Event id 9097 appears every 5minutes in application log

This is what the ERR tool had to say for the event shown.

C:\Utilities\Err\i386>err.exe 80070422

# as an HRESULT: Severity: SUCCESS (0), Facility: 0x4c5, Code 0xc716

# as an HRESULT: Severity: FAILURE (1), Facility: 0x7, Code 0x422

# for hex 0x422 / decimal 1058 :

  RMON_CANT_LOAD_RESTYPE                                    clusvmsg.h

  JET_wrnNoIdleActivity                                     ese.h

# /* No idle activity occured */

  JET_wrnNoIdleActivity                                     ese.h

# /* No idle activity occured */

  ERROR_SERVICE_DISABLED                                    winerror.h

# The service cannot be started, either because it is

# disabled or because it has no enabled devices associated

# with it.

# 4 matches found for "80070422"

Hence, this would mean that mad.exe (or better known as MSExchangeSA service) is unable to contact WMI Service.

Check this value in registry for 9097 wmi error:


The value Default Namespace (of type REG_SZ) should be set to root\cimv2

Also check to see if WMI services is in started state. My understanding is that this service is in DISABLED state and this should be set to AUTOMATIC and started state

Have a question about something in this article? You can receive help directly from the article author. Sign up for a free trial to get started.

Get access with a 7-day free trial.
You Belong in the World's Smartest IT Community