Real Geek Forums > Archives > Operating Systems > Windows XP > Windows XP WMI > Huge WMI / DCOM / Security problem..

Huge WMI / DCOM / Security problem..

Posted: 02-14-2006, 09:56 AM
Jonas Haggren
Guest
Posts: n/a
 
I have got into a huge WMI / DCOM / Security problem.

The WMI is not working becouse of i get "access Denied".

I have trying to reset the WMI by deleteing the repository, But the
repository directory is not recreating
Trying to register all the .dll and .exe files again in the wbem
direcotory, - No luck
and trying to reinstalling the WMI - No luck there eather (followed this
http://windowsxp.mvps.org/repairwmi.htm)

Then i run Gpresults or rsop i get "Access Denied, Unknown username or
password", Even then i am logged in as Domain Admin

rsop.msc giving me "Access Denied"

The errors i get in the event Log is these:

Event ID: 1090 Source Userenv
Trying to connet to WMI failed

Event Source: WinMgmt
Event ID: 60
The description for Event ID ( 60 ) in Source ( WinMgmt ) could not be
found. It contains the following insertion string(s): 0x80041001.

Event Source: WinMgmt
Event ID: 43
The description for Event ID ( 43 ) in Source ( WinMgmt ) could not be
found. It contains the following insertion string(s): \\.\root\cimv2,
0x80070005.

Event Source: MRxSmb
Event ID: 3019

Then i go to My Computer > manage > WmiControll and right click and choose
properties, i get "Connecting to WMI" for forever (or at least 1 hour) then
i press cancel i get this error "Can't connect to <local Computer>,
Win32:Access Denied

I get this error on almost every computer in the domain, is it becouse of a
faulty Group Policy settings or because of something i installed from
microsoft *grin* ??

On computers there the WMI are working i can't connect to another computers
WMI, Getting that everlasting timeout. ..

Need help with this, Becouse everything depending on wmi looks like it's not
working..

Jonas Haggren
Sys Mgr.



Reply With Quote

Responses to "Huge WMI / DCOM / Security problem.."

Jonas Haggren
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 02-15-2006, 10:37 AM
Hi thanks for the answers.. I will answer your questions / suggestions
below..

/Jonas

"Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
> Dear Jonas,
>
> Thanks for posting!
>
> I understand that you received WMI access deniel error. If I have
> misunderstood your concerns please feel free to let me know.
>
> Before we go further please help to confirm the following information.
>
> 1. What happened before the issue occured?
Don't know, i payed attention to the problem, then i was trying to install
the SMS clients on the computers.
>
> 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you using
> Windows XP clients in the domain?
Windows 2K3 and Windows XP Clients
>
> 3. Do all the Windows XP Clinets experience the issue?
Yes, More or less. But all have problems with WMI.
>
> I suggest you perform the following methods
>
> Suggestion 1. Update DCs and clients to the latest version.
They are all updated. (Maybe to much, do you know any issues with the latest
SP and quickfixes?
>
> Suggestion 2. It could be that there is a problem with WMI on the machine.
> You can try recreating some of the WMI files using the steps below:
>
> 1 Stop the Windows Management Instrumentation service.
> 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
> 3. Delete all of the files that are in the
> %SystemRoot%\System32\Wbem\Repository folder.
> 4 Restart the computer. The files that were deleted are recreated when the
> computer restarts.
> The Windows Management Instrumentation service will start automatically
> when you restart the computer".
>
> More information for your reference:
>
> 875605 How to troubleshoot WMI-related issues in Windows XP SP2
> <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
The repository are NOT RECREATING, the folder is still empty after
restarting the computer..
I don't get anything in the Eventlog eather about the problem. The events i
get is these:

Event Type: Warning
Event Source: MRxSmb
Event Category: None
Event ID: 3019
Date: 2006-02-15
Time: 11:25:07
User: N/A
Computer: PC770
Description:
Omdirigeraren kan inte avgöra vilken typ av anslutning det är.

Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003
Date: 2006-02-15
Time: 11:24:37
User: N/A
Computer: PC770
Description:
Datorn kunde inte förnya adressen från nätverket (från DHCP-servern) för
nätverkskortet med nätverksadressen 00123F2B3311. Följande fel uppstod:
Åtgärden avbröts av användaren. Datorn kommer att fortsätta försöka erhålla
en ny adress själv från DHCP-servern.

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1090
Date: 2006-02-15
Time: 11:25:07
User: SYSTEM
Computer: PC770
Description:
Det gick inte att logga sessionsstatus för Gällande principuppsättning. Ett
försök att ansluta till WMI misslyckades. Ingen mer loggning för Gällande
principuppsättning kommer att göras den här gången principen tillämpas.

Event Type: Audit Failure
Event Source: Security
Event Category: Detaljerad spårning
Event ID: 861
Date: 2006-02-13
Time: 18:29:05
User: SYSTEM
Computer: PC770
Description:
Windows-brandväggen upptäckte att ett program lyssnar efter inkommande
trafik.

Namn: -
Sökväg: C:\WINDOWS\system32\lsass.exe
Processidentifierare: 712
Användarens konto: SYSTEM
Användarens domän: NT INSTANS
Tjänst: Ja
RPC-server: Nej
IP-version: IPv4
IP-protokoll: UDP
Portnummer: 1208
Tilläts: Nej
Användaren meddelades: Nej

I just noticed that the Windows Firewall on the Client is broken somehow,
(It is shutdown but the Service is running), if i go to the Control Panel >
Windows Firewall > Advanced, it tells me that the Network is broken, and i
can fix it with pushing the button "Default Settings", But it does not help
to push that button..

Something seems to be awfully wrong.. And it seems to come from a faulty GP
somewhere that brakes every computer..

