Link to home
Start Free TrialLog in
Avatar of Josh Low
Josh Low

asked on

WMI Missing Classes

I'm using the WMI Diag Tool 2.2 on a Windows Server 2008 R2. Been trying to figure out what the problem is. Seems I am missing classes that help monitor diagnostics on the server.
Here is the output from the file. This is the report. I also have the log file.

31989 13:27:14 (0) ** WMIDiag v2.2 started on Tuesday, March 20, 2018 at 13:18.
31990 13:27:14 (0) ** 
31991 13:27:14 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
31992 13:27:14 (0) ** 
31993 13:27:14 (0) ** This script is not supported under any Microsoft standard support program or service.
31994 13:27:14 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
31995 13:27:14 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
31996 13:27:14 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
31997 13:27:14 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
31998 13:27:14 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
31999 13:27:14 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
32000 13:27:14 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
32001 13:27:14 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
32002 13:27:14 (0) ** of the possibility of such damages.
32003 13:27:14 (0) ** 
32004 13:27:14 (0) ** 
32005 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32006 13:27:14 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
32007 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32008 13:27:14 (0) ** 
32009 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32010 13:27:14 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601) - User 'HOST-JP1\ADMINISTRATOR' on computer 'HOST-JP1'.
32011 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32012 13:27:14 (0) ** Environment: ........................................................................................................ OK.
32013 13:27:14 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #1).
32014 13:27:14 (0) ** Drive type: ......................................................................................................... SCSI (VMware Virtual disk SCSI Disk Device).
32015 13:27:14 (0) ** There are no missing WMI system files: .............................................................................. OK.
32016 13:27:14 (0) ** There are no missing WMI repository files: .......................................................................... OK.
32017 13:27:14 (0) ** WMI repository state: ............................................................................................... N/A.
32018 13:27:14 (0) ** AFTER running WMIDiag:
32019 13:27:14 (0) ** The WMI repository has a size of: ................................................................................... 21 MB.
32020 13:27:14 (0) ** - Disk free space on 'C:': .......................................................................................... 22970 MB.
32021 13:27:14 (0) **   - INDEX.BTR,                     4808704 bytes,      3/20/2018 10:54:46 AM
32022 13:27:14 (0) **   - MAPPING1.MAP,                  51984 bytes,        3/20/2018 10:34:46 AM
32023 13:27:14 (0) **   - MAPPING2.MAP,                  51984 bytes,        3/20/2018 10:54:46 AM
32024 13:27:14 (0) **   - OBJECTS.DATA,                  16703488 bytes,     3/20/2018 10:54:46 AM
32025 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32026 13:27:14 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
32027 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32028 13:27:14 (0) ** DCOM Status: ........................................................................................................ OK.
32029 13:27:14 (0) ** WMI registry setup: ................................................................................................. OK.
32030 13:27:14 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
32031 13:27:14 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
32032 13:27:14 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
32033 13:27:14 (0) **    Note: If the service is marked with (*), it means that the service/application uses WMI but
32034 13:27:14 (0) **          there is no hard dependency on WMI. However, if the WMI service is stopped,
32035 13:27:14 (0) **          this can prevent the service/application to work as expected.
32036 13:27:14 (0) ** 
32037 13:27:14 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
32038 13:27:14 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
32039 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32040 13:27:14 (0) ** WMI service DCOM setup: ............................................................................................. OK.
32041 13:27:14 (0) ** WMI components DCOM registrations: .................................................................................. OK.
32042 13:27:14 (0) ** WMI ProgID registrations: ........................................................................................... OK.
32043 13:27:14 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
32044 13:27:14 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
32045 13:27:14 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
32046 13:27:14 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
32047 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32048 13:27:14 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
32049 13:27:14 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
32050 13:27:14 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
32051 13:27:14 (0) **    privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
32052 13:27:14 (0) **    to ensure that administrative privileges are granted. If a Local User account is used for remote
32053 13:27:14 (0) **    accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
32054 13:27:14 (0) ** 
32055 13:27:14 (0) ** Overall DCOM security status: ....................................................................................... OK.
32056 13:27:14 (0) ** Overall WMI security status: ........................................................................................ OK.
32057 13:27:14 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
32058 13:27:14 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
32059 13:27:14 (0) ** - ROOT/SUBSCRIPTION, CommandLineEventConsumer.Name="BVTConsumer".
32060 13:27:14 (0) **   'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99'
32061 13:27:14 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".
32062 13:27:14 (0) **   'select * from MSFT_SCMEventLogEvent'
32063 13:27:14 (0) ** 
32064 13:27:14 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
32065 13:27:14 (0) ** INFO: WMI namespace(s) requiring PACKET PRIVACY: .................................................................... 3 NAMESPACE(S)!
32066 13:27:14 (0) ** - ROOT/CIMV2/SECURITY/MICROSOFTTPM.
32067 13:27:14 (0) ** - ROOT/CIMV2/TERMINALSERVICES.
32068 13:27:14 (0) ** - ROOT/SERVICEMODEL.
32069 13:27:14 (0) ** => When remotely connecting, the namespace(s) listed require(s) the WMI client to
32070 13:27:14 (0) **    use an encrypted connection by specifying the PACKET PRIVACY authentication level.
32071 13:27:14 (0) **    (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
32072 13:27:14 (0) **    i.e. 'WMIC.EXE /NODE:"HOST-JP1" /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\SERVICEMODEL Class __SystemSecurity'
32073 13:27:14 (0) ** 
32074 13:27:14 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
32075 13:27:14 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
32076 13:27:14 (0) ** WMI GET operations: ................................................................................................. OK.
32077 13:27:14 (0) ** WMI MOF representations: ............................................................................................ OK.
32078 13:27:14 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
32079 13:27:14 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
32080 13:27:14 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
32081 13:27:14 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
32082 13:27:14 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
32083 13:27:14 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
32084 13:27:14 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
32085 13:27:14 (0) ** WMI static instances retrieved: ..................................................................................... 1749.
32086 13:27:14 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
32087 13:27:14 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 1.
32088 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32089 13:27:14 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
32090 13:27:14 (0) **   DCOM: ............................................................................................................. 0.
32091 13:27:14 (0) **   WINMGMT: .......................................................................................................... 0.
32092 13:27:14 (0) **   WMIADAPTER: ....................................................................................................... 0.
32093 13:27:14 (0) ** 
32094 13:27:14 (0) ** # of additional Event Log events AFTER WMIDiag execution:
32095 13:27:14 (0) **   DCOM: ............................................................................................................. 0.
32096 13:27:14 (0) **   WINMGMT: .......................................................................................................... 0.
32097 13:27:14 (0) **   WMIADAPTER: ....................................................................................................... 0.
32098 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32099 13:27:14 (0) ** WMI Registry key setup: ............................................................................................. OK.
32100 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32101 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32102 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32103 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32104 13:27:14 (0) ** 
32105 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32106 13:27:14 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
32107 13:27:14 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
32108 13:27:14 (0) ** 
32109 13:27:14 (0) ** SUCCESS: WMIDiag determined that WMI works CORRECTLY.
32110 13:27:14 (0) ** 
32111 13:27:14 (0) ** WMIDiag v2.2 ended on Tuesday, March 20, 2018 at 13:27 (W:47 E:3 S:0).

