SNMP Security Greyed Out

I'm hoping to get some help here on an (i think) issue with the security
within SNMP

We are starting to place all out servers into Insight Manager. Alot of the
servers when we go onto configuring SNMP have everything greyed out within
the Security tab. Nothing is entered in this tab, and there is also no
option to modify anything

I have uninstalled agents, uninstalled/reinstalled SNMP added the community
names into the following reg key
HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities ,
rebooted etc but still I'm unable to add the required community name into the
Security and get the communications working.

I have a feeling this maybe something simple that i am missing but i just
don't seem to be able to find it, can anyone help me out?

Hello,

check your GPO, one may enforce the snmp settings.

Going through GPO to set it on all servers is an interesting way

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Adam D" <Adam (E-Mail Removed)> wrote in message
news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
> I'm hoping to get some help here on an (i think) issue with the security
> within SNMP
>
> We are starting to place all out servers into Insight Manager. Alot of
> the
> servers when we go onto configuring SNMP have everything greyed out within
> the Security tab. Nothing is entered in this tab, and there is also no
> option to modify anything
>
> I have uninstalled agents, uninstalled/reinstalled SNMP added the
> community
> names into the following reg key
> HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities ,
> rebooted etc but still I'm unable to add the required community name into
> the
> Security and get the communications working.
>
> I have a feeling this maybe something simple that i am missing but i just
> don't seem to be able to find it, can anyone help me out?

Thanks for your reply Mathieu.

Yes already checked for GPO settings, and some of the machines are in a
Workgroup, so unfortunately this doesn't apply.

If all machines were in AD then i would apply a GPO to all machines.

"Mathieu CHATEAU" wrote:

> Hello,
>
> check your GPO, one may enforce the snmp settings.
>
> Going through GPO to set it on all servers is an interesting way
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "Adam D" <Adam (E-Mail Removed)> wrote in message
> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
> > I'm hoping to get some help here on an (i think) issue with the security
> > within SNMP
> >
> > We are starting to place all out servers into Insight Manager. Alot of
> > the
> > servers when we go onto configuring SNMP have everything greyed out within
> > the Security tab. Nothing is entered in this tab, and there is also no
> > option to modify anything
> >
> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
> > community
> > names into the following reg key
> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities ,
> > rebooted etc but still I'm unable to add the required community name into
> > the
> > Security and get the communications working.
> >
> > I have a feeling this maybe something simple that i am missing but i just
> > don't seem to be able to find it, can anyone help me out?
>
>

Even in workgroup, you can use (local) GPO !
Check for them through gpedit.msc directly on the server.



--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Adam D" <(E-Mail Removed)> wrote in message
news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
> Thanks for your reply Mathieu.
>
> Yes already checked for GPO settings, and some of the machines are in a
> Workgroup, so unfortunately this doesn't apply.
>
> If all machines were in AD then i would apply a GPO to all machines.
>
> "Mathieu CHATEAU" wrote:
>
>> Hello,
>>
>> check your GPO, one may enforce the snmp settings.
>>
>> Going through GPO to set it on all servers is an interesting way
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> English blog: http://lordoftheping.blogspot.com
>> French blog: http://www.lotp.fr
>>
>>
>> "Adam D" <Adam (E-Mail Removed)> wrote in message
>> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
>> > I'm hoping to get some help here on an (i think) issue with the
>> > security
>> > within SNMP
>> >
>> > We are starting to place all out servers into Insight Manager. Alot of
>> > the
>> > servers when we go onto configuring SNMP have everything greyed out
>> > within
>> > the Security tab. Nothing is entered in this tab, and there is also no
>> > option to modify anything
>> >
>> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
>> > community
>> > names into the following reg key
>> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
>> > ,
>> > rebooted etc but still I'm unable to add the required community name
>> > into
>> > the
>> > Security and get the communications working.
>> >
>> > I have a feeling this maybe something simple that i am missing but i
>> > just
>> > don't seem to be able to find it, can anyone help me out?
>>
>>

Sorry i understand now that my reply wasn't clear.

It isn't a GPO, niether local or through AD...