Needing more help to find the
/Jonas
>
> Hope the information helps.
>
> Best Regards,
>
> Jason Tan
>
> Microsoft Online Partner Support
> Get Secure! - www.microsoft.com/security
>
> ================================================== ===
>
> When responding to posts, please "Reply to Group" via your newsreader so
> that others may learn and benefit from your issue.
>
> ================================================== ===
> This posting is provided "AS IS" with no warranties, and confers no
> rights.
>
>
>
>
>
>
> --------------------
> | From: "Jonas Haggren" <evolver@news.postalias>
> | Subject: Huge WMI / DCOM / Security problem..
> | Date: Tue, 14 Feb 2006 10:56:17 +0100
> | Lines: 55
> | X-Priority: 3
> | X-MSMail-Priority: Normal
> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
> | X-RFC2646: Format=Flowed; Original
> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
> | Newsgroups:
> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
> | Xref: TK2MSFTNGXA01.phx.gbl
> microsoft.public.windows.server.general:88705
> microsoft.public.windowsxp.general:1451858
> microsoft.public.windowsxp.wmi:4258
> microsoft.public.windows.group_policy:18878
> | X-Tomcat-NG: microsoft.public.windowsxp.general
> |
> | I have got into a huge WMI / DCOM / Security problem.
> |
> | The WMI is not working becouse of i get "access Denied".
> |
> | I have trying to reset the WMI by deleteing the repository, But the
> | repository directory is not recreating
> | Trying to register all the .dll and .exe files again in the wbem
> | direcotory, - No luck
> | and trying to reinstalling the WMI - No luck there eather (followed
> this
> | http://windowsxp.mvps.org/repairwmi.htm)
> |
> | Then i run Gpresults or rsop i get "Access Denied, Unknown username or
> | password", Even then i am logged in as Domain Admin
> |
> | rsop.msc giving me "Access Denied"
> |
> | The errors i get in the event Log is these:
> |
> | Event ID: 1090 Source Userenv
> | Trying to connet to WMI failed
> |
> | Event Source: WinMgmt
> | Event ID: 60
> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not be
> | found. It contains the following insertion string(s): 0x80041001.
> |
> | Event Source: WinMgmt
> | Event ID: 43
> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not be
> | found. It contains the following insertion string(s): \\.\root\cimv2,
> | 0x80070005.
> |
> | Event Source: MRxSmb
> | Event ID: 3019
> |
> | Then i go to My Computer > manage > WmiControll and right click and
> choose
> | properties, i get "Connecting to WMI" for forever (or at least 1 hour)
> then
> | i press cancel i get this error "Can't connect to <local Computer>,
> | Win32:Access Denied
> |
> | I get this error on almost every computer in the domain, is it becouse
> of
> a
> | faulty Group Policy settings or because of something i installed from
> | microsoft *grin* ??
> |
> | On computers there the WMI are working i can't connect to another
> computers
> | WMI, Getting that everlasting timeout. ..
> |
> | Need help with this, Becouse everything depending on wmi looks like it's
> not
> | working..
> |
> | Jonas Haggren
> | Sys Mgr.
> |
> |
> |
> |
>

Reply With Quote
Jonas Haggren
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 02-16-2006, 02:53 PM
Hi thanks for the answers.. I will answer your questions / suggestions
below..

I try to translate the events into english..

/Jonas

"Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
> Dear Jonas,
>
> Thanks for posting!
>
> I understand that you received WMI access deniel error. If I have
> misunderstood your concerns please feel free to let me know.
>
> Before we go further please help to confirm the following information.
>
> 1. What happened before the issue occured?
> Don't know, i payed attention to the problem, then i was trying to install
> the SMS clients on the computers.
>
>
> 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you using
> Windows XP clients in the domain?
Windows 2K3 and Windows XP Clients
>
> 3. Do all the Windows XP Clinets experience the issue?
Yes, More or less. But all have problems with WMI.
>
> I suggest you perform the following methods
>
> Suggestion 1. Update DCs and clients to the latest version.
They are all updated. (Maybe to much, do you know any issues with the
latest
SP and quickfixes?
>
> Suggestion 2. It could be that there is a problem with WMI on the machine.
> You can try recreating some of the WMI files using the steps below:
>
> 1 Stop the Windows Management Instrumentation service.
> 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
> 3. Delete all of the files that are in the
> %SystemRoot%\System32\Wbem\Repository folder.
> 4 Restart the computer. The files that were deleted are recreated when the
> computer restarts.
> The Windows Management Instrumentation service will start automatically
> when you restart the computer".
>
> More information for your reference:
>
> 875605 How to troubleshoot WMI-related issues in Windows XP SP2
> <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
The repository are NOT RECREATING, the folder is still empty after
restarting the computer..
I don't get anything in the Eventlog eather about the problem. The events i
get is these:

Event Type: Warning
Event Source: MRxSmb
Event Category: None
Event ID: 3019

Event Type: Warning
Event Source: Dhcp
Event Category: None
Event ID: 1003

Event Type: Error
Event Source: Userenv
Event Category: None
Event ID: 1090

Event Type: Audit Failure
Event Source: Security
Event Category: Detaljerad spårning
Event ID: 861
Description:
Windows firewall discovered a program is listening on incoming traffic

Name: -
path: C:\WINDOWS\system32\lsass.exe
Processid: 712
User Account: SYSTEM
User Domain: NT INSTANS
Service: Ja
RPC-server: Nej
IP-version: IPv4
IP-protocoll: UDP
Port: 1208
Allowed: No
User notifed: No

I just noticed that the Windows Firewall on the Client is broken somehow,
(It is shutdown but the Service is running), if i go to the Control Panel >
Windows Firewall > Advanced, it tells me that the Network is broken, and i
can fix it with pushing the button "Default Settings", But it does not help
to push that button..

Something seems to be awfully wrong.. And it seems to come from a faulty GP
somewhere that brakes every computer..

