WBEM Framework Error

Posted on 2006-06-03
Last Modified: 2008-09-10
Our WBEM Framework log is filling up with the following error message:

Shell Name Explorer.exe in Registry not found in process list.      06/03/2006 08:45:09.282      thread:6256      [d:\srv03rtm\admin\wmi\wbem\providers\win32provider\common\implogonuser.cpp.156]
Unable to locate Shell Process, Impersonation failed.      06/03/2006 08:45:09.407      thread:6256      [d:\srv03rtm\admin\wmi\wbem\providers\win32provider\common\implogonuser.cpp.168]


Shell Name Explorer.exe in Registry not found in process list.      06/03/2006 06:45:02.884      thread:7332      [d:\srv03rtm\admin\wmi\wbem\providers\win32provider\common\implogonuser.cpp.156]
Unable to locate Shell Process, Impersonation failed.      06/03/2006 06:45:03.274      thread:7332      [d:\srv03rtm\admin\wmi\wbem\providers\win32provider\common\implogonuser.cpp.168]
Device IO control returned unexpected error for Check verify: (1)      06/03/2006 06:45:03.290      thread:7332      [d:\srv03rtm\admin\wmi\wbem\providers\win32provider\providers\logicaldisk.cpp.754]

Any ideas as to what is causing this and what I should do about it?

Question by:strung
    LVL 74

    Accepted Solution

    Those are pretty normal messages and it shouldn't really be "filling up" as that log gets recycled every couple of days.  The reason the messages exist is that there are still two standards of authentication in use, NTLM and Kerberos.  That message is just signifying that the first one that was tried by your system (NTLM) failed because the resource it was trying to use wanted Kerberos.  (Or the other way around, depending on the resource needed).

    If the log gets to be more than about 50k then you should look into why it's not recycling, but otherwise don't worry about it.

    "This Behavior is by Design"

    LVL 53

    Author Comment


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
    Because virtualization becomes more and more common, and, with Microsoft Hyper-V included in Windows Server at no additional costs, and, most server hardware nowadays is more than capable of running a physical Small Business Server (SBS) 2008 or 201…
    This video is in connection to the article "The case of a missing mobile phone (". It will help one to understand clearly the steps to track a lost android phone.
    Internet Business Fax to Email Made Easy - With eFax Corporate (, you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

    734 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    17 Experts available now in Live!

    Get 1:1 Help Now