"Mathieu CHATEAU" wrote:

> Even in workgroup, you can use (local) GPO !
> Check for them through gpedit.msc directly on the server.
>
>
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "Adam D" <(E-Mail Removed)> wrote in message
> news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
> > Thanks for your reply Mathieu.
> >
> > Yes already checked for GPO settings, and some of the machines are in a
> > Workgroup, so unfortunately this doesn't apply.
> >
> > If all machines were in AD then i would apply a GPO to all machines.
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Hello,
> >>
> >> check your GPO, one may enforce the snmp settings.
> >>
> >> Going through GPO to set it on all servers is an interesting way
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> English blog: http://lordoftheping.blogspot.com
> >> French blog: http://www.lotp.fr
> >>
> >>
> >> "Adam D" <Adam (E-Mail Removed)> wrote in message
> >> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
> >> > I'm hoping to get some help here on an (i think) issue with the
> >> > security
> >> > within SNMP
> >> >
> >> > We are starting to place all out servers into Insight Manager. Alot of
> >> > the
> >> > servers when we go onto configuring SNMP have everything greyed out
> >> > within
> >> > the Security tab. Nothing is entered in this tab, and there is also no
> >> > option to modify anything
> >> >
> >> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
> >> > community
> >> > names into the following reg key
> >> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
> >> > ,
> >> > rebooted etc but still I'm unable to add the required community name
> >> > into
> >> > the
> >> > Security and get the communications working.
> >> >
> >> > I have a feeling this maybe something simple that i am missing but i
> >> > just
> >> > don't seem to be able to find it, can anyone help me out?
> >>
> >>
>
>

Can you check permissions on:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SNMP

Administrators have full control by default

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Adam D" <(E-Mail Removed)> wrote in message
news:0EC4136E-6A09-4E55-86B8-(E-Mail Removed)...
> Sorry i understand now that my reply wasn't clear.
>
> It isn't a GPO, niether local or through AD...
>
> "Mathieu CHATEAU" wrote:
>
>> Even in workgroup, you can use (local) GPO !
>> Check for them through gpedit.msc directly on the server.
>>
>>
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> English blog: http://lordoftheping.blogspot.com
>> French blog: http://www.lotp.fr
>>
>>
>> "Adam D" <(E-Mail Removed)> wrote in message
>> news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
>> > Thanks for your reply Mathieu.
>> >
>> > Yes already checked for GPO settings, and some of the machines are in a
>> > Workgroup, so unfortunately this doesn't apply.
>> >
>> > If all machines were in AD then i would apply a GPO to all machines.
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Hello,
>> >>
>> >> check your GPO, one may enforce the snmp settings.
>> >>
>> >> Going through GPO to set it on all servers is an interesting way
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> English blog: http://lordoftheping.blogspot.com
>> >> French blog: http://www.lotp.fr
>> >>
>> >>
>> >> "Adam D" <Adam (E-Mail Removed)> wrote in message
>> >> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
>> >> > I'm hoping to get some help here on an (i think) issue with the
>> >> > security
>> >> > within SNMP
>> >> >
>> >> > We are starting to place all out servers into Insight Manager. Alot
>> >> > of
>> >> > the
>> >> > servers when we go onto configuring SNMP have everything greyed out
>> >> > within
>> >> > the Security tab. Nothing is entered in this tab, and there is also
>> >> > no
>> >> > option to modify anything
>> >> >
>> >> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
>> >> > community
>> >> > names into the following reg key
>> >> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
>> >> > ,
>> >> > rebooted etc but still I'm unable to add the required community name
>> >> > into
>> >> > the
>> >> > Security and get the communications working.
>> >> >
>> >> > I have a feeling this maybe something simple that i am missing but i
>> >> > just
>> >> > don't seem to be able to find it, can anyone help me out?
>> >>
>> >>
>>
>>

Yes i have checked and Administrators do have full control.

I modified the registry keys and the communities do still not appear. If I
didn't have full control I wouldn't have been able to make the registry
modifications would I?

"Mathieu CHATEAU" wrote:

> Can you check permissions on:
> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SNMP
>
> Administrators have full control by default
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "Adam D" <(E-Mail Removed)> wrote in message
> news:0EC4136E-6A09-4E55-86B8-(E-Mail Removed)...
> > Sorry i understand now that my reply wasn't clear.
> >
> > It isn't a GPO, niether local or through AD...
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Even in workgroup, you can use (local) GPO !
> >> Check for them through gpedit.msc directly on the server.
> >>
> >>
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> English blog: http://lordoftheping.blogspot.com
> >> French blog: http://www.lotp.fr
> >>
> >>
> >> "Adam D" <(E-Mail Removed)> wrote in message
> >> news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
> >> > Thanks for your reply Mathieu.
> >> >
> >> > Yes already checked for GPO settings, and some of the machines are in a
> >> > Workgroup, so unfortunately this doesn't apply.
> >> >
> >> > If all machines were in AD then i would apply a GPO to all machines.
> >> >
> >> > "Mathieu CHATEAU" wrote:
> >> >
> >> >> Hello,
> >> >>
> >> >> check your GPO, one may enforce the snmp settings.
> >> >>
> >> >> Going through GPO to set it on all servers is an interesting way
> >> >>
> >> >> --
> >> >> Cordialement,
> >> >> Mathieu CHATEAU
> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> French blog: http://www.lotp.fr
> >> >>
> >> >>
> >> >> "Adam D" <Adam (E-Mail Removed)> wrote in message
> >> >> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
> >> >> > I'm hoping to get some help here on an (i think) issue with the
> >> >> > security
> >> >> > within SNMP
> >> >> >
> >> >> > We are starting to place all out servers into Insight Manager. Alot
> >> >> > of
> >> >> > the
> >> >> > servers when we go onto configuring SNMP have everything greyed out
> >> >> > within
> >> >> > the Security tab. Nothing is entered in this tab, and there is also
> >> >> > no
> >> >> > option to modify anything
> >> >> >
> >> >> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
> >> >> > community
> >> >> > names into the following reg key
> >> >> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
> >> >> > ,
> >> >> > rebooted etc but still I'm unable to add the required community name
> >> >> > into
> >> >> > the
> >> >> > Security and get the communications working.
> >> >> >
> >> >> > I have a feeling this maybe something simple that i am missing but i
> >> >> > just
> >> >> > don't seem to be able to find it, can anyone help me out?
> >> >>
> >> >>
> >>
> >>
>
>

