Windows Server 2003 WMI Problem...

From: Andrew Hendrie (anonymous_at_discussions.microsoft.com)
Date: 08/31/04


Date: Tue, 31 Aug 2004 05:38:58 -0700

Hi, I administer a SBS2003 server. Its only 3 months old
with SP1 out the box, and is a clean install with only NAV
Small Biz Edition and IBM Director added, along with all
current updates.

On Sat at 1.08am it crashed corrupting the AD database.
Eventlogs stated that this must be restored from backup,
and after several hours of attempts to repair the database
I restored it using NTBackup (restore system state).

After researching the logs it seems that the NAV server
scan caused the reboot (after starting at 1.00am) which I
have now disabled for the minute while I address the issue
I have, which appears to be the WMI system. The restore
worked fine with this one exception.

Symptoms of the problem are as follows:
- SBS not longer has any info in its daily report. It
reports as follows: No Performance data is available at
this time. Performance data is collected hourly. That's
the only text in the report apart from the email headers.

- WMI send and email as follows:
    CBISBS has reported a Error. Reported status is:
    Queues - Unknown
    Drives - Unknown
    Services - Error
    Memory - Unknown
    CPU - Unknown
  This always happens just after Account Lockout (Event
ID: 539) occurs.

- The backup runs and backs up all the files, but reports
the following failure error in the Backup Log:
    spIEnumWbemClassObject->Next failed. (0x80041024)
    The success or failure of this backup could not be
confirmed. Ensure the Windows Management Instrumentation
service is started and try to backup again.
    GetResultFromEvents failed. (0x80041024)
    NTBackup finished the backup with errors.

When I try to access the WMI Control under Comp Mgmt, Serv
and Apps I get this error on the General Tab:
    Win32_Processor: WMI: Provider is not capable of the
attempted operation.
    Win32_WMISetting: Successful
    Security information: Successul
    Win32_OperatingSystem: WMI: Provider is not capable of
the attempted operation.

And in the event log I get every 5 mins:
    Event ID 9099: The MAD Monitoring thread was unable to
read the state of the services, error '0x80041010'.
And:
    Event ID 1095: Windows could not log all the RSOP
(Resultant Set of Policy) Data. Group Policy processing
will continue but the RSOP data might not be accurate.

So I'm thinking that I have to reinstall, re-register or
reconfigure the WMI system, but after lots of searching I
can't find anything I'm confident to try. This is a live
server so I don't want to do anything until I'm sure the
server won't suffer any further crashes or damage. Can
anyone help who knows how to sort the WMI system in a safe
manner? Thanks,

Andy.



Relevant Pages

  • RE: Loss of error reporting and Intranet web site
    ... email from the server a couple days ago but there was no data in it, ... Any idea why it might have done this if Exchange has to be on ... DAT tape backup and it still was seeing way too much data in Exchange ... Select Receive a daily performance report in e-mail, ...
    (microsoft.public.windows.server.sbs)
  • RE: Loss of error reporting and Intranet web site
    ... Monitoring and Reporting, Companyweb, Backup problem. ... You said you removed Exchange from the server due to not enough backup ... Exchange mailbox and public store to another location. ... Select Receive a daily performance report in e-mail, ...
    (microsoft.public.windows.server.sbs)
  • RE: Loss of error reporting and Intranet web site
    ... Monitoring and Reporting, Companyweb, Backup problem. ... You said you removed Exchange from the server due to not enough backup ... Exchange mailbox and public store to another location. ... Select Receive a daily performance report in e-mail, ...
    (microsoft.public.windows.server.sbs)
  • SBS 2003 WMI Problems
    ... I administer a SBS2003 server. ... Eventlogs stated that this must be restored from backup, ... which appears to be the WMI system. ... SBS not longer has any info in its daily report. ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS Back up Failure
    ... attached the log and report from yesterday's backup also. ... One or more components of Small Business Server Backup failed. ... recommended that you review errors in the Event log related to the service. ... Notifications task in the Server Management Monitoring and Reporting taskpad. ...
    (microsoft.public.windows.server.sbs)