Needing more help to find the
/Jonas

>> --------------------
>> | From: "Jonas Haggren" <evolver@news.postalias>
>> | Subject: Huge WMI / DCOM / Security problem..
>> | Date: Tue, 14 Feb 2006 10:56:17 +0100
>> | Lines: 55
>> | X-Priority: 3
>> | X-MSMail-Priority: Normal
>> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>> | X-RFC2646: Format=Flowed; Original
>> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
>> | Newsgroups:
>> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
>> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
>> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
>> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
>> | Xref: TK2MSFTNGXA01.phx.gbl
>> microsoft.public.windows.server.general:88705
>> microsoft.public.windowsxp.general:1451858
>> microsoft.public.windowsxp.wmi:4258
>> microsoft.public.windows.group_policy:18878
>> | X-Tomcat-NG: microsoft.public.windowsxp.general
>> |
>> | I have got into a huge WMI / DCOM / Security problem.
>> |
>> | The WMI is not working becouse of i get "access Denied".
>> |
>> | I have trying to reset the WMI by deleteing the repository, But the
>> | repository directory is not recreating
>> | Trying to register all the .dll and .exe files again in the wbem
>> | direcotory, - No luck
>> | and trying to reinstalling the WMI - No luck there eather (followed
>> this
>> | http://windowsxp.mvps.org/repairwmi.htm)
>> |
>> | Then i run Gpresults or rsop i get "Access Denied, Unknown username or
>> | password", Even then i am logged in as Domain Admin
>> |
>> | rsop.msc giving me "Access Denied"
>> |
>> | The errors i get in the event Log is these:
>> |
>> | Event ID: 1090 Source Userenv
>> | Trying to connet to WMI failed
>> |
>> | Event Source: WinMgmt
>> | Event ID: 60
>> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not be
>> | found. It contains the following insertion string(s): 0x80041001.
>> |
>> | Event Source: WinMgmt
>> | Event ID: 43
>> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not be
>> | found. It contains the following insertion string(s): \\.\root\cimv2,
>> | 0x80070005.
>> |
>> | Event Source: MRxSmb
>> | Event ID: 3019
>> |
>> | Then i go to My Computer > manage > WmiControll and right click and
>> choose
>> | properties, i get "Connecting to WMI" for forever (or at least 1 hour)
>> then
>> | i press cancel i get this error "Can't connect to <local Computer>,
>> | Win32:Access Denied
>> |
>> | I get this error on almost every computer in the domain, is it becouse
>> of
>> a
>> | faulty Group Policy settings or because of something i installed from
>> | microsoft *grin* ??
>> |
>> | On computers there the WMI are working i can't connect to another
>> computers
>> | WMI, Getting that everlasting timeout. ..
>> |
>> | Need help with this, Becouse everything depending on wmi looks like
>> it's
>> not
>> | working..
>> |
>> | Jonas Haggren
>> | Sys Mgr.
>> |
>> |
>> |
>> |
>>
>
>

Reply With Quote
MadMax
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 03-23-2006, 04:02 PM
Did you ever resolve this problem? Mine is exactly the same including the
windows firewall problem, except I am in a workgroup. Very frustrating!!

"Jonas Haggren" wrote:
> Hi thanks for the answers.. I will answer your questions / suggestions
> below..
>
> I try to translate the events into english..
>
> /Jonas
>
> "Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
> news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
> > Dear Jonas,
> >
> > Thanks for posting!
> >
> > I understand that you received WMI access deniel error. If I have
> > misunderstood your concerns please feel free to let me know.
> >
> > Before we go further please help to confirm the following information.
> >
> > 1. What happened before the issue occured?
> > Don't know, i payed attention to the problem, then i was trying to install
> > the SMS clients on the computers.
> >
> >
> > 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you using
> > Windows XP clients in the domain?
>
> Windows 2K3 and Windows XP Clients
>
> >
> > 3. Do all the Windows XP Clinets experience the issue?
>
> Yes, More or less. But all have problems with WMI.
>
> >
> > I suggest you perform the following methods
> >
> > Suggestion 1. Update DCs and clients to the latest version.
>
> They are all updated. (Maybe to much, do you know any issues with the
> latest
> SP and quickfixes?
>
> >
> > Suggestion 2. It could be that there is a problem with WMI on the machine.
> > You can try recreating some of the WMI files using the steps below:
> >
> > 1 Stop the Windows Management Instrumentation service.
> > 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
> > 3. Delete all of the files that are in the
> > %SystemRoot%\System32\Wbem\Repository folder.
> > 4 Restart the computer. The files that were deleted are recreated when the
> > computer restarts.
