED_ACE
18338 00:46:40 (0) ** ACEMask: &h13
18339 00:46:40 (0) ** WBEM_ENABLE
18340 00:46:40 (0) ** WBEM_METHOD_EXECUTE
18341 00:46:40 (0) ** WBEM_WRITE_PROVIDER
18342 00:46:40 (0) **
18343 00:46:40 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18344 00:46:40 (0) ** Removing default security will cause some operations to fail!
18345 00:46:40 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18346 00:46:40 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18347 00:46:40 (0) ** Note: WMIDiag has no specific knowledge of this WMI namespace.
18348 00:46:40 (0) ** The security diagnostic is based on the WMI namespace expected defaults.
18349 00:46:40 (0) ** A specific WMI application can always require a security setup different
18350 00:46:40 (0) ** than the WMI security defaults.
18351 00:46:40 (0) **
18352 00:46:40 (0) **
18353 00:46:40 (0) ** DCOM security warning(s) detected: .................................................................................. 0.
18354 00:46:40 (0) ** DCOM security error(s) detected: .................................................................................... 3.
18355 00:46:40 (0) ** WMI security warning(s) detected: ................................................................................... 0.
18356 00:46:40 (0) ** WMI security error(s) detected: ..................................................................................... 3.
18357 00:46:40 (0) **
18358 00:46:40 (1) !! ERROR: Overall DCOM security status: ................................................................................ ERROR!
18359 00:46:40 (1) !! ERROR: Overall WMI security status: ................................................................................. ERROR!
18360 00:46:40 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
18361 00:46:40 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
18362 00:46:40 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name="Microsoft WMI Updating Consumer Scenario Control".
18363 00:46:40 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
18364 00:46:40 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".
18365 00:46:40 (0) ** 'select * from MSFT_SCMEventLogEvent'
18366 00:46:40 (0) **
18367 00:46:40 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
18368 00:46:40 (0) ** WMI ADAP status: .................................................................................................... OK.
18369 00:46:40 (0) ** INFO: WMI namespace(s) requiring PACKET PRIVACY: .................................................................... 1 NAMESPACE(S)!
18370 00:46:40 (0) ** - ROOT/SERVICEMODEL.
18371 00:46:40 (0) ** => When remotely connecting, the namespace(s) listed require(s) the WMI client to
18372 00:46:40 (0) ** use an encrypted connection by specifying the PACKET PRIVACY authentication level.
18373 00:46:40 (0) ** (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
18374 00:46:40 (0) ** i.e. 'WMIC.EXE /NODE:"MARIA" /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\SERVICEMODEL Class __SystemSecurity'
18375 00:46:40 (0) **

しかし来週あたりに次のbuildでそうだなこのペースだと。。

あーそうそう　管理者共有(IPC$)とかそこらへんも復活してるし
TCPIP.SYSも新しくなってるみたいなんで　パッチあてないと以下略な人は注意