Configuring Windows NT 4.0 to be audited using Microforge.net Enterprise Server

The default installation of Windows NT 4 does not include the WMI service. The following instructions explain how to obtain and install WMI on any machines that have the Windows NT 4.0 operating system installed, so that you can audit these using Enterprise Server 1.x.

1. Install WMI

Download and install WMI Core version 1.5 for Windows NT from the Microsoft web site.

2. Configure DCOM to allow remote connections.

Once you have installed WMI, you will also need to modify the security settings for DCOM to allow remote connections. This can be accomplished by using the DCOM configuration utility, as follows:

• Run dcomcnfg.exe (the default install path is “C:\WINDOWS\system\”)
• On the Default Properties tab, select Enable Distributed COM on this computer.
• Set Default Authentication Level to Connect.
• Set Default Impersonation Level to Impersonate.