asked on

WMI Service Error??

Exchange 2003 SP2 on a WIN2k3 SP1 box.

Exchange_Server has reported a Error. Reported status is:
Queues - Unknown
Drives - Unknown
Services - Error
Memory - Unknown
CPU - Unknown

I had an issue awhile back with disk space and database size, so I adjusted many diagnostic logging levels. I am sure this is releated to this, but how do I know which service is experiencing the error?

Also, Is there a 'template' or guidlines I can follow to set my diag logging levels so that they will only log issues I need to be concerned with?

-Darren

darrennelson

ASKER

also, the email notification came at 11:34PM. I checked my logs and there wasn't anything obvious in the sys or app log at or around those times.

rstovall

Sounds like local machine access problem for WMI?

This could likely be resolved through using DCOMCNFG .. and verify that WMI has all necessary permissions

Also, if you added drives ot the system, (due to disk space issues) .. verify that system has full control in NTFS perms...

appears to be more access/security related than a setting . .let me know what you find in DCOM (sometines I have removed and re-added perms in DCOMCNFG to resolve access issues)

darrennelson

ASKER

rst,

I'm not familiar with DCOMCNFG. I'm in it now, and navigated to Component Services->Comuters->My Computer->DCOM Config->Windows Management and Instrumentation->Properties->Security. Here I have 'Launch and Activation Permissions' set to customize - if I edit, the group 'Everyone' has full access - no other groups or users present. Under "Access Permissions", its set to "Use Default". Under "Configuration Permissions", once again "Customize" is selected and if I edit, local admins and SYSTEM have full access, various other users have different degrees of access.

Am I in the right place?

ASKER CERTIFIED SOLUTION

rstovall

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

darrennelson

ASKER

I have removed and readded SYSTEM and will continue to monitor. No additional disks to worry about at this time, although were are getting close to that point.

On the subject of monitoring, is there a default Diagnostic Logging level in Exchange that I can set all my events to log at? Or is it just tinkering with what you need logged?

-Darren

rstovall

there is no blanket solution for this monitoring ..

"tinkering" with what you need when you need it is usually the way to go ..

There are some ways to get even more verbose logging if you should ever need it .. you can add loglevel in the registry up to 7 I believe

this may be of some use to you
http://www.computerperformance.co.uk/exchange2003/exchange2003_logs_diagnostic.htm