IBM License Metric Tool (ILMT)

 View Only

 Question about local groups on BigFix/ILMT server

Fernanda Ortiz's profile image
Fernanda Ortiz posted Thu May 22, 2025 01:50 PM

Hi IBM-team,

While reviewing the configuration of the server where BigFix and ILMT are installed, I noticed that the following local groups are currently enabled. I’d like to confirm whether any of them are specifically required by BigFix or ILMT, or if they can be safely removed:

Local groups:

  • WSS_ADMIN_WPG

  • Help Library Updates

  • WinRMRemoteWMIUsers__

  • WSS_WPG

From what I understand, the group WinRMRemoteWMIUsers__ is typically used to allow remote WMI access, which may be needed for VM Manager connections in environments using Hyper-V.

However, in this case we are using VMware ESXi as the VM Manager, so I would assume this group is not necessary and can be disabled — is that correct?

Thanks in advance for your input!

Oktawian Powązka's profile image
Oktawian Powązka posted Fri May 23, 2025 04:17 AM

Hello,


They can be safely removed.
Indeed, WinRMRemoteWMIUsers__ is used for Hyper-V connections but on the remote side.
Meaning access to that group is checked on a machine where Hyper-V service is being located not ILMT box.

Fernanda Ortiz's profile image
Fernanda Ortiz posted Fri May 23, 2025 10:54 AM

Hi,

Thanks for confirming the WinRMRemoteWMIUsers__ group.

My question is regarding all four of the following groups — whether any of them are specifically required by BigFix or ILMT, or if they can be safely removed without affecting their functionality:

  • WSS_ADMIN_WPG

  • Help Library Updates

  • WSS_WPG

Thanks in advance for your help.

Oktawian Powązka's profile image
Oktawian Powązka posted Fri May 23, 2025 12:21 PM

All four groups can be safely removed.

Related Content