Invoke-Command and Access to a CIM resource was not available

Posted by

A customer asked me the other day of creating a DFSN folder from a remote PowerShell session, but they were faced with the issue

Access to a CIM resource was not available to the client.
+ CategoryInfo          : PermissionDenied: (MSFT_DfsNamespaceFolder:Root\Microsoft\…NamespaceFolder) [New-DfsnFolder
], CimException
+ FullyQualifiedErrorId : MI RESULT 2,New-DfsnFolder
+ PSComputerName        : COMPUTERNAME

Basically this is due to the permissions problem, cause the invoke-command is not possible to run elevated.

Solution? It could possibly be solved with delegating permission in the WMI namespace, I did not manage this and didn’t have time to troubleshoot any deeper. Another way to solve this is to install the DFS management tools on the remote machine, in this case this was not possible.

So I choose the path of creating a scheduled task on the remote machine

This code did not work

$session = New-PSSession -ComputerName “Server1” -ThrottleLimit 4
Invoke-Command -Command {
New-DfsnFolder -Path “\\subdomain.domain.local\Public\Test” -TargetPath \\Server1\Test
} -Session $session

This is what I ended up with, comments in-line

$session = New-PSSession -ComputerName “Server1” -ThrottleLimit 4
Invoke-Command -Command {#Create the scheduled task, note the –RunLevel Highest, to make sure the command is run eleveted
$stAction = New-ScheduledTaskAction -Execute “PowerShell.exe” -Argument “-Command `”& { New-DfsnFolder -Path `”\\subdomain.domain.local\Public\Test`” -TargetPath `”\\Server1\Test`”; }`””
$task = Register-ScheduledTask -TaskName “Create DFSN folder” -Action $stAction -User “Domain\DFSAdmin” -Password “ComplexPassword” -RunLevel Highest –Force
# Start the scheduled task
Start-ScheduledTask -InputObject $task
# Wait for the task to be ready
sleep -Seconds 10
$task = Get-ScheduledTask -TaskPath $task.TaskPath -TaskName $task.TaskName
while ($task.State -ne “Ready”)
Write-Host “Waiting”
sleep -Seconds 5
$task = Get-ScheduledTask -TaskPath $task.TaskPath -TaskName $task.TaskName
Write-Host “Ready to delete the Scheduled Task”
$taskInfo = Get-ScheduledTaskInfo -InputObject $task
Write-Host “Status from the task. LastRunTime: $($taskInfo.LastRuntime) LastTaskResult: $($taskInfo.LastTaskResult)”
# Remove the scheduled task
Unregister-ScheduledTask -InputObject $task -Confirm:$false

} -Session $session

Now it runs successfully!

Leave a comment

Fill in your details below or click an icon to log in: Logo

You are commenting using your account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

This site uses Akismet to reduce spam. Learn how your comment data is processed.