> > The Windows Management Instrumentation service will start automatically
> > when you restart the computer".
> >
> > More information for your reference:
> >
> > 875605 How to troubleshoot WMI-related issues in Windows XP SP2
> > <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
>
> The repository are NOT RECREATING, the folder is still empty after
> restarting the computer..
> I don't get anything in the Eventlog eather about the problem. The events i
> get is these:
>
> Event Type: Warning
> Event Source: MRxSmb
> Event Category: None
> Event ID: 3019
>
> Event Type: Warning
> Event Source: Dhcp
> Event Category: None
> Event ID: 1003
>
> Event Type: Error
> Event Source: Userenv
> Event Category: None
> Event ID: 1090
>
> Event Type: Audit Failure
> Event Source: Security
> Event Category: Detaljerad spårning
> Event ID: 861
> Description:
> Windows firewall discovered a program is listening on incoming traffic
>
> Name: -
> path: C:\WINDOWS\system32\lsass.exe
> Processid: 712
> User Account: SYSTEM
> User Domain: NT INSTANS
> Service: Ja
> RPC-server: Nej
> IP-version: IPv4
> IP-protocoll: UDP
> Port: 1208
> Allowed: No
> User notifed: No
>
> I just noticed that the Windows Firewall on the Client is broken somehow,
> (It is shutdown but the Service is running), if i go to the Control Panel >
> Windows Firewall > Advanced, it tells me that the Network is broken, and i
> can fix it with pushing the button "Default Settings", But it does not help
> to push that button..
>
> Something seems to be awfully wrong.. And it seems to come from a faulty GP
> somewhere that brakes every computer..
>
> Needing more help to find the
> /Jonas
>
>
> >> --------------------
> >> | From: "Jonas Haggren" <evolver@news.postalias>
> >> | Subject: Huge WMI / DCOM / Security problem..
> >> | Date: Tue, 14 Feb 2006 10:56:17 +0100
> >> | Lines: 55
> >> | X-Priority: 3
> >> | X-MSMail-Priority: Normal
> >> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
> >> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
> >> | X-RFC2646: Format=Flowed; Original
> >> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
> >> | Newsgroups:
> >> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
> >> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
> >> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
> >> | Path: TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
> >> | Xref: TK2MSFTNGXA01.phx.gbl
> >> microsoft.public.windows.server.general:88705
> >> microsoft.public.windowsxp.general:1451858
> >> microsoft.public.windowsxp.wmi:4258
> >> microsoft.public.windows.group_policy:18878
> >> | X-Tomcat-NG: microsoft.public.windowsxp.general
> >> |
> >> | I have got into a huge WMI / DCOM / Security problem.
> >> |
> >> | The WMI is not working becouse of i get "access Denied".
> >> |
> >> | I have trying to reset the WMI by deleteing the repository, But the
> >> | repository directory is not recreating
> >> | Trying to register all the .dll and .exe files again in the wbem
> >> | direcotory, - No luck
> >> | and trying to reinstalling the WMI - No luck there eather (followed
> >> this
> >> | http://windowsxp.mvps.org/repairwmi.htm)
> >> |
> >> | Then i run Gpresults or rsop i get "Access Denied, Unknown username or
> >> | password", Even then i am logged in as Domain Admin
> >> |
> >> | rsop.msc giving me "Access Denied"
> >> |
> >> | The errors i get in the event Log is these:
> >> |
> >> | Event ID: 1090 Source Userenv
> >> | Trying to connet to WMI failed
> >> |
> >> | Event Source: WinMgmt
> >> | Event ID: 60
> >> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not be
> >> | found. It contains the following insertion string(s): 0x80041001.
> >> |
> >> | Event Source: WinMgmt
> >> | Event ID: 43
> >> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not be
> >> | found. It contains the following insertion string(s): \\.\root\cimv2,
> >> | 0x80070005.
> >> |
> >> | Event Source: MRxSmb
> >> | Event ID: 3019
> >> |
> >> | Then i go to My Computer > manage > WmiControll and right click and
> >> choose
> >> | properties, i get "Connecting to WMI" for forever (or at least 1 hour)
> >> then
> >> | i press cancel i get this error "Can't connect to <local Computer>,
> >> | Win32:Access Denied
> >> |
> >> | I get this error on almost every computer in the domain, is it becouse
> >> of
> >> a
> >> | faulty Group Policy settings or because of something i installed from
> >> | microsoft *grin* ??
> >> |
> >> | On computers there the WMI are working i can't connect to another
> >> computers
> >> | WMI, Getting that everlasting timeout. ..
> >> |
> >> | Need help with this, Becouse everything depending on wmi looks like
> >> it's
> >> not
> >> | working..
> >> |
> >> | Jonas Haggren
> >> | Sys Mgr.
> >> |
> >> |
> >> |
> >> |
> >>
> >
> >
>
>
>
Reply With Quote
Jonas Haggren
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 03-27-2006, 10:47 AM
Yes. I solved it..

