Windows Server 2003 WMI Problem...
From: Andrew Hendrie (anonymous_at_discussions.microsoft.com)
Date: 08/31/04
- Next message: soneill: "app. pop up"
- Previous message: Spin: "UDDI"
- Messages sorted by: [ date ] [ thread ]
Date: Tue, 31 Aug 2004 05:38:58 -0700
Hi, I administer a SBS2003 server. Its only 3 months old
with SP1 out the box, and is a clean install with only NAV
Small Biz Edition and IBM Director added, along with all
current updates.
On Sat at 1.08am it crashed corrupting the AD database.
Eventlogs stated that this must be restored from backup,
and after several hours of attempts to repair the database
I restored it using NTBackup (restore system state).
After researching the logs it seems that the NAV server
scan caused the reboot (after starting at 1.00am) which I
have now disabled for the minute while I address the issue
I have, which appears to be the WMI system. The restore
worked fine with this one exception.
Symptoms of the problem are as follows:
- SBS not longer has any info in its daily report. It
reports as follows: No Performance data is available at
this time. Performance data is collected hourly. That's
the only text in the report apart from the email headers.
- WMI send and email as follows:
CBISBS has reported a Error. Reported status is:
Queues - Unknown
Drives - Unknown
Services - Error
Memory - Unknown
CPU - Unknown
This always happens just after Account Lockout (Event
ID: 539) occurs.
- The backup runs and backs up all the files, but reports
the following failure error in the Backup Log:
spIEnumWbemClassObject->Next failed. (0x80041024)
The success or failure of this backup could not be
confirmed. Ensure the Windows Management Instrumentation
service is started and try to backup again.
GetResultFromEvents failed. (0x80041024)
NTBackup finished the backup with errors.
When I try to access the WMI Control under Comp Mgmt, Serv
and Apps I get this error on the General Tab:
Win32_Processor: WMI: Provider is not capable of the
attempted operation.
Win32_WMISetting: Successful
Security information: Successul
Win32_OperatingSystem: WMI: Provider is not capable of
the attempted operation.
And in the event log I get every 5 mins:
Event ID 9099: The MAD Monitoring thread was unable to
read the state of the services, error '0x80041010'.
And:
Event ID 1095: Windows could not log all the RSOP
(Resultant Set of Policy) Data. Group Policy processing
will continue but the RSOP data might not be accurate.
So I'm thinking that I have to reinstall, re-register or
reconfigure the WMI system, but after lots of searching I
can't find anything I'm confident to try. This is a live
server so I don't want to do anything until I'm sure the
server won't suffer any further crashes or damage. Can
anyone help who knows how to sort the WMI system in a safe
manner? Thanks,
Andy.
- Next message: soneill: "app. pop up"
- Previous message: Spin: "UDDI"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|