Open in new window

Avatar of RAFA
RAFA
Flag of Venezuela, Bolivarian Republic of image

Goodnight,

But what are you really trying to do with WMI? Are you doing a test, with what purpose?

I remain attentive to your comments.

Regards...
Avatar of Josh Low
Josh Low

ASKER

I use a network/system monitoring tool called LogicMonitor that triggers alerts based on system data. No data is being sent. I also use N-Central and it does not show up time data which is monitored byWin32_PerfFormattedData_PerfOS_System class which is missing when i look in WBEMTEST. I am very new to WMI, but I need to monitor performance data on the server.
good afternoon,

First, please validate the Windows WMI service, validate that it is running.
Additional validates that the Remote Procedure Call (RPC), Internet Connection Sharing (ICS) and IP Helper services are running, since WMI depends on these services for its operation.

Validate this point first and tell me

Best regards.
good afternoon,

Reviewing the log that you are publishing, the WMI service according to what is published is working correctly. The problem in itself seems to be in the monitero tool that does not include the classes.

These are the classes that the tool does not detect?

WMI WRITE operations: .............................................. ................................................. NOT TESTED
32083 13:27:14 (0) ** WMI PUT operations: ................................... .................................................. ............ NOT TESTED.
32084 13:27:14 (0) ** WMI DELETE operations: ................................... .................................................. ......... NOT TESTED.

Best regards.
Additional checks the windows event viewer, in application and validates if there are events related to WMI.
I feel really dumb. I copied the wrong report. I ran the report on a second server with the same exact setup to try and compare the reports.
Here is the correct report.

