1. You are viewing our forum as a guest. For full access please Register. WindowsBBS.com is completely free, paid for by advertisers and donations.

Windows Firewall - Advanced Tab - Problem

Discussion in 'Security and Privacy' started by dcfrazel, 2007/08/10.

Page 3 of 4
  1. 2007/08/14
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    Hello Noahdfear:

    I installed the Comodo firewall a few days ago as insurance. I was concerned that perhaps the Windows Firewall wasn't working correctly.

    I've executed the two commands (WINMGMT.EXE /CLEARADAP and
    WINMGMT.EXE /RESYNCPERF) and run the WMI diagnostic tool again.

    I've included the .txt file (below) and will send the log file via email.
    -----------------------------------------------------

    17729 07:50:44 (0) ** WMIDiag v2.0 started on Tuesday, August 14, 2007 at 07:47.
    17730 07:50:44 (0) **
    17731 07:50:44 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - January 2007.
    17732 07:50:44 (0) **
    17733 07:50:44 (0) ** This script is not supported under any Microsoft standard support program or service.
    17734 07:50:44 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    17735 07:50:44 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    17736 07:50:44 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    17737 07:50:44 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    17738 07:50:44 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    17739 07:50:44 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    17740 07:50:44 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    17741 07:50:44 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    17742 07:50:44 (0) ** of the possibility of such damages.
    17743 07:50:44 (0) **
    17744 07:50:44 (0) **
    17745 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17746 07:50:44 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    17747 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17748 07:50:44 (0) **
    17749 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17750 07:50:44 (0) ** Windows XP - Service pack 2 - 32-bit (2600) - User 'DAVID-8B06329F0\DAVE' on computer 'DAVID-8B06329F0'.
    17751 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17752 07:50:44 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!
    17753 07:50:44 (0) ** INFO: => 2 incorrect shutdown(s) detected on:
    17754 07:50:44 (0) ** - Shutdown on 19 July 2007 19:53:23 (GMT+5).
    17755 07:50:44 (0) ** - Shutdown on 02 August 2007 12:52:07 (GMT+5).
    17756 07:50:44 (0) **
    17757 07:50:44 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #0).
    17758 07:50:44 (0) ** Drive type: ......................................................................................................... IDE (Maxtor 7Y250M0).
    17759 07:50:44 (0) ** There are no missing WMI system files: .............................................................................. OK.
    17760 07:50:44 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    17761 07:50:44 (0) ** WMI repository state: ............................................................................................... NOT TESTED.
    17762 07:50:44 (0) ** BEFORE running WMIDiag:
    17763 07:50:44 (0) ** The WMI repository has a size of: ................................................................................... 19 MB.
    17764 07:50:44 (0) ** - Disk free space on 'C:': .......................................................................................... 222331 MB.
    17765 07:50:44 (0) ** - INDEX.BTR, 1351680 bytes, 8/14/2007 7:43:24 AM
    17766 07:50:44 (0) ** - INDEX.MAP, 684 bytes, 8/14/2007 7:45:11 AM
    17767 07:50:44 (0) ** - MAPPING.VER, 4 bytes, 8/14/2007 7:45:12 AM
    17768 07:50:44 (0) ** - MAPPING1.MAP, 9988 bytes, 8/14/2007 7:43:56 AM
    17769 07:50:44 (0) ** - MAPPING2.MAP, 9988 bytes, 8/14/2007 7:45:12 AM
    17770 07:50:44 (0) ** - OBJECTS.DATA, 19005440 bytes, 8/14/2007 7:42:24 AM
    17771 07:50:44 (0) ** - OBJECTS.MAP, 9304 bytes, 8/14/2007 7:45:12 AM
    17772 07:50:44 (0) ** AFTER running WMIDiag:
    17773 07:50:44 (0) ** The WMI repository has a size of: ................................................................................... 19 MB.
    17774 07:50:44 (0) ** - Disk free space on 'C:': .......................................................................................... 222327 MB.
    17775 07:50:44 (0) ** - INDEX.BTR, 1351680 bytes, 8/14/2007 7:43:24 AM
    17776 07:50:44 (0) ** - INDEX.MAP, 684 bytes, 8/14/2007 7:45:11 AM
    17777 07:50:44 (0) ** - MAPPING.VER, 4 bytes, 8/14/2007 7:45:12 AM
    17778 07:50:44 (0) ** - MAPPING1.MAP, 9988 bytes, 8/14/2007 7:43:56 AM
    17779 07:50:44 (0) ** - MAPPING2.MAP, 9988 bytes, 8/14/2007 7:45:12 AM
    17780 07:50:44 (0) ** - OBJECTS.DATA, 19005440 bytes, 8/14/2007 7:42:24 AM
    17781 07:50:44 (0) ** - OBJECTS.MAP, 9304 bytes, 8/14/2007 7:45:12 AM
    17782 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17783 07:50:44 (0) ** INFO: Windows Firewall status: ...................................................................................... ENABLED.
    17784 07:50:44 (0) ** Windows Firewall Profile: ........................................................................................... STANDARD.
    17785 07:50:44 (0) ** Windows Firewall 'RemoteAdmin' status: .............................................................................. DISABLED.
    17786 07:50:44 (0) ** => This will prevent any WMI remote connectivity to this machine.
    17787 07:50:44 (0) ** - You can adjust the configuration by executing the following command:
    17788 07:50:44 (0) ** i.e. 'NETSH.EXE FIREWALL SET SERVICE REMOTEADMIN ENABLE SUBNET'
    17789 07:50:44 (0) **
    17790 07:50:44 (0) ** Windows Firewall application exception for 'UNSECAPP.EXE': .......................................................... MISSING.
    17791 07:50:44 (0) ** => This will prevent any script and MMC application asynchronous callbacks to this machine.
    17792 07:50:44 (0) ** - You can adjust the configuration by executing the following command:
    17793 07:50:44 (0) ** i.e. 'NETSH.EXE FIREWALL SET ALLOWEDPROGRAM C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE WMICALLBACKS ENABLE'
    17794 07:50:44 (0) **
    17795 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17796 07:50:44 (0) ** DCOM Status: ........................................................................................................ OK.
    17797 07:50:44 (0) ** WMI registry setup: ................................................................................................. OK.
    17798 07:50:44 (0) ** INFO: WMI service has dependents: ................................................................................... 2 SERVICE(S)!
    17799 07:50:44 (0) ** - Security Center (WSCSVC, StartMode='Automatic')
    17800 07:50:44 (0) ** - Windows Firewall/Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Automatic')
    17801 07:50:44 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    17802 07:50:44 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
    17803 07:50:44 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
    17804 07:50:44 (0) ** this can prevent the service/application to work as expected.
    17805 07:50:44 (0) **