can you make a rsop.msc to be damned sure there isn't a tricky GPO
somewhere... ?

--
Cordialement,
Mathieu CHATEAU
English blog: http://lordoftheping.blogspot.com
French blog: http://www.lotp.fr


"Adam D" <(E-Mail Removed)> wrote in message
news:9DB97026-EB43-42D0-B28B-(E-Mail Removed)...
> Yes i have checked and Administrators do have full control.
>
> I modified the registry keys and the communities do still not appear. If
> I
> didn't have full control I wouldn't have been able to make the registry
> modifications would I?
>
> "Mathieu CHATEAU" wrote:
>
>> Can you check permissions on:
>> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SNMP
>>
>> Administrators have full control by default
>>
>> --
>> Cordialement,
>> Mathieu CHATEAU
>> English blog: http://lordoftheping.blogspot.com
>> French blog: http://www.lotp.fr
>>
>>
>> "Adam D" <(E-Mail Removed)> wrote in message
>> news:0EC4136E-6A09-4E55-86B8-(E-Mail Removed)...
>> > Sorry i understand now that my reply wasn't clear.
>> >
>> > It isn't a GPO, niether local or through AD...
>> >
>> > "Mathieu CHATEAU" wrote:
>> >
>> >> Even in workgroup, you can use (local) GPO !
>> >> Check for them through gpedit.msc directly on the server.
>> >>
>> >>
>> >>
>> >> --
>> >> Cordialement,
>> >> Mathieu CHATEAU
>> >> English blog: http://lordoftheping.blogspot.com
>> >> French blog: http://www.lotp.fr
>> >>
>> >>
>> >> "Adam D" <(E-Mail Removed)> wrote in message
>> >> news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
>> >> > Thanks for your reply Mathieu.
>> >> >
>> >> > Yes already checked for GPO settings, and some of the machines are
>> >> > in a
>> >> > Workgroup, so unfortunately this doesn't apply.
>> >> >
>> >> > If all machines were in AD then i would apply a GPO to all machines.
>> >> >
>> >> > "Mathieu CHATEAU" wrote:
>> >> >
>> >> >> Hello,
>> >> >>
>> >> >> check your GPO, one may enforce the snmp settings.
>> >> >>
>> >> >> Going through GPO to set it on all servers is an interesting way
>> >> >>
>> >> >> --
>> >> >> Cordialement,
>> >> >> Mathieu CHATEAU
>> >> >> English blog: http://lordoftheping.blogspot.com
>> >> >> French blog: http://www.lotp.fr
>> >> >>
>> >> >>
>> >> >> "Adam D" <Adam (E-Mail Removed)> wrote in message
>> >> >> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
>> >> >> > I'm hoping to get some help here on an (i think) issue with the
>> >> >> > security
>> >> >> > within SNMP
>> >> >> >
>> >> >> > We are starting to place all out servers into Insight Manager.
>> >> >> > Alot
>> >> >> > of
>> >> >> > the
>> >> >> > servers when we go onto configuring SNMP have everything greyed
>> >> >> > out
>> >> >> > within
>> >> >> > the Security tab. Nothing is entered in this tab, and there is
>> >> >> > also
>> >> >> > no
>> >> >> > option to modify anything
>> >> >> >
>> >> >> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
>> >> >> > community
>> >> >> > names into the following reg key
>> >> >> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
>> >> >> > ,
>> >> >> > rebooted etc but still I'm unable to add the required community
>> >> >> > name
>> >> >> > into
>> >> >> > the
>> >> >> > Security and get the communications working.
>> >> >> >
>> >> >> > I have a feeling this maybe something simple that i am missing
>> >> >> > but i
>> >> >> > just
>> >> >> > don't seem to be able to find it, can anyone help me out?
>> >> >>
>> >> >>
>> >>
>> >>
>>
>>

Sorry for the delay in reply. Did that also, I can confirm 100% there is no
policy!