31471 12:54:40 (0) ** WMIDiag v2.2 started on Tuesday, March 20, 2018 at 12:28.
31472 12:54:40 (0) **
31473 12:54:40 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.
31474 12:54:40 (0) **
31475 12:54:40 (0) ** This script is not supported under any Microsoft standard support program or service.
31476 12:54:40 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
31477 12:54:40 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
31478 12:54:40 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
31479 12:54:40 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
31480 12:54:40 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
31481 12:54:40 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
31482 12:54:40 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
31483 12:54:40 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
31484 12:54:40 (0) ** of the possibility of such damages.
31485 12:54:40 (0) **
31486 12:54:40 (0) **
31487 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31488 12:54:40 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
31489 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31490 12:54:40 (0) **
31491 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31492 12:54:40 (0) ** Windows Server 2008 R2 - Service pack 1 - 64-bit (7601) - User 'HOST-JP2\ADMINISTRATOR' on computer 'HOST-JP2'.
31493 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31494 12:54:40 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!
31495 12:54:40 (0) ** INFO: => 4 possible incorrect shutdown(s) detected on:
31496 12:54:40 (0) **          - Shutdown on 03 January 2018 06:24:36 (GMT-0).
31497 12:54:40 (0) **          - Shutdown on 03 January 2018 07:55:30 (GMT-0).
31498 12:54:40 (0) **          - Shutdown on 15 February 2018 05:03:12 (GMT-0).
31499 12:54:40 (0) **          - Shutdown on 19 February 2018 05:02:06 (GMT-0).
31500 12:54:40 (0) **
31501 12:54:40 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #1).
31502 12:54:40 (0) ** Drive type: ......................................................................................................... SCSI (VMware Virtual disk SCSI Disk Device).
31503 12:54:40 (0) ** There are no missing WMI system files: .............................................................................. OK.
31504 12:54:40 (0) ** There are no missing WMI repository files: .......................................................................... OK.
31505 12:54:40 (0) ** WMI repository state: ............................................................................................... N/A.
31506 12:54:40 (0) ** AFTER running WMIDiag:
31507 12:54:40 (0) ** The WMI repository has a size of: ................................................................................... 20 MB.
31508 12:54:40 (0) ** - Disk free space on 'C:': .......................................................................................... 22709 MB.
31509 12:54:40 (0) **   - INDEX.BTR,                     4481024 bytes,      3/20/2018 12:49:02 PM
31510 12:54:40 (0) **   - MAPPING1.MAP,                  51536 bytes,        3/20/2018 12:49:02 PM
31511 12:54:40 (0) **   - MAPPING2.MAP,                  51532 bytes,        3/20/2018 11:47:02 AM
31512 12:54:40 (0) **   - OBJECTS.DATA,                  15892480 bytes,     3/20/2018 12:49:02 PM
31513 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31514 12:54:40 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
31515 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31516 12:54:40 (0) ** DCOM Status: ........................................................................................................ OK.
31517 12:54:40 (0) ** WMI registry setup: ................................................................................................. OK.
31518 12:54:40 (0) ** INFO: WMI service has dependents: ................................................................................... 1 SERVICE(S)!
31519 12:54:40 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')
31520 12:54:40 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
31521 12:54:40 (0) **    Note: If the service is marked with (*), it means that the service/application uses WMI but
31522 12:54:40 (0) **          there is no hard dependency on WMI. However, if the WMI service is stopped,
31523 12:54:40 (0) **          this can prevent the service/application to work as expected.
31524 12:54:40 (0) **
31525 12:54:40 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
31526 12:54:40 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
31527 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31528 12:54:40 (0) ** WMI service DCOM setup: ............................................................................................. OK.
31529 12:54:40 (0) ** WMI components DCOM registrations: .................................................................................. OK.
31530 12:54:40 (0) ** WMI ProgID registrations: ........................................................................................... OK.
31531 12:54:40 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
31532 12:54:40 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
31533 12:54:40 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
31534 12:54:40 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
31535 12:54:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31536 12:54:40 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.
31537 12:54:40 (0) ** INFO: Local Account Filtering: ...................................................................................... ENABLED.
31538 12:54:40 (0) ** => WMI tasks remotely accessing WMI information on this computer and requiring Administrative
31539 12:54:40 (0) **    privileges MUST use a DOMAIN account part of the Local Administrators group of this computer
31540 12:54:40 (0) **    to ensure that administrative privileges are granted. If a Local User account is used for remote
31541 12:54:40 (0) **    accesses, it will be reduced to a plain user (filtered token), even if it is part of the Local Administrators group.
31542 12:54:40 (0) **
31543 12:54:40 (0) ** Overall DCOM security status: ....................................................................................... OK.
31544 12:54:40 (0) ** Overall WMI security status: ........................................................................................ OK.
31545 12:54:40 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
31546 12:54:40 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
31547 12:54:40 (0) ** - ROOT/SUBSCRIPTION, CommandLineEventConsumer.Name="BVTConsumer".
31548 12:54:40 (0) **   'SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99'
31549 12:54:40 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".
31550 12:54:40 (0) **   'select * from MSFT_SCMEventLogEvent'
31551 12:54:40 (0) **
31552 12:54:40 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
31553 12:54:40 (0) ** INFO: WMI namespace(s) requiring PACKET PRIVACY: .................................................................... 3 NAMESPACE(S)!
31554 12:54:40 (0) ** - ROOT/CIMV2/SECURITY/MICROSOFTTPM.
31555 12:54:40 (0) ** - ROOT/CIMV2/TERMINALSERVICES.
31556 12:54:40 (0) ** - ROOT/SERVICEMODEL.
31557 12:54:40 (0) ** => When remotely connecting, the namespace(s) listed require(s) the WMI client to
31558 12:54:40 (0) **    use an encrypted connection by specifying the PACKET PRIVACY authentication level.
31559 12:54:40 (0) **    (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)
31560 12:54:40 (0) **    i.e. 'WMIC.EXE /NODE:"HOST-JP2" /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\SERVICEMODEL Class __SystemSecurity'
31561 12:54:40 (0) **
31562 12:54:40 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
31563 12:54:40 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
31564 12:54:40 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 118 ERROR(S)!
31565 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31566 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31567 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31568 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31569 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31570 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31571 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31572 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31573 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31574 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31575 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31576 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31577 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31578 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31579 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31580 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31581 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31582 12:54:40 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31583 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31584 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31585 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31586 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31587 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31588 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31589 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31590 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31591 