It turned out that i have set Security Restrictions for the WMI Service..

/Jonas


"MadMax" <MadMax@discussions.microsoft.com> skrev i meddelandet
news:178C3C36-B4D1-423A-8ED3-694284D134B6@microsoft.com...
> Did you ever resolve this problem? Mine is exactly the same including the
> windows firewall problem, except I am in a workgroup. Very frustrating!!
>
> "Jonas Haggren" wrote:
>
>> Hi thanks for the answers.. I will answer your questions / suggestions
>> below..
>>
>> I try to translate the events into english..
>>
>> /Jonas
>>
>> "Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
>> news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
>> > Dear Jonas,
>> >
>> > Thanks for posting!
>> >
>> > I understand that you received WMI access deniel error. If I have
>> > misunderstood your concerns please feel free to let me know.
>> >
>> > Before we go further please help to confirm the following information.
>> >
>> > 1. What happened before the issue occured?
>> > Don't know, i payed attention to the problem, then i was trying to
>> > install
>> > the SMS clients on the computers.
>> >
>> >
>> > 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you using
>> > Windows XP clients in the domain?
>>
>> Windows 2K3 and Windows XP Clients
>>
>> >
>> > 3. Do all the Windows XP Clinets experience the issue?
>>
>> Yes, More or less. But all have problems with WMI.
>>
>> >
>> > I suggest you perform the following methods
>> >
>> > Suggestion 1. Update DCs and clients to the latest version.
>>
>> They are all updated. (Maybe to much, do you know any issues with the
>> latest
>> SP and quickfixes?
>>
>> >
>> > Suggestion 2. It could be that there is a problem with WMI on the
>> > machine.
>> > You can try recreating some of the WMI files using the steps below:
>> >
>> > 1 Stop the Windows Management Instrumentation service.
>> > 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
>> > 3. Delete all of the files that are in the
>> > %SystemRoot%\System32\Wbem\Repository folder.
>> > 4 Restart the computer. The files that were deleted are recreated when
>> > the
>> > computer restarts.
>> > The Windows Management Instrumentation service will start automatically
>> > when you restart the computer".
>> >
>> > More information for your reference:
>> >
>> > 875605 How to troubleshoot WMI-related issues in Windows XP SP2
>> > <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
>>
>> The repository are NOT RECREATING, the folder is still empty after
>> restarting the computer..
>> I don't get anything in the Eventlog eather about the problem. The
>> events i
>> get is these:
>>
>> Event Type: Warning
>> Event Source: MRxSmb
>> Event Category: None
>> Event ID: 3019
>>
>> Event Type: Warning
>> Event Source: Dhcp
>> Event Category: None
>> Event ID: 1003
>>
>> Event Type: Error
>> Event Source: Userenv
>> Event Category: None
>> Event ID: 1090
>>
>> Event Type: Audit Failure
>> Event Source: Security
>> Event Category: Detaljerad spårning
>> Event ID: 861
>> Description:
>> Windows firewall discovered a program is listening on incoming traffic
>>
>> Name: -
>> path: C:\WINDOWS\system32\lsass.exe
>> Processid: 712
>> User Account: SYSTEM
>> User Domain: NT INSTANS
>> Service: Ja
>> RPC-server: Nej
>> IP-version: IPv4
>> IP-protocoll: UDP
>> Port: 1208
>> Allowed: No
>> User notifed: No
>>
>> I just noticed that the Windows Firewall on the Client is broken
>> somehow,
>> (It is shutdown but the Service is running), if i go to the Control
>> Panel >
>> Windows Firewall > Advanced, it tells me that the Network is broken, and
>> i
>> can fix it with pushing the button "Default Settings", But it does not
>> help
>> to push that button..
>>
>> Something seems to be awfully wrong.. And it seems to come from a faulty
>> GP
>> somewhere that brakes every computer..
>>
>> Needing more help to find the
>> /Jonas
>>
>>
>> >> --------------------
>> >> | From: "Jonas Haggren" <evolver@news.postalias>
>> >> | Subject: Huge WMI / DCOM / Security problem..
>> >> | Date: Tue, 14 Feb 2006 10:56:17 +0100
>> >> | Lines: 55
>> >> | X-Priority: 3
>> >> | X-MSMail-Priority: Normal
>> >> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>> >> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>> >> | X-RFC2646: Format=Flowed; Original
>> >> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
>> >> | Newsgroups:
>> >> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
>> >> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
>> >> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
>> >> | Path:
>> >> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
>> >> | Xref: TK2MSFTNGXA01.phx.gbl
>> >> microsoft.public.windows.server.general:88705
>> >> microsoft.public.windowsxp.general:1451858
>> >> microsoft.public.windowsxp.wmi:4258
>> >> microsoft.public.windows.group_policy:18878
>> >> | X-Tomcat-NG: microsoft.public.windowsxp.general
>> >> |
>> >> | I have got into a huge WMI / DCOM / Security problem.
>> >> |
>> >> | The WMI is not working becouse of i get "access Denied".
>> >> |
>> >> | I have trying to reset the WMI by deleteing the repository, But the
>> >> | repository directory is not recreating
>> >> | Trying to register all the .dll and .exe files again in the wbem
>> >> | direcotory, - No luck
>> >> | and trying to reinstalling the WMI - No luck there eather (followed
>> >> this
>> >> | http://windowsxp.mvps.org/repairwmi.htm)
>> >> |
>> >> | Then i run Gpresults or rsop i get "Access Denied, Unknown username
>> >> or
>> >> | password", Even then i am logged in as Domain Admin
>> >> |
>> >> | rsop.msc giving me "Access Denied"
>> >> |
>> >> | The errors i get in the event Log is these:
>> >> |
>> >> | Event ID: 1090 Source Userenv
>> >> | Trying to connet to WMI failed
>> >> |
>> >> | Event Source: WinMgmt
>> >> | Event ID: 60
>> >> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not
>> >> be
>> >> | found. It contains the following insertion string(s): 0x80041001.
>> >> |
>> >> | Event Source: WinMgmt
>> >> | Event ID: 43
>> >> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not
>> >> be
>> >> | found. It contains the following insertion string(s):
>> >> \\.\root\cimv2,
>> >> | 0x80070005.
>> >> |
>> >> | Event Source: MRxSmb
>> >> | Event ID: 3019
>> >> |
>> >> | Then i go to My Computer > manage > WmiControll and right click and
>> >> choose
>> >> | properties, i get "Connecting to WMI" for forever (or at least 1
>> >> hour)
>> >> then
>> >> | i press cancel i get this error "Can't connect to <local Computer>,
>> >> | Win32:Access Denied
>> >> |
>> >> | I get this error on almost every computer in the domain, is it
>> >> becouse
>> >> of
>> >> a
>> >> | faulty Group Policy settings or because of something i installed
>> >> from
>> >> | microsoft *grin* ??
>> >> |
>> >> | On computers there the WMI are working i can't connect to another
>> >> computers
>> >> | WMI, Getting that everlasting timeout. ..
>> >> |
>> >> | Need help with this, Becouse everything depending on wmi looks like
>> >> it's
>> >> not
>> >> | working..
>> >> |
>> >> | Jonas Haggren
>> >> | Sys Mgr.
>> >> |
>> >> |
>> >> |
>> >> |
>> >>
>> >
>> >
>>
>>
>>

Reply With Quote
Andre Monaghan
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 04-13-2006, 01:38 AM

Can you be more specific? I have exactly the same problem you're
describing. Of the many "solutions" I have tried, nothing has worked
for me. I'm convinced it must be something to do with Group Policy as a
huge number of our XP systems have started logging Userenv 1090 errors.

Andre.