"Mathieu CHATEAU" wrote:

> can you make a rsop.msc to be damned sure there isn't a tricky GPO
> somewhere... ?
>
> --
> Cordialement,
> Mathieu CHATEAU
> English blog: http://lordoftheping.blogspot.com
> French blog: http://www.lotp.fr
>
>
> "Adam D" <(E-Mail Removed)> wrote in message
> news:9DB97026-EB43-42D0-B28B-(E-Mail Removed)...
> > Yes i have checked and Administrators do have full control.
> >
> > I modified the registry keys and the communities do still not appear. If
> > I
> > didn't have full control I wouldn't have been able to make the registry
> > modifications would I?
> >
> > "Mathieu CHATEAU" wrote:
> >
> >> Can you check permissions on:
> >> HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\SNMP
> >>
> >> Administrators have full control by default
> >>
> >> --
> >> Cordialement,
> >> Mathieu CHATEAU
> >> English blog: http://lordoftheping.blogspot.com
> >> French blog: http://www.lotp.fr
> >>
> >>
> >> "Adam D" <(E-Mail Removed)> wrote in message
> >> news:0EC4136E-6A09-4E55-86B8-(E-Mail Removed)...
> >> > Sorry i understand now that my reply wasn't clear.
> >> >
> >> > It isn't a GPO, niether local or through AD...
> >> >
> >> > "Mathieu CHATEAU" wrote:
> >> >
> >> >> Even in workgroup, you can use (local) GPO !
> >> >> Check for them through gpedit.msc directly on the server.
> >> >>
> >> >>
> >> >>
> >> >> --
> >> >> Cordialement,
> >> >> Mathieu CHATEAU
> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> French blog: http://www.lotp.fr
> >> >>
> >> >>
> >> >> "Adam D" <(E-Mail Removed)> wrote in message
> >> >> news:8271D5F4-7020-4455-B334-(E-Mail Removed)...
> >> >> > Thanks for your reply Mathieu.
> >> >> >
> >> >> > Yes already checked for GPO settings, and some of the machines are
> >> >> > in a
> >> >> > Workgroup, so unfortunately this doesn't apply.
> >> >> >
> >> >> > If all machines were in AD then i would apply a GPO to all machines.
> >> >> >
> >> >> > "Mathieu CHATEAU" wrote:
> >> >> >
> >> >> >> Hello,
> >> >> >>
> >> >> >> check your GPO, one may enforce the snmp settings.
> >> >> >>
> >> >> >> Going through GPO to set it on all servers is an interesting way
> >> >> >>
> >> >> >> --
> >> >> >> Cordialement,
> >> >> >> Mathieu CHATEAU
> >> >> >> English blog: http://lordoftheping.blogspot.com
> >> >> >> French blog: http://www.lotp.fr
> >> >> >>
> >> >> >>
> >> >> >> "Adam D" <Adam (E-Mail Removed)> wrote in message
> >> >> >> news:BBE54C91-E597-4B70-BAD7-(E-Mail Removed)...
> >> >> >> > I'm hoping to get some help here on an (i think) issue with the
> >> >> >> > security
> >> >> >> > within SNMP
> >> >> >> >
> >> >> >> > We are starting to place all out servers into Insight Manager.
> >> >> >> > Alot
> >> >> >> > of
> >> >> >> > the
> >> >> >> > servers when we go onto configuring SNMP have everything greyed
> >> >> >> > out
> >> >> >> > within
> >> >> >> > the Security tab. Nothing is entered in this tab, and there is
> >> >> >> > also
> >> >> >> > no
> >> >> >> > option to modify anything
> >> >> >> >
> >> >> >> > I have uninstalled agents, uninstalled/reinstalled SNMP added the
> >> >> >> > community
> >> >> >> > names into the following reg key
> >> >> >> > HKLM\SYSTEM\CurrentControlSet\Services\SNMP\Parame ters\ValidCommunities
> >> >> >> > ,
> >> >> >> > rebooted etc but still I'm unable to add the required community
> >> >> >> > name
> >> >> >> > into
> >> >> >> > the
> >> >> >> > Security and get the communications working.
> >> >> >> >
> >> >> >> > I have a feeling this maybe something simple that i am missing
> >> >> >> > but i
> >> >> >> > just
> >> >> >> > don't seem to be able to find it, can anyone help me out?
> >> >> >>
> >> >> >>
> >> >>
> >> >>
> >>
> >>
>
>