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31592 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31593 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31594 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31595 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31596 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31597 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31598 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31599 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31600 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31601 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31602 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31603 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31604 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31605 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31606 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31607 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31608 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31609 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31610 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31611 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31612 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31613 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31614 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31615 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31616 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31617 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31618 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31619 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31620 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31621 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31622 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31623 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31624 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31625 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31626 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31627 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31628 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31629 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31630 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31631 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31632 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31633 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31634 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31635 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31636 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31637 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31638 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31639 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31640 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31641 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31642 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31643 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31644 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31645 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31646 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31647 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31648 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31649 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31650 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31651 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31652 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31653 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31654 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31655 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31656 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31657 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31658 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31659 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31660 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31661 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31662 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31663 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31664 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31665 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31666 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31667 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31668 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31669 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31670 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31671 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31672 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31673 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31674 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31675 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31676 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31677 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31678 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31679 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31680 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31681 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31682 12:54:41 (0) **   MOF Registration: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
31683 12:54:41 (0) **
31684 12:54:41 (0) ** WMI MOF representations: ............................................................................................ OK.
31685 12:54:41 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
31686 12:54:41 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
31687 12:54:41 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
31688 12:54:41 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
31689 12:54:41 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
31690 12:54:41 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
31691 12:54:41 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
31692 12:54:41 (0) ** WMI static instances retrieved: ..................................................................................... 1757.
31693 12:54:41 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
31694 12:54:41 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 1.
31695 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31696 12:54:41 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
31697 12:54:41 (0) **   DCOM: ............................................................................................................. 0.
31698 12:54:41 (0) **   WINMGMT: .......................................................................................................... 0.
31699 12:54:41 (0) **   WMIADAPTER: ....................................................................................................... 0.
31700 12:54:41 (0) **
31701 12:54:41 (0) ** # of additional Event Log events AFTER WMIDiag execution:
31702 12:54:41 (0) **   DCOM: ............................................................................................................. 0.
31703 12:54:41 (0) **   WINMGMT: .......................................................................................................... 0.
31704 12:54:41 (0) **   WMIADAPTER: ....................................................................................................... 0.
31705 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31706 12:54:41 (0) ** WMI Registry key setup: ............................................................................................. OK.
31707 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31708 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31709 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31710 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31711 12:54:41 (0) **
31712 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31713 12:54:41 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
31714 12:54:41 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
31715 12:54:41 (0) **
31716 12:54:41 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!.  Check 'C:\USERS\ADMINISTRATOR\APPDATA\LOCAL\TEMP\WMIDIAG-V2.2_2K8R2.SRV.SP1.64_HOST-JP2_2018.03.20_12.27.28.LOG' for details.
31717 12:54:41 (0) **
31718 12:54:41 (0) ** WMIDiag v2.2 ended on Tuesday, March 20, 2018 at 12:54 (W:52 E:4 S:1).
SOLUTION
Avatar of RAFA
RAFA
Flag of Venezuela, Bolivarian Republic of image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I do have the Log file yes. and the first report i posted was with the same exact setup and the one showing the error.
I know WMI is working I have tested it with WBEMTEST, I do have some WMI errors in Event Veiwer, Event ID 10, Event ID 4, Event ID 63, Event ID 5612.
Event ID 4: Error 0x8004401e encountered when trying to load MOF C:\WINDOWS\SYSTEM32\WBEM\EN-US\AACLIENT.MFL while recovering .MOF file marked with autorecover.
Event ID 10: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.
Event ID 63: A provider, HiPerfCooker_v1, has been registered in the Windows Management Instrumentation namespace Root\WMI to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event ID 5612: Windows Management Instrumentation has stopped WMIPRVSE.EXE because a quota reached a warning value. Quota: ThreadCount  Value: 260 Maximum value: 256 WMIPRVSE PID: 6624

