topic Re: Question about VMI and error found in General Topics

Question about VMI and error found

hectormontesdeoca — Fri, 08 Nov 2019 22:17:49 GMT

Hi everybody!

I have a question about this mistake obtained in a PA, I have 1 device 850 but i tried to implement a user-mapping.

But the issue is the PA lose connection of my servers (I have 5 servers LDAP) Lose connection random of my servers, I have tried to follow the next Kbs but i still have the issue

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLW6CAO&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

And i have tried to disable the "enable probing" but it is disaled

This is the mistake showed in PA logs

id_win_get_error_status (pan_user_id_win.c: 1055): WMIC message from server XXXXXX: NTSTATUS: NT code 0x80041003 - NT code 0x80041003

Anybody have any idea?

Re: Question about VMI and error found

S.Cantwell — Sat, 09 Nov 2019 14:26:36 GMT

That sounds like a Microsoft error (in my opinion) especially with the messages such as NT code 0x80041003

I did a search on NT code 0x80041003 and this is what I found.

check_wmi_plus WMI/local Permissions

WMI permissions to check Windows Firewall status

https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/event-10-wmi-and-error-0x80041003-events-cannot-be/b8fbf862-5d8d-41ee-a891-33515bf52c97

I think you have a permission issue with MS, and not a PANW FW firewall issue.

Re: Question about VMI and error found

hectormontesdeoca — Wed, 20 Nov 2019 14:34:49 GMT

Thanks!!

I will test with my LDAP servers your comments!!

I'll share my experience about that