    17806 07:50:44 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    17807 07:50:44 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    17808 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17809 07:50:44 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    17810 07:50:44 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    17811 07:50:44 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    17812 07:50:44 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    17813 07:50:44 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    17814 07:50:44 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    17815 07:50:44 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    17816 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17817 07:50:44 (0) ** Overall DCOM security status: ....................................................................................... OK.
    17818 07:50:44 (0) ** Overall WMI security status: ........................................................................................ OK.
    17819 07:50:44 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    17820 07:50:44 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
    17821 07:50:44 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name= "Microsoft WMI Updating Consumer Scenario Control ".
    17822 07:50:44 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
    17823 07:50:44 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name= "SCM Event Log Consumer ".
    17824 07:50:44 (0) ** 'select * from MSFT_SCMEventLogEvent'
    17825 07:50:44 (0) **
    17826 07:50:44 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    17827 07:50:44 (0) ** WMI ADAP status: .................................................................................................... OK.
    17828 07:50:44 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    17829 07:50:44 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    17830 07:50:44 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 4 ERROR(S)!
    17831 07:50:44 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17832 07:50:44 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17833 07:50:44 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17834 07:50:44 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17835 07:50:44 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17836 07:50:44 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17837 07:50:44 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17838 07:50:44 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17839 07:50:44 (0) **
    17840 07:50:44 (0) ** WMI MOF representations: ............................................................................................ OK.
    17841 07:50:44 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
    17842 07:50:44 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
    17843 07:50:44 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
    17844 07:50:44 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
    17845 07:50:44 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
    17846 07:50:44 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
    17847 07:50:44 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
    17848 07:50:44 (0) ** WMI static instances retrieved: ..................................................................................... 557.
    17849 07:50:44 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
    17850 07:50:44 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
    17851 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17852 07:50:44 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
    17853 07:50:44 (0) ** DCOM: ............................................................................................................. 23.
    17854 07:50:44 (0) ** WINMGMT: .......................................................................................................... 30.
    17855 07:50:44 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17856 07:50:44 (0) ** => Verify the WMIDiag LOG at line #17274 for more details.
    17857 07:50:44 (0) **
    17858 07:50:44 (0) ** # of additional Event Log events AFTER WMIDiag execution:
    17859 07:50:44 (0) ** DCOM: ............................................................................................................. 0.
    17860 07:50:44 (0) ** WINMGMT: .......................................................................................................... 0.
    17861 07:50:44 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17862 07:50:44 (0) **
    17863 07:50:44 (0) ** 4 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
    17864 07:50:44 (0) ** => This error is typically a WMI error. This WMI error is due to:
    17865 07:50:44 (0) ** - a missing WMI class definition or object.
    17866 07:50:44 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
    17867 07:50:44 (0) ** You can correct the missing class definitions by:
    17868 07:50:44 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
    17869 07:50:44 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
    17870 07:50:44 (0) ** (This list can be built on a similar and working WMI Windows installation)
    17871 07:50:44 (0) ** The following command line must be used:
    17872 07:50:44 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
    17873 07:50:44 (0) ** - a WMI repository corruption.
    17874 07:50:44 (0) ** Under Windows XP SP2, you can validate the repository consistency
    17875 07:50:44 (0) ** by executing the following command:
    17876 07:50:44 (0) ** i.e. 'WMIDiag CheckConsistency'
    17877 07:50:44 (0) ** Note: Under Windows XP SP2, when the repository is checked and detected INCONSISTENT,
    17878 07:50:44 (0) ** a new repository is automatically re-created based on Auto-Recovery mechanism.
    17879 07:50:44 (0) ** Note that some information can be lost during this process (i.e. static data, CIM registration).
    17880 07:50:44 (0) ** However, the original repository is located at 'C:\WINDOWS\SYSTEM32\WBEM\Repository.001'.
    17881 07:50:44 (0) ** The computer must be rebooted for the system to work with the re-created repository.
    17882 07:50:44 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
    17883 07:50:44 (0) ** otherwise some applications may fail after the reconstruction.
    17884 07:50:44 (0) ** This can be achieved with the following command:
    17885 07:50:44 (0) ** i.e. 'WMIDiag ShowMOFErrors'
    17886 07:50:44 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
    17887 07:50:44 (0) ** ALL fixes previously mentioned.
    17888 07:50:44 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
    17889 07:50:44 (0) **
    17890 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17891 07:50:44 (0) ** WMI Registry key setup: ............................................................................................. OK.
    17892 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17893 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17894 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17895 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17896 07:50:44 (0) **
    17897 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17898 07:50:44 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
    17899 07:50:44 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17900 07:50:44 (0) **
    17901 07:50:44 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\DAVE\LOCAL SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.SP2.32_DAVID-8B06329F0_2007.08.14_07.46.55.LOG' for details.
    17902 07:50:44 (0) **
    17903 07:50:44 (0) ** WMIDiag v2.0 ended on Tuesday, August 14, 2007 at 07:50 (W:52 E:5 S:1).
     
