Go Back   TechArena Community > Technical Support > Computer Help > Windows Vista > Vista Help
Become a Member!
Forgot your username/password?
Register Tags Active Topics RSS Search Mark Forums Read

Sponsored Links



strange event viewer error

Vista Help


Reply
 
Thread Tools Search this Thread
  #1  
Old 04-03-2008
gerryf
 
Posts: n/a
strange event viewer error

OK, here's the error

Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60
WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage
> 99" could not be reactivated in namespace "//./root/CIMV2" because of

error 0x80041003. Events cannot be delivered through this filter until the
problem is corrected.

Basically, how do I correct the problem?

This is occurring on two identical machines, both of which were updated from
Windows XP Professional. Not a great deal of interesting stuff on these
machines--simple workstations. I suspect this may have resulted from the
upgrade, rather than the clean install.

The PCs seem to work fine except for these errors.

Reply With Quote
  #2  
Old 04-03-2008
Mark L. Ferguson
 
Posts: n/a
Re: strange event viewer error

Delete the files in the REPOSITORY folders (..\System32\wbem) (you will have
to turn off the winmanagement service to do that) 'net stop winmgmt'
Reply With Quote
  #3  
Old 04-03-2008
Miles Li [MSFT]
 
Posts: n/a
RE: strange event viewer error

The '0x80041003' error code you provided indicates that
WBEM_E_ACCESS_DENIED.

This typically results when the process trying to access the namespace does
not have the required WMI privileges. The account attempting remote access
should be an administrator on the target computer; in addition, the account
might need to have a specific privilege enabled. To troubleshoot this
error, check the namespace security on the remote namespace to see the
privileges enabled for the account.


For this issue, I'd like to know which user account is used when processing
the query and whether there is proper permission on the '/root/CIMV2'.

To verify the permission of '/root/CIMV2':

Run--->'wmimgmt.msc'--->WMI control
(local)--->Properties--->Security--->/root/CIMV2


Please note: In Windows XP, 'Everyone' group have Execute Methods
permission by default. In Windows Vista, it is replaced with 'Authenticated
Users' group.
Reply With Quote
  #4  
Old 04-03-2008
gerryf
 
Posts: n/a
Re: strange event viewer error

Yes, from what I was able to glean from various sources, that is what I
thought as well. However, it didn't seem to make sense to me in the context
of the situation. All of the attempts to investigate this issue have led me
to Windows server running MYSQL server, but none (yet) seem to be Vista
related.

This is a newly installed Vista Ultimate machine (upgrade, actually), in a
network. There is no remote access -- the two machines are presently
standalone machines. These machines were fully updated XP Pro machines that
were updated using the Technet supplied Vista with integrated sp1 iso. The
error appears while checking the event log from an administrator account.

It appears the security for Root\CIMv2 is the default

Authenticated users has EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are
set to allow
Local Service EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are set to
allow
Network Service EXECUTE METHODS, PROVIDER WRITE, ENABLE ACCOUNT are set to
allow
Administrators EXECUTE METHODS, FULL WRITE, PARTIAL WRITER,, PROVIDER
WRITE, ENABLE ACCOUNT are set to allow

How can I determine what account is used when processing the query--indeed,
what query?
Reply With Quote
  #5  
Old 04-03-2008
gerryf
 
Posts: n/a
I had actually toyed with that idea given it seems to be at least marginally
related to wbem according to the error message, but the error seems to occur
mostly on servers running mysql so I was unsure if I should try that.

That seems to have done the trick--after deleting the repository files and
rebooting 5 times the error has not recurred
Reply With Quote
  #6  
Old 05-03-2008
Miles Li [MSFT]
 
Posts: n/a
Re: strange event viewer error

Yes, 'Root\CIMv2' has the proper default permission and it should works.

For Mark's suggest has affects now, I'd like to recommend you to have a
further test to see whether it is stable or not.

Again, thanks for using newsgroups.
Reply With Quote
  #7  
Old 27-08-2009
Member
 
Join Date: Aug 2009
Posts: 1
Re: strange event viewer error

I just had this problem and cleared the wbem repository as proposed here... now, on startup, error 0x8004401e pops up... any ideas about that?
Reply With Quote
Reply

  TechArena Community > Technical Support > Computer Help > Windows Vista > Vista Help
Tags: , , ,



Thread Tools Search this Thread
Search this Thread:

Advanced Search


Similar Threads for: "strange event viewer error"
Thread Thread Starter Forum Replies Last Post
LoadPerf error in Event Viewer Victor Kam Windows XP Support 1 21-03-2013 05:55 PM
msmsgs.exe error in event viewer RoadRunner Windows Software 3 31-03-2009 12:03 PM
wuaueng.dll - Error in Event Viewer Volodymyra Operating Systems 3 20-03-2009 07:06 PM
Error in application Event viewer Woodrow Operating Systems 3 12-02-2009 01:24 PM
Event ID 7026 error in event viewer Carlos Windows x64 Edition 2 27-04-2007 08:59 AM


All times are GMT +5.5. The time now is 09:04 PM.