Question about VMI and error found

[hectormontesdeoca]

Hi everybody!

I have a question about this mistake obtained in a PA, I have 1 device 850 but i tried to implement a user-mapping.

But the issue is the PA lose connection of my servers (I have 5 servers LDAP) Lose connection random of my servers, I have tried to follow the next Kbs but i still have the issue

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000PLW6CAO&refURL=http%3A%2F%...

And i have tried to disable the "enable probing" but it is disaled

This is the mistake showed in PA logs

id_win_get_error_status (pan_user_id_win.c: 1055): WMIC message from server XXXXXX: NTSTATUS: NT code 0x80041003 - NT code 0x80041003

Anybody have any idea?

[S.Cantwell]

That sounds like a Microsoft error (in my opinion) especially with the messages such as NT code 0x80041003

I did a search on NT code 0x80041003 and this is what I found.

check_wmi_plus WMI/local Permissions

WMI permissions to check Windows Firewall status

https://answers.microsoft.com/en-us/windows/forum/windows_7-performance/event-10-wmi-and-error-0x800...

I think you have a permission issue with MS, and not a PANW FW firewall issue.

[hectormontesdeoca]

Thanks!!

I will test with my LDAP servers your comments!!

I'll share my experience about that