Jonas Haggren wrote:
> Yes. I solved it..
>
> It turned out that i have set Security Restrictions for the WMI Service..
>
> /Jonas
>
>
> "MadMax" <MadMax@discussions.microsoft.com> skrev i meddelandet
> news:178C3C36-B4D1-423A-8ED3-694284D134B6@microsoft.com...
>> Did you ever resolve this problem? Mine is exactly the same including the
>> windows firewall problem, except I am in a workgroup. Very frustrating!!
>>
>> "Jonas Haggren" wrote:
>>
>>> Hi thanks for the answers.. I will answer your questions / suggestions
>>> below..
>>>
>>> I try to translate the events into english..
>>>
>>> /Jonas
>>>
>>> "Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
>>> news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
>>>> Dear Jonas,
>>>>
>>>> Thanks for posting!
>>>>
>>>> I understand that you received WMI access deniel error. If I have
>>>> misunderstood your concerns please feel free to let me know.
>>>>
>>>> Before we go further please help to confirm the following information.
>>>>
>>>> 1. What happened before the issue occured?
>>>> Don't know, i payed attention to the problem, then i was trying to
>>>> install
>>>> the SMS clients on the computers.
>>>>
>>>>
>>>> 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you using
>>>> Windows XP clients in the domain?
>>> Windows 2K3 and Windows XP Clients
>>>
>>>> 3. Do all the Windows XP Clinets experience the issue?
>>> Yes, More or less. But all have problems with WMI.
>>>
>>>> I suggest you perform the following methods
>>>>
>>>> Suggestion 1. Update DCs and clients to the latest version.
>>> They are all updated. (Maybe to much, do you know any issues with the
>>> latest
>>> SP and quickfixes?
>>>
>>>> Suggestion 2. It could be that there is a problem with WMI on the
>>>> machine.
>>>> You can try recreating some of the WMI files using the steps below:
>>>>
>>>> 1 Stop the Windows Management Instrumentation service.
>>>> 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
>>>> 3. Delete all of the files that are in the
>>>> %SystemRoot%\System32\Wbem\Repository folder.
>>>> 4 Restart the computer. The files that were deleted are recreated when
>>>> the
>>>> computer restarts.
>>>> The Windows Management Instrumentation service will start automatically
>>>> when you restart the computer".
>>>>
>>>> More information for your reference:
>>>>
>>>> 875605 How to troubleshoot WMI-related issues in Windows XP SP2
>>>> <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
>>> The repository are NOT RECREATING, the folder is still empty after
>>> restarting the computer..
>>> I don't get anything in the Eventlog eather about the problem. The
>>> events i
>>> get is these:
>>>
>>> Event Type: Warning
>>> Event Source: MRxSmb
>>> Event Category: None
>>> Event ID: 3019
>>>
>>> Event Type: Warning
>>> Event Source: Dhcp
>>> Event Category: None
>>> Event ID: 1003
>>>
>>> Event Type: Error
>>> Event Source: Userenv
>>> Event Category: None
>>> Event ID: 1090
>>>
>>> Event Type: Audit Failure
>>> Event Source: Security
>>> Event Category: Detaljerad spårning
>>> Event ID: 861
>>> Description:
>>> Windows firewall discovered a program is listening on incoming traffic
>>>
>>> Name: -
>>> path: C:\WINDOWS\system32\lsass.exe
>>> Processid: 712
>>> User Account: SYSTEM
>>> User Domain: NT INSTANS
>>> Service: Ja
>>> RPC-server: Nej
>>> IP-version: IPv4
>>> IP-protocoll: UDP
>>> Port: 1208
>>> Allowed: No
>>> User notifed: No
>>>
>>> I just noticed that the Windows Firewall on the Client is broken
>>> somehow,
>>> (It is shutdown but the Service is running), if i go to the Control
>>> Panel >
>>> Windows Firewall > Advanced, it tells me that the Network is broken, and
>>> i
>>> can fix it with pushing the button "Default Settings", But it does not
>>> help
>>> to push that button..
>>>
>>> Something seems to be awfully wrong.. And it seems to come from a faulty
>>> GP
>>> somewhere that brakes every computer..
>>>
>>> Needing more help to find the
>>> /Jonas
>>>
>>>
>>>>> --------------------
>>>>> | From: "Jonas Haggren" <evolver@news.postalias>
>>>>> | Subject: Huge WMI / DCOM / Security problem..
>>>>> | Date: Tue, 14 Feb 2006 10:56:17 +0100
>>>>> | Lines: 55
>>>>> | X-Priority: 3
>>>>> | X-MSMail-Priority: Normal
>>>>> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>>> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>>> | X-RFC2646: Format=Flowed; Original
>>>>> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
>>>>> | Newsgroups:
>>>>> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
>>>>> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
>>>>> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
>>>>> | Path:
>>>>> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
>>>>> | Xref: TK2MSFTNGXA01.phx.gbl
>>>>> microsoft.public.windows.server.general:88705
>>>>> microsoft.public.windowsxp.general:1451858
>>>>> microsoft.public.windowsxp.wmi:4258
>>>>> microsoft.public.windows.group_policy:18878
>>>>> | X-Tomcat-NG: microsoft.public.windowsxp.general
>>>>> |
>>>>> | I have got into a huge WMI / DCOM / Security problem.
>>>>> |
>>>>> | The WMI is not working becouse of i get "access Denied".
>>>>> |
>>>>> | I have trying to reset the WMI by deleteing the repository, But the
>>>>> | repository directory is not recreating
>>>>> | Trying to register all the .dll and .exe files again in the wbem
>>>>> | direcotory, - No luck
>>>>> | and trying to reinstalling the WMI - No luck there eather (followed
>>>>> this
>>>>> | http://windowsxp.mvps.org/repairwmi.htm)
>>>>> |
>>>>> | Then i run Gpresults or rsop i get "Access Denied, Unknown username
>>>>> or
>>>>> | password", Even then i am logged in as Domain Admin
>>>>> |
>>>>> | rsop.msc giving me "Access Denied"
>>>>> |
>>>>> | The errors i get in the event Log is these:
>>>>> |
>>>>> | Event ID: 1090 Source Userenv
>>>>> | Trying to connet to WMI failed
>>>>> |
>>>>> | Event Source: WinMgmt
>>>>> | Event ID: 60
>>>>> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not
>>>>> be
>>>>> | found. It contains the following insertion string(s): 0x80041001.
>>>>> |
>>>>> | Event Source: WinMgmt
>>>>> | Event ID: 43
>>>>> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not
>>>>> be
>>>>> | found. It contains the following insertion string(s):
>>>>> \\.\root\cimv2,
>>>>> | 0x80070005.
>>>>> |
>>>>> | Event Source: MRxSmb
>>>>> | Event ID: 3019
>>>>> |
>>>>> | Then i go to My Computer > manage > WmiControll and right click and
>>>>> choose
>>>>> | properties, i get "Connecting to WMI" for forever (or at least 1
>>>>> hour)
>>>>> then
>>>>> | i press cancel i get this error "Can't connect to <local Computer>,
>>>>> | Win32:Access Denied
>>>>> |
>>>>> | I get this error on almost every computer in the domain, is it
>>>>> becouse
>>>>> of
>>>>> a
>>>>> | faulty Group Policy settings or because of something i installed
>>>>> from
>>>>> | microsoft *grin* ??
>>>>> |
>>>>> | On computers there the WMI are working i can't connect to another
>>>>> computers
>>>>> | WMI, Getting that everlasting timeout. ..
>>>>> |
>>>>> | Need help with this, Becouse everything depending on wmi looks like
>>>>> it's
>>>>> not
>>>>> | working..
>>>>> |
>>>>> | Jonas Haggren
>>>>> | Sys Mgr.
>>>>> |
>>>>> |
>>>>> |
>>>>> |
>>>>>
>>>>
>>>
>>>
>
>
Reply With Quote
Jonas Haggren
Guest
Posts: n/a
 
Re: Huge WMI / DCOM / Security problem..
Posted: 04-18-2006, 08:14 AM
Hi Andre.