    dcfrazel,
    #41
  2. 2007/08/14
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    That's progress at least: from 8 errors down to 4 :)

    It appears the other 4 might be fixed by running the following command, but I feel a bit more research and understanding is in order before carrying out the procedure.

    MOFCOMP SR.MOF

    I'll look at the log this evening.
     
    noahdfear,
    #42


  3. to hide this advert.

  4. 2007/08/14
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    OK, I'll stand by. I have jury duty tomorrow so probably won't be able to try anything new till tomorrow night. Sounds like you got the log file - good.
     
    dcfrazel,
    #43
  5. 2007/08/14
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    The following files are missing from your system, and therefore did not get re-registered when you did the comprehensive repair. They show in the log as 'Failed to load while recovering repository file'.

    C:\WINDOWS\SYSTEM32\WBEM\DGNET.MOF
    C:\WINDOWS\SYSTEM32\WBEM\HNETCFG.MOF
    C:\WINDOWS\SYSTEM32\WBEM\IEINFO5.MOF
    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MFL
    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MOF
    C:\WINDOWS\SYSTEM32\WBEM\SCERSOP.MOF
    C:\WINDOWS\SYSTEM32\WBEM\SR.MOF
    C:\WINDOWS\SYSTEM32\WBEM\TSCFGWMI.MFL
    C:\WINDOWS\SYSTEM32\WBEM\TSCFGWMI.MOF
    C:\WINDOWS\SYSTEM32\WBEM\WSCENTER.MOF

    They are all default XP SP2 files and by default have the statement in them that marks them for autorecovery when the repository is rebuilt. I've checked the files on 3 different installations, and their contents are exactly the same on each. That in mind, I recommend you copy those files over from your other computer, then run the WMIDiag tool again. If the errors persist, I'll post instructions for running it in such a way that it will again rebuild the repository on reboot if inconsistencies are found.
     
    noahdfear,
    #44
  6. 2007/08/15
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    My laptop has all the files except for the three listed below - these are not present:

    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MFL
    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MOF
    C:\WINDOWS\SYSTEM32\WBEM\SCERSOP.MOF

    Should I proceed as directed with the other files or do you have another
    plan?
     
    dcfrazel,
    #45
  7. 2007/08/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Yes, please do. :)
     
    noahdfear,
    #46
  8. 2007/08/15
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    Hi again:

    Did as you directed...........here's the .txt file. As before, I'll send the log file via email.

    ---------17837 12:53:40 (0) ** WMIDiag v2.0 started on Wednesday, August 15, 2007 at 12:50.
    17838 12:53:40 (0) **
    17839 12:53:40 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - January 2007.
    17840 12:53:40 (0) **
    17841 12:53:40 (0) ** This script is not supported under any Microsoft standard support program or service.
    17842 12:53:40 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    17843 12:53:40 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    17844 12:53:40 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    17845 12:53:40 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    17846 12:53:40 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    17847 12:53:40 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    17848 12:53:40 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    17849 12:53:40 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    17850 12:53:40 (0) ** of the possibility of such damages.
    17851 12:53:40 (0) **
    17852 12:53:40 (0) **
    17853 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17854 12:53:40 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    17855 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17856 12:53:40 (0) **
    17857 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17858 12:53:40 (0) ** Windows XP - Service pack 2 - 32-bit (2600) - User 'DAVID-8B06329F0\DAVE' on computer 'DAVID-8B06329F0'.
    17859 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17860 12:53:40 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!
    17861 12:53:40 (0) ** INFO: => 2 incorrect shutdown(s) detected on:
    17862 12:53:40 (0) ** - Shutdown on 19 July 2007 19:53:23 (GMT+5).
    17863 12:53:40 (0) ** - Shutdown on 02 August 2007 12:52:07 (GMT+5).
    17864 12:53:40 (0) **
    17865 12:53:40 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #0).
    17866 12:53:40 (0) ** Drive type: ......................................................................................................... IDE (Maxtor 7Y250M0).
    17867 12:53:40 (0) ** There are no missing WMI system files: .............................................................................. OK.
    17868 12:53:40 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    17869 12:53:40 (0) ** WMI repository state: ............................................................................................... NOT TESTED.
    17870 12:53:40 (0) ** BEFORE running WMIDiag:
    17871 12:53:40 (0) ** The WMI repository has a size of: ................................................................................... 19 MB.
    17872 12:53:40 (0) ** - Disk free space on 'C:': .......................................................................................... 221980 MB.
    17873 12:53:40 (0) ** - INDEX.BTR, 1351680 bytes, 8/14/2007 7:43:24 AM
    17874 12:53:40 (0) ** - INDEX.MAP, 684 bytes, 8/15/2007 12:47:59 PM
    17875 12:53:40 (0) ** - MAPPING.VER, 4 bytes, 8/15/2007 12:47:59 PM
    17876 12:53:40 (0) ** - MAPPING1.MAP, 9988 bytes, 8/15/2007 12:47:59 PM
    17877 12:53:40 (0) ** - MAPPING2.MAP, 9988 bytes, 8/15/2007 12:46:50 PM
    17878 12:53:40 (0) ** - OBJECTS.DATA, 19005440 bytes, 8/14/2007 7:42:24 AM
    17879 12:53:40 (0) ** - OBJECTS.MAP, 9304 bytes, 8/15/2007 12:47:59 PM
    17880 12:53:40 (0) ** AFTER running WMIDiag:
    17881 12:53:40 (0) ** The WMI repository has a size of: ................................................................................... 19 MB.
    17882 12:53:40 (0) ** - Disk free space on 'C:': .......................................................................................... 221978 MB.
    17883 12:53:40 (0) ** - INDEX.BTR, 1351680 bytes, 8/14/2007 7:43:24 AM
    17884 12:53:40 (0) ** - INDEX.MAP, 684 bytes, 8/15/2007 12:47:59 PM
    17885 12:53:40 (0) ** - MAPPING.VER, 4 bytes, 8/15/2007 12:47:59 PM
    17886 12:53:40 (0) ** - MAPPING1.MAP, 9988 bytes, 8/15/2007 12:47:59 PM
    17887 12:53:40 (0) ** - MAPPING2.MAP, 9988 bytes, 8/15/2007 12:46:50 PM
    17888 12:53:40 (0) ** - OBJECTS.DATA, 19005440 bytes, 8/14/2007 7:42:24 AM
    17889 12:53:40 (0) ** - OBJECTS.MAP, 9304 bytes, 8/15/2007 12:47:59 PM
    17890 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17891 12:53:40 (0) ** INFO: Windows Firewall status: ...................................................................................... ENABLED.
    17892 12:53:40 (0) ** Windows Firewall Profile: ........................................................................................... STANDARD.
    17893 12:53:40 (0) ** Windows Firewall 'RemoteAdmin' status: .............................................................................. DISABLED.
    17894 12:53:40 (0) ** => This will prevent any WMI remote connectivity to this machine.
    17895 12:53:40 (0) ** - You can adjust the configuration by executing the following command:
    17896 12:53:40 (0) ** i.e. 'NETSH.EXE FIREWALL SET SERVICE REMOTEADMIN ENABLE SUBNET'
    17897 12:53:40 (0) **
    17898 12:53:40 (0) ** Windows Firewall application exception for 'UNSECAPP.EXE': .......................................................... MISSING.
    17899 12:53:40 (0) ** => This will prevent any script and MMC application asynchronous callbacks to this machine.
    17900 12:53:40 (0) ** - You can adjust the configuration by executing the following command:
    17901 12:53:40 (0) ** i.e. 'NETSH.EXE FIREWALL SET ALLOWEDPROGRAM C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE WMICALLBACKS ENABLE'
    17902 12:53:40 (0) **
    17903 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17904 12:53:40 (0) ** DCOM Status: ........................................................................................................ OK.
    17905 12:53:40 (0) ** WMI registry setup: ................................................................................................. OK.
    17906 12:53:40 (0) ** INFO: WMI service has dependents: ................................................................................... 2 SERVICE(S)!
    17907 12:53:40 (0) ** - Security Center (WSCSVC, StartMode='Automatic')
    17908 12:53:40 (0) ** - Windows Firewall/Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Automatic')
    17909 12:53:40 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    17910 12:53:40 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
    17911 12:53:40 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
    17912 12:53:40 (0) ** this can prevent the service/application to work as expected.
    17913 12:53:40 (0) **
    17914 12:53:40 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    17915 12:53:40 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    17916 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17917 12:53:40 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    17918 12:53:40 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    17919 12:53:40 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    17920 12:53:40 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    17921 12:53:40 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    17922 12:53:40 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    17923 12:53:40 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    17924 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17925 12:53:40 (0) ** Overall DCOM security status: ....................................................................................... OK.
    17926 12:53:40 (0) ** Overall WMI security status: ........................................................................................ OK.
    17927 12:53:40 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    17928 12:53:40 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
    17929 12:53:40 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name= "Microsoft WMI Updating Consumer Scenario Control ".
    17930 12:53:40 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
    17931 12:53:40 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name= "SCM Event Log Consumer ".
    17932 12:53:40 (0) ** 'select * from MSFT_SCMEventLogEvent'
    17933 12:53:40 (0) **
    17934 12:53:40 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    17935 12:53:40 (0) ** WMI ADAP status: .................................................................................................... OK.
    17936 12:53:40 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    17937 12:53:40 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    17938 12:53:40 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 4 ERROR(S)!
    17939 12:53:40 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17940 12:53:40 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17941 12:53:40 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17942 12:53:40 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17943 12:53:40 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17944 12:53:40 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17945 12:53:40 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17946 12:53:40 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17947 12:53:40 (0) **
    17948 12:53:40 (0) ** WMI MOF representations: ............................................................................................ OK.
    17949 12:53:40 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
    17950 12:53:40 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
    17951 12:53:40 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
    17952 12:53:40 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
    17953 12:53:40 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
    17954 12:53:40 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
    17955 12:53:40 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
    17956 12:53:40 (0) ** WMI static instances retrieved: ..................................................................................... 557.
    17957 12:53:40 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
    17958 12:53:40 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
    17959 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17960 12:53:40 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
    17961 12:53:40 (0) ** DCOM: ............................................................................................................. 22.
    17962 12:53:40 (0) ** WINMGMT: .......................................................................................................... 30.
    17963 12:53:40 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17964 12:53:40 (0) ** => Verify the WMIDiag LOG at line #17385 for more details.
    17965 12:53:40 (0) **
    17966 12:53:40 (0) ** # of additional Event Log events AFTER WMIDiag execution:
    17967 12:53:40 (0) ** DCOM: ............................................................................................................. 0.
    17968 12:53:40 (0) ** WINMGMT: .......................................................................................................... 0.
    17969 12:53:40 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17970 12:53:40 (0) **
    17971 12:53:40 (0) ** 4 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
    17972 12:53:40 (0) ** => This error is typically a WMI error. This WMI error is due to:
    17973 12:53:40 (0) ** - a missing WMI class definition or object.
    17974 12:53:40 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
    17975 12:53:40 (0) ** You can correct the missing class definitions by:
    17976 12:53:40 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
    17977 12:53:40 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
    17978 12:53:40 (0) ** (This list can be built on a similar and working WMI Windows installation)
    17979 12:53:40 (0) ** The following command line must be used:
    17980 12:53:40 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
    17981 12:53:40 (0) ** - a WMI repository corruption.
    17982 12:53:40 (0) ** Under Windows XP SP2, you can validate the repository consistency
    17983 12:53:40 (0) ** by executing the following command:
    17984 12:53:40 (0) ** i.e. 'WMIDiag CheckConsistency'
    17985 12:53:40 (0) ** Note: Under Windows XP SP2, when the repository is checked and detected INCONSISTENT,
    17986 12:53:40 (0) ** a new repository is automatically re-created based on Auto-Recovery mechanism.
    17987 12:53:40 (0) ** Note that some information can be lost during this process (i.e. static data, CIM registration).
    17988 12:53:40 (0) ** However, the original repository is located at 'C:\WINDOWS\SYSTEM32\WBEM\Repository.001'.
    17989 12:53:40 (0) ** The computer must be rebooted for the system to work with the re-created repository.
    17990 12:53:40 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
    17991 12:53:40 (0) ** otherwise some applications may fail after the reconstruction.
    17992 12:53:40 (0) ** This can be achieved with the following command:
    17993 12:53:40 (0) ** i.e. 'WMIDiag ShowMOFErrors'
    17994 12:53:40 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
    17995 12:53:40 (0) ** ALL fixes previously mentioned.
    17996 12:53:40 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
    17997 12:53:40 (0) **
    17998 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17999 12:53:40 (0) ** WMI Registry key setup: ............................................................................................. OK.
    18000 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18001 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18002 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18003 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18004 12:53:40 (0) **
    18005 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18006 12:53:40 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
    18007 12:53:40 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18008 12:53:40 (0) **
    18009 12:53:40 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\DAVE\LOCAL SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.SP2.32_DAVID-8B06329F0_2007.08.15_12.50.20.LOG' for details.
    18010 12:53:40 (0) **
    18011 12:53:40 (0) ** WMIDiag v2.0 ended on Wednesday, August 15, 2007 at 12:53 (W:60 E:5 S:1).
    -----------------------------------------
     
    dcfrazel,
    #47
  9. 2007/08/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Need you to grab some info from the registry. Navigate to the following location.

    HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\WBEM\CIMOM

    Click the CIMOM key, then locate the value Autorecover MOFs in the right pane. Double click on it. The entries in the popup will all be selected. Right click within the popup and select Copy, then click Cancel so that no changes are made. Close the registry editor. Open a reply here and paste the info from the clipboard.
     
    noahdfear,
    #48
  10. 2007/08/15
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    This message contained bogus information. I think I've deleted it
     
    Last edited: 2007/08/15
    dcfrazel,
    #49
  11. 2007/08/15
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    OOOOOOOOOOOOPS - Please ignore my last message. Here's the correct info.

    C:\WINDOWS\system32\WBEM\cimwin32.mof
    C:\WINDOWS\system32\WBEM\cimwin32.mfl
    C:\WINDOWS\system32\WBEM\system.mof
    C:\WINDOWS\system32\WBEM\wmipcima.mof
    C:\WINDOWS\system32\WBEM\wmipcima.mfl
    C:\WINDOWS\system32\WBEM\regevent.mof
    C:\WINDOWS\system32\WBEM\regevent.mfl
    C:\WINDOWS\system32\WBEM\ntevt.mof
    C:\WINDOWS\system32\WBEM\ntevt.mfl
    C:\WINDOWS\system32\WBEM\secrcw32.mof
    C:\WINDOWS\system32\WBEM\secrcw32.mfl
    C:\WINDOWS\system32\WBEM\dsprov.mof
    C:\WINDOWS\system32\WBEM\dsprov.mfl
    C:\WINDOWS\system32\WBEM\msi.mof
    C:\WINDOWS\system32\WBEM\msi.mfl
    C:\WINDOWS\system32\WBEM\policman.mof
    C:\WINDOWS\system32\WBEM\policman.mfl
    C:\WINDOWS\system32\WBEM\subscrpt.mof
    C:\WINDOWS\system32\WBEM\wmi.mof
    C:\WINDOWS\system32\WBEM\wmi.mfl
    C:\WINDOWS\system32\WBEM\scm.mof
    C:\WINDOWS\system32\WBEM\fevprov.mof
    C:\WINDOWS\system32\WBEM\fevprov.mfl
    C:\WINDOWS\system32\WBEM\wmitimep.mof
    C:\WINDOWS\system32\WBEM\wmitimep.mfl
    C:\WINDOWS\system32\WBEM\wmipdskq.mof
    C:\WINDOWS\system32\WBEM\wmipdskq.mfl
    C:\WINDOWS\system32\WBEM\wmipicmp.mof
    C:\WINDOWS\system32\WBEM\wmipicmp.mfl
    C:\WINDOWS\system32\WBEM\wmipiprt.mof
    C:\WINDOWS\system32\WBEM\wmipiprt.mfl
    C:\WINDOWS\system32\WBEM\wmipjobj.mof
    C:\WINDOWS\system32\WBEM\wmipjobj.mfl
    C:\WINDOWS\system32\WBEM\wmipsess.mof
    C:\WINDOWS\system32\WBEM\wmipsess.mfl
    C:\WINDOWS\system32\WBEM\krnlprov.mof
    C:\WINDOWS\system32\WBEM\krnlprov.mfl
    C:\WINDOWS\system32\WBEM\cli.mof
    C:\WINDOWS\system32\WBEM\licwmi.mof
    C:\WINDOWS\system32\WBEM\licwmi.mfl
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\netfxcfgprovm.mof
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\netfxcfgprov.mfl
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ASPNET.MOF
    C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\OINFOP11.MOF
    C:\PROGRA~1\COMMON~1\MICROS~1\MSINFO\OINFOP11.MOF
    C:\WINDOWS\SYSTEM32\WBEM\CLIEGALIASES.MOF
    C:\WINDOWS\SYSTEM32\WBEM\CLIEGALIASES.MFL
     
    dcfrazel,
    #50
  12. 2007/08/15
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Hi David,

    I've sent you an email with a registry file customized to reset the list of autorecover files, based on not only the defaults for autorecover, but your WMIDiag logs as well. Once you have finished the procedure(s) in the email, open regedit to the CIMOM key again, double click the autorecover entry and copy the list. Cancel and close regedit. Now open a blank notepad and paste the list from the clipboard. Compare it to the list below. If they match, proceed with the instructions that follow the list, otherwise, stop and let me know. If they don't match, and you need to shut down before contacting me, double click the exported cimom reg file I instructed you to create in the email.

    See the edit below the list!

    C:\WINDOWS\system32\WBEM\cimwin32.mfl
    C:\WINDOWS\system32\WBEM\cimwin32.mof
    C:\WINDOWS\system32\WBEM\cli.mof
    C:\WINDOWS\SYSTEM32\WBEM\CLIEGALIASES.MFL
    C:\WINDOWS\SYSTEM32\WBEM\CLIEGALIASES.MOF
    C:\WINDOWS\system32\WBEM\dsprov.mfl
    C:\WINDOWS\system32\WBEM\dsprov.mof
    C:\WINDOWS\system32\WBEM\fevprov.mfl
    C:\WINDOWS\system32\WBEM\fevprov.mof
    C:\WINDOWS\system32\WBEM\hnetcfg.mof
    C:\WINDOWS\system32\WBEM\ieinfo5.mof
    C:\WINDOWS\system32\WBEM\krnlprov.mfl
    C:\WINDOWS\system32\WBEM\krnlprov.mof
    C:\WINDOWS\system32\WBEM\licwmi.mfl
    C:\WINDOWS\system32\WBEM\licwmi.mof
    C:\WINDOWS\system32\WBEM\msi.mfl
    C:\WINDOWS\system32\WBEM\msi.mof
    C:\WINDOWS\system32\WBEM\ntevt.mfl
    C:\WINDOWS\system32\WBEM\ntevt.mof
    C:\WINDOWS\system32\WBEM\policman.mfl
    C:\WINDOWS\system32\WBEM\policman.mof
    C:\WINDOWS\system32\WBEM\regevent.mfl
    C:\WINDOWS\system32\WBEM\regevent.mof
    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MFL
    C:\WINDOWS\SYSTEM32\WBEM\RSOP.MOF
    C:\WINDOWS\SYSTEM32\WBEM\SCERSOP.MOF
    C:\WINDOWS\system32\WBEM\scm.mof
    C:\WINDOWS\system32\WBEM\secrcw32.mfl
    C:\WINDOWS\system32\WBEM\secrcw32.mof
    C:\WINDOWS\SYSTEM32\WBEM\SR.MOF
    C:\WINDOWS\system32\WBEM\subscrpt.mof
    C:\WINDOWS\system32\WBEM\system.mof
    C:\WINDOWS\SYSTEM32\WBEM\TSCFGWMI.MFL
    C:\WINDOWS\SYSTEM32\WBEM\TSCFGWMI.MOF
    C:\WINDOWS\system32\WBEM\wmi.mfl
    C:\WINDOWS\system32\WBEM\wmi.mof
    C:\WINDOWS\system32\WBEM\wmipcima.mfl
    C:\WINDOWS\system32\WBEM\wmipcima.mof
    C:\WINDOWS\system32\WBEM\wmipdskq.mfl
    C:\WINDOWS\system32\WBEM\wmipdskq.mof
    C:\WINDOWS\system32\WBEM\wmipicmp.mfl
    C:\WINDOWS\system32\WBEM\wmipicmp.mof
    C:\WINDOWS\system32\WBEM\wmipiprt.mfl
    C:\WINDOWS\system32\WBEM\wmipiprt.mof
    C:\WINDOWS\system32\WBEM\wmipjobj.mfl
    C:\WINDOWS\system32\WBEM\wmipjobj.mof
    C:\WINDOWS\system32\WBEM\wmipsess.mfl
    C:\WINDOWS\system32\WBEM\wmipsess.mof
    C:\WINDOWS\system32\WBEM\wmitimep.mfl
    C:\WINDOWS\system32\WBEM\wmitimep.mof
    C:\WINDOWS\SYSTEM32\WBEM\WSCENTER.MOF
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\netfxcfgprovm.mof
    C:\WINDOWS\Microsoft.NET\Framework\v1.0.3705\netfxcfgprov.mfl
    C:\WINDOWS\MICROSOFT.NET\FRAMEWORK\V1.1.4322\ASPNET.MOF
    C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\OINFOP11.MOF

    EDIT: While previewing this post, I noticed that I failed to remove a space in one of the filenames when I copied the list from your post above and used it to create the registry file. When you compare the list from your registry with the list in this post, you will notice a space between the letters E and T, which I bolded blue above. You can do one of two things to fix the entry. Either copy the list in this post and paste it into the autorecover popup and click OK, or click within the popup to deselect everything, then use your up/down-left/right arrow keys to navigate to that entry, remove the space, then click OK to save the change. I have taken steps to make sure the list in this post contains no spaces that it shouldn't.

    Ok, the lists match. Move the WMIDiag.vbs tool to the root of the drive, eg: Local Disk C:
    Right click it and select Send To>Desktop (create shortcut)
    Go to the desktop and right click the new shortcut. Select Properties. The Target line should read as follows.

