This how-to is for monitoring Windows hosts using WMI through NSClient++. For agentless monitoring of Windows hosts please see this how-to: Agentless Monitoring of Windows using WMI
IntroductionUsing op5 Monitor in combination with Windows Management Instrumentation (WMI) system administrators can query, change, and monitor configuration settings on desktops and servers in their IT environment. In this how-to we will add a service looking for accounts that are enabled in Windows and have their password set to never expire. The monitoring is made by using check_nrpe with the agent NSClient++ using CheckWMI. More information about WMI classes: http://msdn.microsoft.com/en-us/library/aa394084%28v=VS.85%29.aspx
PrerequisitesBefore we can start monitoring Windows servers using WMI we need to make sure NSClient++ is installed and configured to allow arguments.
Configuring NSClient++When we are making changes to the NSClient++ configuration we shall make them in the file called: custom.ini It is found in the colder where NSClient++ is installed on the host. To configure NSClient++,
- Open up custom.ini in Notepad
- Add the following lines to custom.ini[NRPE]
- Restart the NSClient++ service
Adding a check_command to op5 MonitorNow we will add a new check_command to op5 Monitor. This check_command will let you set a few arguments when adding a new service later on. To add check_command to op5 Monitor:
- Open up Configure in op5 Monitor
- Click "Commands"
- Add a new check_command with the following settings
|command_line||$USER1$/opt/plugins/check_nrpe -H $HOSTADDRESS$ -p 5666 -c CheckWMI -a truncate=100 CheckWMI MaxCrit=$ARG2$ MaxWarn=$ARG1$ "Query:badUsers=Select Name, PasswordExpires, Disabled from Win32_UserAccount" "columnSyntax=%Name%" "columnSeparator= , " +filter-numeric:PasswordExpires==0 +filter-numeric:Disabled==0|
$ARG1$: Warning level $ARG2$: Critical level
Adding a service to op5 MonitorTo add a new service to op5 Monitor:
- Open up the host you like to monitor and chose "Add new service".
- Set at least the following options:
Option Value service_description WMI: Enabled accounts with passwords that never expires check_command check_WMI_nopasswordexpiry check_command_args 1!2
- Click "Apply" and then "Save".