RE: wmiprvsvr.exe taking over server using %100 cpu
- From: v-yanniw@xxxxxxxxxxxxxxxxxxxx ("Jenny wu [MSFT]")
- Date: Tue, 23 Aug 2005 11:10:35 GMT
Hi Dan,
Thanks for you posting here!
For your description, I understand that the issue is: the SBS server has
30+ instances of wmiprvse.exe and take up nearly 100% CPU. If I am off
base, please don't hesitate to let me know.
For your scenario, I suggest that you contact Microsoft Customer Support
Services via telephone since troubleshooting the issue need catch memory
dump and MPSreports to analyze. It is hard handle in newsgroup. Please be
advised that contacting phone support will be a charged call. However, if
you are simply requesting a hotfix be sent to you and no other support then
charges are usually refunded or waived.
To obtain the phone numbers for specific technology request please take a
look at the web site listed below.
http://support.microsoft.com/default.aspx?scid=fh;EN-US;PHONENUMBERS
If you are outside the US please see http://support.microsoft.com for
regional support phone numbers.
And also I would like to give some information to try to troubleshooting
the issue:
Suggestion 1:
A known issue for the high CPU usage is that when the following conditions
are true:
** A UNIX or Linux computer that is running the Samba program is on your
network. The Samba program emulates a Microsoft Windows NT Server.
** The UNIX or Linux computer that is running the Samba program is
configured with the same domain name as the Windows Server 2003-based
domain controller.
To resolve this issue, rename the UNIX or Linux computer that is running
the Samba program. Use a new name that is different from the name that is
configured on the Windows Server 2003-based domain controller.
See the following article:
888193 High CPU usage occurs, and event 7023 is logged in Event Viewer in
http://support.microsoft.com/?id=888193
More Information:
============
wmiprvse.exe is the instance of Windows Management Instrumentation. Windows
Management Instrumentation (WMI) is a component of the Microsoft Windows
operating system that provides management information and control in an
enterprise environment. By using industry standards, managers can use WMI
to query and set information on desktop systems, applications, networks,
and other enterprise components. Developers can use WMI to create event
monitoring applications that alert users when important incidents occur.
In earlier versions of Windows, providers were loaded in-process with the
Windows Management service (WinMgmt.exe), running under the LocalSystem
security account. Failure of a provider caused the entire WMI service to
fail. The next request to WMI restarted the service.
Beginning with Windows XP/2003, WMI resides in a shared service host with
several other services. To avoid stopping all the services when a provider
fails, providers are loaded into a separate host process named
Wmiprvse.exe. Multiple instances of Wmiprvse.exe can run at the same time
under different accounts: LocalSystem, NetworkService, or LocalService. The
WMI core WinMgmt.exe is loaded into the shared Local Service host named
Svchost.exe.
Suggestion 2:
If the problem still exists, you can try a clean boot to narrow down the
issue:
1) Run MSCONFIG.EXE.
2) In the Services tab, click "Hide All Microsoft Services" and click
"Disable All".
3) In the Startup tab, click "Disable All". Click OK. (This will
temporarily prevent third-party programs from running automatically during
start-up.)
4) Restart the computer. Does the high CPU utilization problem still occur?
If the problem does not occur, it indicates that the problem is related to
one application or service we have disabled. You can use the MSCONFIG tool
again to re-enable the disabled item one by one to find out the culprit.
Hope above information helps. I am looking forward to you!
Have a nice day!
Best Regards,
Jenny Wu
Microsoft CSS Online Newsgroup Support
Get Secure! - www.microsoft.com/security
======================================================
This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx
When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.
Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.
For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.
Any input or comments in this thread are highly appreciated.
======================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
>Thread-Topic: wmiprvsvr.exe taking over server using %100 cpu
>thread-index: AcWneiRvwwJDkg+mQEmUVBgtahU53Q==
>X-WBNR-Posting-Host: 66.93.135.37
>From: =?Utf-8?B?RGFu?= <Dan@xxxxxxxxxxxxxxxxxxxxxxxxx>
>References: <280D09C3-350B-4C6E-87F0-F11CB05BC772@xxxxxxxxxxxxx>
>Subject: RE: wmiprvsvr.exe taking over server using %100 cpu
>Date: Mon, 22 Aug 2005 17:32:29 -0700
>Lines: 19
>Message-ID: <4155B6A0-54F3-4A32-8CAC-97334B217D96@xxxxxxxxxxxxx>
>MIME-Version: 1.0
>Content-Type: text/plain;
> charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.0
>Newsgroups: microsoft.public.windows.server.sbs
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA01.phx.gbl microsoft.public.windows.server.sbs:146818
>X-Tomcat-NG: microsoft.public.windows.server.sbs
>
>I miss typed the service. Its wmiprvse.exe
>
>"Dan" wrote:
>
>> I have a sbs2k3 server that has 30+ instances of wmiprvsvr.exe running.
The
>> cpu usage fluctuates on each of these process and is taking %100 of the
cpu.
>>
>> I can manually cancel these and the CPU drops momentarily but then the
>> wmiprvsvr.exe service starts up again and replicates it self till it has
%100
>> cpu. While at this state I have limited control of the server and I can
not
>> do a whole lot.
>>
>> I have run virus scans with MacAfee enterprise 8.0 and found nothing.
>>
>> Has anyone seen this problem? This is the third time I have. Each time I
>> uninstalled a windows update and it rolled the server back and this
fixed it.
>> Not sure why this worked and Its not working on this particular install.
>>
>>
>
.
- References:
- Prev by Date: First time SBS 2k3 Premium install w/ ISA 2004 questions ???
- Next by Date: RE: SBS ConnectComputer run from XP workstation on different subnet
- Previous by thread: RE: wmiprvsvr.exe taking over server using %100 cpu
- Next by thread: Password compromised?
- Index(es):
Relevant Pages
|