Yes the problem exist in Group Policy.

To solve the problem make sure that none group policy has configured Windows
Management Instrumation (The default security settings will make the Windows
Management Instrumentation unusable if you configure it from Group Policy)

(You can find this settings on Group Policy > Computer Configuration >
Windows Settings > Security > Services > Windows Management Instrumention
And Windows Management Instrumention Driver Extensions

Make these two services "Not Configured"

Jonas Haggren
System Manager


"Andre Monaghan" <bogus@bogus.com> skrev i meddelandet
news:OY7ecKpXGHA.3936@TK2MSFTNGP05.phx.gbl...
>
> Can you be more specific? I have exactly the same problem you're
> describing. Of the many "solutions" I have tried, nothing has worked for
> me. I'm convinced it must be something to do with Group Policy as a huge
> number of our XP systems have started logging Userenv 1090 errors.
>
> Andre.
>
> Jonas Haggren wrote:
>> Yes. I solved it..
>>
>> It turned out that i have set Security Restrictions for the WMI Service..
>>
>> /Jonas
>>
>>
>> "MadMax" <MadMax@discussions.microsoft.com> skrev i meddelandet
>> news:178C3C36-B4D1-423A-8ED3-694284D134B6@microsoft.com...
>>> Did you ever resolve this problem? Mine is exactly the same including
>>> the
>>> windows firewall problem, except I am in a workgroup. Very
>>> frustrating!!
>>>
>>> "Jonas Haggren" wrote:
>>>
>>>> Hi thanks for the answers.. I will answer your questions / suggestions
>>>> below..
>>>>
>>>> I try to translate the events into english..
>>>>
>>>> /Jonas
>>>>
>>>> "Jason Tan (MSFT)" <v-jasont@online.microsoft.com> skrev i meddelandet
>>>> news:libdCsgMGHA.2336@TK2MSFTNGXA01.phx.gbl...
>>>>> Dear Jonas,
>>>>>
>>>>> Thanks for posting!
>>>>>
>>>>> I understand that you received WMI access deniel error. If I have
>>>>> misunderstood your concerns please feel free to let me know.
>>>>>
>>>>> Before we go further please help to confirm the following information.
>>>>>
>>>>> 1. What happened before the issue occured?
>>>>> Don't know, i payed attention to the problem, then i was trying to
>>>>> install
>>>>> the SMS clients on the computers.
>>>>>
>>>>>
>>>>> 2. Are you using Windows 2K domain or Windows 2K3 domain? Are you
>>>>> using
>>>>> Windows XP clients in the domain?
>>>> Windows 2K3 and Windows XP Clients
>>>>
>>>>> 3. Do all the Windows XP Clinets experience the issue?
>>>> Yes, More or less. But all have problems with WMI.
>>>>
>>>>> I suggest you perform the following methods
>>>>>
>>>>> Suggestion 1. Update DCs and clients to the latest version.
>>>> They are all updated. (Maybe to much, do you know any issues with the
>>>> latest
>>>> SP and quickfixes?
>>>>
>>>>> Suggestion 2. It could be that there is a problem with WMI on the
>>>>> machine.
>>>>> You can try recreating some of the WMI files using the steps below:
>>>>>
>>>>> 1 Stop the Windows Management Instrumentation service.
>>>>> 2 Go to the %SystemRoot%\System32\Wbem\Repository folder.
>>>>> 3. Delete all of the files that are in the
>>>>> %SystemRoot%\System32\Wbem\Repository folder.
>>>>> 4 Restart the computer. The files that were deleted are recreated when
>>>>> the
>>>>> computer restarts.
>>>>> The Windows Management Instrumentation service will start
>>>>> automatically
>>>>> when you restart the computer".
>>>>>
>>>>> More information for your reference:
>>>>>
>>>>> 875605 How to troubleshoot WMI-related issues in Windows XP SP2
>>>>> <http://support.microsoft.com/default.aspx?scid=kb;EN-US;875605>
>>>> The repository are NOT RECREATING, the folder is still empty after
>>>> restarting the computer..
>>>> I don't get anything in the Eventlog eather about the problem. The
>>>> events i
>>>> get is these:
>>>>
>>>> Event Type: Warning
>>>> Event Source: MRxSmb
>>>> Event Category: None
>>>> Event ID: 3019
>>>>
>>>> Event Type: Warning
>>>> Event Source: Dhcp
>>>> Event Category: None
>>>> Event ID: 1003
>>>>
>>>> Event Type: Error
>>>> Event Source: Userenv
>>>> Event Category: None
>>>> Event ID: 1090
>>>>
>>>> Event Type: Audit Failure
>>>> Event Source: Security
>>>> Event Category: Detaljerad spårning
>>>> Event ID: 861
>>>> Description:
>>>> Windows firewall discovered a program is listening on incoming traffic
>>>>
>>>> Name: -
>>>> path: C:\WINDOWS\system32\lsass.exe
>>>> Processid: 712
>>>> User Account: SYSTEM
>>>> User Domain: NT INSTANS
>>>> Service: Ja
>>>> RPC-server: Nej
>>>> IP-version: IPv4
>>>> IP-protocoll: UDP
>>>> Port: 1208
>>>> Allowed: No
>>>> User notifed: No
>>>>
>>>> I just noticed that the Windows Firewall on the Client is broken
>>>> somehow,
>>>> (It is shutdown but the Service is running), if i go to the Control
>>>> Panel >
>>>> Windows Firewall > Advanced, it tells me that the Network is broken,
>>>> and i
>>>> can fix it with pushing the button "Default Settings", But it does not
>>>> help
>>>> to push that button..
>>>>
>>>> Something seems to be awfully wrong.. And it seems to come from a
>>>> faulty GP
>>>> somewhere that brakes every computer..
>>>>
>>>> Needing more help to find the
>>>> /Jonas
>>>>
>>>>
>>>>>> --------------------
>>>>>> | From: "Jonas Haggren" <evolver@news.postalias>
>>>>>> | Subject: Huge WMI / DCOM / Security problem..
>>>>>> | Date: Tue, 14 Feb 2006 10:56:17 +0100
>>>>>> | Lines: 55
>>>>>> | X-Priority: 3
>>>>>> | X-MSMail-Priority: Normal
>>>>>> | X-Newsreader: Microsoft Outlook Express 6.00.2900.2527
>>>>>> | X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2900.2527
>>>>>> | X-RFC2646: Format=Flowed; Original
>>>>>> | Message-ID: <e15GozUMGHA.2316@TK2MSFTNGP11.phx.gbl>
>>>>>> | Newsgroups:
>>>>>> microsoft.public.windows.group_policy,microsoft.pu blic.windows.server.genera
>>>>>> l,microsoft.public.windowsxp.general,microsoft.pub lic.windowsxp.wmi
>>>>>> | NNTP-Posting-Host: mail3.livetsord.se 213.115.251.132
>>>>>> | Path:
>>>>>> TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!TK2MSFT NGP11.phx.gbl
>>>>>> | Xref: TK2MSFTNGXA01.phx.gbl
>>>>>> microsoft.public.windows.server.general:88705
>>>>>> microsoft.public.windowsxp.general:1451858
>>>>>> microsoft.public.windowsxp.wmi:4258
>>>>>> microsoft.public.windows.group_policy:18878
>>>>>> | X-Tomcat-NG: microsoft.public.windowsxp.general
>>>>>> |
>>>>>> | I have got into a huge WMI / DCOM / Security problem.
>>>>>> |
>>>>>> | The WMI is not working becouse of i get "access Denied".
>>>>>> |
>>>>>> | I have trying to reset the WMI by deleteing the repository, But the
>>>>>> | repository directory is not recreating
>>>>>> | Trying to register all the .dll and .exe files again in the wbem
>>>>>> | direcotory, - No luck
>>>>>> | and trying to reinstalling the WMI - No luck there eather
>>>>>> (followed
>>>>>> this
>>>>>> | http://windowsxp.mvps.org/repairwmi.htm)
>>>>>> |
>>>>>> | Then i run Gpresults or rsop i get "Access Denied, Unknown username
>>>>>> or
>>>>>> | password", Even then i am logged in as Domain Admin
>>>>>> |
>>>>>> | rsop.msc giving me "Access Denied"
>>>>>> |
>>>>>> | The errors i get in the event Log is these:
>>>>>> |
>>>>>> | Event ID: 1090 Source Userenv
>>>>>> | Trying to connet to WMI failed
>>>>>> |
>>>>>> | Event Source: WinMgmt
>>>>>> | Event ID: 60
>>>>>> | The description for Event ID ( 60 ) in Source ( WinMgmt ) could not
>>>>>> be
>>>>>> | found. It contains the following insertion string(s): 0x80041001.
>>>>>> |
>>>>>> | Event Source: WinMgmt
>>>>>> | Event ID: 43
>>>>>> | The description for Event ID ( 43 ) in Source ( WinMgmt ) could not
>>>>>> be
>>>>>> | found. It contains the following insertion string(s):
>>>>>> \\.\root\cimv2,
>>>>>> | 0x80070005.
>>>>>> |
>>>>>> | Event Source: MRxSmb
>>>>>> | Event ID: 3019
>>>>>> |
>>>>>> | Then i go to My Computer > manage > WmiControll and right click and
>>>>>> choose
>>>>>> | properties, i get "Connecting to WMI" for forever (or at least 1
>>>>>> hour)
>>>>>> then
>>>>>> | i press cancel i get this error "Can't connect to <local Computer>,
>>>>>> | Win32:Access Denied
>>>>>> |
>>>>>> | I get this error on almost every computer in the domain, is it
>>>>>> becouse
>>>>>> of
>>>>>> a
>>>>>> | faulty Group Policy settings or because of something i installed
>>>>>> from
>>>>>> | microsoft *grin* ??
>>>>>> |
>>>>>> | On computers there the WMI are working i can't connect to another
>>>>>> computers
>>>>>> | WMI, Getting that everlasting timeout. ..
>>>>>> |
>>>>>> | Need help with this, Becouse everything depending on wmi looks like
>>>>>> it's
>>>>>> not
>>>>>> | working..
>>>>>> |
>>>>>> | Jonas Haggren
>>>>>> | Sys Mgr.
>>>>>> |
>>>>>> |
>>>>>> |
>>>>>> |
>>>>>>
>>>>>
>>>>
>>>>
>>
Reply With Quote
 
LinkBack Thread Tools Display Modes
Reply

« Microsoft Picture it! 2002 Load Error | WMI and ADSI »

Thread Tools
Display Modes
Linear Mode Linear Mode

Posting Rules
You may not post new threads
You may post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are On


Similar Threads
Thread Thread Starter Forum Replies Last Post
DCOM/RPC problem after WinXP SP2 install Warren Massey Windows XP Configuration & Management 10 02-23-2006 05:04 PM
SP2 Windows Security Center Problem smtjs Windows XP Configuration & Management 2 09-01-2004 10:25 AM
Font appearance all of a sudden is HUGE Sandman Windows XP Basics 5 07-20-2003 02:54 AM
Windows Upgrade, Huge problem? Michael Solomon \(MS-MVP-Windows Shell/User\) Windows XP Accessibility 0 07-15-2003 11:26 PM
Huge Logfile (16 GB and growing) Ben Blount Windows XP Performance & Maintenance 2 07-09-2003 05:51 PM


1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90