I hope this helps.
Ok very well, I am going to review them and I will give you my suggestions.

Regards..
Hello, reviewing the aforementioned events, we can perform the following tests and tell me the results.

1- Here we will validate the consistency of the WMI repository, the result should be consistent with both commands. execute both commands.

winmgmt / verifyrepository
winmgmt / salvagerepository

2- Then execute a Run and place the following: (Here we validate the correct functioning of the WMI).

Run winmgmt.msc
Right click on Local Wmi Control (Local) and select properties
Validate the General tab and you should have as a result See printer 1
Then validate the security tab and you should have as a result see printer 2


3- Additional validates that the account with which you start the WMI service has administrator permissions. since event 63 indicates that you start the service with a crazy account, validate that you have administrator permissions.

4- Event 5612 indicates that it stopped the Wmiprvse.exe process for reaching a maximum value of 260, the maximum value being 256. You must make the following plan:

https://blogs.technet.microsoft.com/askperf/2014/08/11/wmi-high-memory-usage-by-wmi-service-or-wmiprvse-exe/

Please tell me the results obtained.
WMI-Control.PNG
WMI-Security.PNG
According to the events of the Windows events system, you have several errors with the WMI, lack of repositories and classes, I think that's why you have flaws with the tool.

Do you run the tool from the server with Windows server 2008?

Are the servers you are trying to monitor windows?
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hello

excellent news, I'm glad, do not forget to rate if the previous solutions helped solve your problem before closing the question.

Best regards.
Found solution on separate site, but was assisted by this site.