Results 1 to 7 of 7

Thread: strange event viewer error

  1. #1
    gerryf Guest

    strange event viewer error

    OK, here's the error

    Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60
    WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
    > 99" could not be reactivated in namespace "//./root/CIMV2" because of

    error 0x80041003. Events cannot be delivered through this filter until the
    problem is corrected.

    Basically, how do I correct the problem?

    This is occurring on two identical machines, both of which were updated from
    Windows XP Professional. Not a great deal of interesting stuff on these
    machines--simple workstations. I suspect this may have resulted from the
    upgrade, rather than the clean install.

    The PCs seem to work fine except for these errors.

  2. #2
    Mark L. Ferguson Guest

    Re: strange event viewer error

    Delete the files in the REPOSITORY folders (..\System32\wbem) (you will have
    to turn off the winmanagement service to do that) 'net stop winmgmt'

  3. #3
    Miles Li [MSFT] Guest

    RE: strange event viewer error

    The '0x80041003' error code you provided indicates that
    WBEM_E_ACCESS_DENIED.

    This typically results when the process trying to access the namespace does
    not have the required WMI privileges. The account attempting remote access
    should be an administrator on the target computer; in addition, the account
    might need to have a specific privilege enabled. To troubleshoot this
    error, check the namespace security on the remote namespace to see the
    privileges enabled for the account.


    For this issue, I'd like to know which user account is used when processing
    the query and whether there is proper permission on the '/root/CIMV2'.

    To verify the permission of '/root/CIMV2':

    Run--->'wmimgmt.msc'--->WMI control
    (local)--->Properties--->Security--->/root/CIMV2


    Please note: In Windows XP, 'Everyone' group have Execute Methods
    permission by default. In Windows Vista, it is replaced with 'Authenticated
    Users' group.

  4. #4
    gerryf Guest

    Re: strange event viewer error

    Yes, from what I was able to glean from various sources, that is what I
    thought as well. However, it didn't seem to make sense to me in the context
    of the situation. All of the attempts to investigate this issue have led me
    to Windows server running MYSQL server, but none (yet) seem to be Vista
    related.

    This is a newly installed Vista Ultimate machine (upgrade, actually), in a
    network. There is no remote access -- the two machines are presently
    standalone machines. These machines were fully updated XP Pro machines that
    were updated using the Technet supplied Vista with integrated sp1 iso. The
    error appears while checking the event log from an administrator account.

    It appears the security for Root\CIMv2 is the default

    Authenticated users has EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are
    set to allow
    Local Service EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are set to
    allow
    Network Service EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are set to
    allow
    Administrators EXECUTE METHODS, FULL WRITE, PARTIAL WRITER,, PROVIDER
    WRITE, ENABLE ACCOUNT are set to allow

    How can I determine what account is used when processing the query--indeed,
    what query?

  5. #5
    gerryf Guest
    I had actually toyed with that idea given it seems to be at least marginally
    related to wbem according to the error message, but the error seems to occur
    mostly on servers running mysql so I was unsure if I should try that.

    That seems to have done the trick--after deleting the repository files and
    rebooting 5 times the error has not recurred

  6. #6
    Miles Li [MSFT] Guest

    Re: strange event viewer error

    Yes, 'Root\CIMv2' has the proper default permission and it should works.

    For Mark's suggest has affects now, I'd like to recommend you to have a
    further test to see whether it is stable or not.

    Again, thanks for using newsgroups.

  7. #7
    Join Date
    Aug 2009
    Posts
    1

    Re: strange event viewer error

    I just had this problem and cleared the wbem repository as proposed here... now, on startup, error 0x8004401e pops up... any ideas about that?

Similar Threads

  1. LoadPerf error in Event Viewer
    By Victor Kam in forum Windows XP Support
    Replies: 1
    Last Post: 21-03-2013, 05:55 PM
  2. msmsgs.exe error in event viewer
    By RoadRunner in forum Windows Software
    Replies: 3
    Last Post: 31-03-2009, 12:03 PM
  3. wuaueng.dll - Error in Event Viewer
    By Volodymyra in forum Operating Systems
    Replies: 3
    Last Post: 20-03-2009, 07:06 PM
  4. Error in application Event viewer
    By Woodrow in forum Operating Systems
    Replies: 3
    Last Post: 12-02-2009, 01:24 PM
  5. Event ID 7026 error in event viewer
    By Carlos in forum Windows x64 Edition
    Replies: 2
    Last Post: 27-04-2007, 08:59 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •