C / C++ / MFC

    HRESULT hres;

    // Step 1: --------------------------------------------------
    // Initialize COM. ------------------------------------------

    hres =  CoInitializeEx(0, COINIT_MULTITHREADED); 
    if (FAILED(hres))
    {
        TRACE("Failed to initialize COM library. Error code = %ld",hres); 
        return;                  // Program has failed.
    }

    // Step 2: --------------------------------------------------
    // Set general COM security levels --------------------------
    // Note: If you are using Windows 2000, you need to specify -
    // the default authentication credentials for a user by using
    // a SOLE_AUTHENTICATION_LIST structure in the pAuthList ----
    // parameter of CoInitializeSecurity ------------------------


	if(S_OK!= CoInitializeSecurity(NULL, -1, NULL, NULL, RPC_C_AUTHN_LEVEL_CONNECT, RPC_C_IMP_LEVEL_IDENTIFY, NULL, EOAC_NONE, 0) )
	{
		TRACE("Failed to initialize security. Error code = %ld\n",hres); 
		CoUninitialize();
		return;                    // Program has failed.
	}				
			
    
    // Step 3: ---------------------------------------------------
    // Obtain the initial locator to WMI -------------------------

    IWbemLocator *pLoc = NULL;

    hres = CoCreateInstance(
        CLSID_WbemLocator,             
        0, 
        CLSCTX_INPROC_SERVER, 
        IID_IWbemLocator, (LPVOID *) &pLoc);
 
    if (FAILED(hres))
    {
        TRACE("Failed to create IWbemLocator object.Err code = %ld\n",hres);
		CoUninitialize();
        return;                 // Program has failed.
    }

    // Step 4: -----------------------------------------------------
    // Connect to WMI through the IWbemLocator::ConnectServer method

    IWbemServices *pSvc = NULL; 

	hres = pLoc->ConnectServer(
        _bstr_t(L"\\\\192.168.0.2\\ROOT\\CIMV2"),//computer name, DNS name or IP address
        _bstr_t("administrator"),                 // User name
        _bstr_t("2007"),                  // User password
        NULL,//_bstr_t(L"MS_409"),               // Locale             
        NULL,/*WBEM_FLAG_CONNECT_USE_MAX_WAIT, */                            // Security flags
        NULL,/*_bstr_t(L"ntlmdomain:TIPRAY.com"),*/   // Authority
        0,                                // Context object 
        &pSvc                             // IWbemServices proxy
        );

    if (FAILED(hres))
    {
        TRACE("Could not connect. Error code = %ld\n",hres); 
        pLoc->Release();     
        CoUninitialize();
        return;                // Program has failed.
    }

    TRACE("Connected to ROOT\\CIMV2 WMI namespace\n");

    // Step 5: --------------------------------------------------
    // Set security levels on a WMI connection ------------------

    hres = CoSetProxyBlanket(
       pSvc,                        // Indicates the proxy to set
       RPC_C_AUTHN_WINNT,           // RPC_C_AUTHN_xxx
       RPC_C_AUTHZ_NONE,            // RPC_C_AUTHZ_xxx
       NULL,                        // Server principal name 
       RPC_C_AUTHN_LEVEL_CALL,      // RPC_C_AUTHN_LEVEL_xxx 
       RPC_C_IMP_LEVEL_IMPERSONATE, // RPC_C_IMP_LEVEL_xxx
       NULL,                        // client identity
       EOAC_NONE                    // proxy capabilities 
    );

    if (FAILED(hres))
    {
        TRACE("Could not set proxy blanket. Error code = %ld\n",hres);
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return;               // Program has failed.
    }

	// Step 6: --------------------------------------------------
    // Use the IWbemServices pointer to make requests of WMI ----
	
    // set up to call the Win32_Process::Create method
    BSTR MethodName = SysAllocString(L"Create");
    BSTR ClassName = SysAllocString(L"Win32_Process");
	
    IWbemClassObject* pClass = NULL;
[color=#FF0000]    hres = pSvc->GetObject(ClassName, 0, NULL, &pClass, NULL);[/color]//<<========================在这边失败
	
	if (FAILED(hres))
    {
        TRACE("Could not GetObject. Error code = %ld\n",hres);
        SysFreeString(ClassName);
        SysFreeString(MethodName);
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return;               // Program has failed.
    }

    IWbemClassObject* pInParamsDefinition = NULL;
    hres = pClass->GetMethod(MethodName, 0, &pInParamsDefinition, NULL);
	
    IWbemClassObject* pClassInstance = NULL;
    hres = pInParamsDefinition->SpawnInstance(0, &pClassInstance);
	
    // Create the values for the in parameters
    VARIANT varCommand;
    varCommand.vt = VT_BSTR;
    varCommand.bstrVal = L"\\\\192.168.2.2\\Setup\\IntraView.exe";
	
    // Store the value for the in parameters
    hres = pClassInstance->Put(L"CommandLine", 0,
        &varCommand, 0);
	
	if (FAILED(hres))
    {
        TRACE("Could not put. Error code = %ld\n",hres);
        SysFreeString(ClassName);
        SysFreeString(MethodName);
        pClass->Release();
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return;               // Program has failed.
    }


    // Execute Method
    IWbemClassObject* pOutParams = NULL;
    hres = pSvc->ExecMethod(ClassName, MethodName, 0,NULL, pClassInstance, &pOutParams, NULL);
	
    if (FAILED(hres))
    {
        TRACE("Could not execute method. Error code = %ld\n",hres);
        SysFreeString(ClassName);
        SysFreeString(MethodName);
        pClass->Release();
        pInParamsDefinition->Release();
        pOutParams->Release();
        pSvc->Release();
        pLoc->Release();     
        CoUninitialize();
        return;               // Program has failed.
    }

    // Cleanup
    // ========

    SysFreeString(ClassName);
    SysFreeString(MethodName);
    pClass->Release();
    pInParamsDefinition->Release();
    pOutParams->Release();
    pLoc->Release();
    pSvc->Release();
    CoUninitialize();