    C:\WMIDiag.vbs

    You need to add one space, then CheckConsistency to the end of the path, so that it now reads as follows.

    C:\WMIDiag.vbs CheckConsistency

    Click OK. Now double click the shortcut to start the tool. When it finishes, reboot.

    Post the contents of the log it created, if any (post report and email me the log if similar to past runs).

    Run the WMIDiag tool again, this time from C:\WMIDiag.vbs, or from the shortcut only AFTER editing the CheckConsistency switch from the target line. You do not want to run it more than once with that switch. Post the results of the latest run.
     
    noahdfear,
    #51
  13. 2007/08/16
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    Hi again Noahdfear:

    Here's the report from the WMIDiag tool run with the CheckConsistency switch. I'll email the corresponding log to you.
    -------------------------------------------------

    17842 22:21:29 (0) ** WMIDiag v2.0 started on Thursday, August 16, 2007 at 22:18.
    17843 22:21:29 (0) **
    17844 22:21:29 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - January 2007.
    17845 22:21:29 (0) **
    17846 22:21:29 (0) ** This script is not supported under any Microsoft standard support program or service.
    17847 22:21:29 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    17848 22:21:29 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    17849 22:21:29 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    17850 22:21:29 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    17851 22:21:29 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    17852 22:21:29 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    17853 22:21:29 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    17854 22:21:29 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    17855 22:21:29 (0) ** of the possibility of such damages.
    17856 22:21:29 (0) **
    17857 22:21:29 (0) **
    17858 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17859 22:21:29 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    17860 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17861 22:21:29 (0) **
    17862 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17863 22:21:29 (0) ** Windows XP - Service pack 2 - 32-bit (2600) - User 'DAVID-8B06329F0\DAVE' on computer 'DAVID-8B06329F0'.
    17864 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17865 22:21:29 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!
    17866 22:21:29 (0) ** INFO: => 2 incorrect shutdown(s) detected on:
    17867 22:21:29 (0) ** - Shutdown on 19 July 2007 19:53:23 (GMT+5).
    17868 22:21:29 (0) ** - Shutdown on 02 August 2007 12:52:07 (GMT+5).
    17869 22:21:29 (0) **
    17870 22:21:29 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #0).
    17871 22:21:29 (0) ** Drive type: ......................................................................................................... IDE (Maxtor 7Y250M0).
    17872 22:21:29 (0) ** There are no missing WMI system files: .............................................................................. OK.
    17873 22:21:29 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    17874 22:21:29 (0) ** WMI repository state: ............................................................................................... CONSISTENT.
    17875 22:21:29 (0) ** BEFORE running WMIDiag:
    17876 22:21:29 (0) ** The WMI repository has a size of: ................................................................................... 19 MB.
    17877 22:21:29 (0) ** - Disk free space on 'C:': .......................................................................................... 221870 MB.
    17878 22:21:29 (0) ** - INDEX.BTR, 1351680 bytes, 8/14/2007 7:43:24 AM
    17879 22:21:29 (0) ** - INDEX.MAP, 684 bytes, 8/16/2007 10:11:01 PM
    17880 22:21:29 (0) ** - MAPPING.VER, 4 bytes, 8/16/2007 10:11:01 PM
    17881 22:21:29 (0) ** - MAPPING1.MAP, 9988 bytes, 8/16/2007 10:11:01 PM
    17882 22:21:29 (0) ** - MAPPING2.MAP, 9988 bytes, 8/16/2007 10:08:50 PM
    17883 22:21:29 (0) ** - OBJECTS.DATA, 19005440 bytes, 8/14/2007 7:42:24 AM
    17884 22:21:29 (0) ** - OBJECTS.MAP, 9304 bytes, 8/16/2007 10:11:01 PM
    17885 22:21:29 (0) ** AFTER running WMIDiag:
    17886 22:21:29 (0) ** The WMI repository has a size of: ................................................................................... 20 MB.
    17887 22:21:29 (0) ** - Disk free space on 'C:': .......................................................................................... 221872 MB.
    17888 22:21:29 (0) ** - INDEX.BTR, 1351680 bytes, 8/16/2007 10:18:46 PM
    17889 22:21:29 (0) ** - INDEX.MAP, 684 bytes, 8/16/2007 10:18:46 PM
    17890 22:21:29 (0) ** - MAPPING.VER, 4 bytes, 8/16/2007 10:18:46 PM
    17891 22:21:29 (0) ** - MAPPING1.MAP, 10080 bytes, 8/16/2007 10:18:38 PM
    17892 22:21:29 (0) ** - MAPPING2.MAP, 10080 bytes, 8/16/2007 10:18:46 PM
    17893 22:21:29 (0) ** - OBJECTS.DATA, 19193856 bytes, 8/16/2007 10:18:46 PM
    17894 22:21:29 (0) ** - OBJECTS.MAP, 9396 bytes, 8/16/2007 10:18:46 PM
    17895 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17896 22:21:29 (0) ** INFO: Windows Firewall status: ...................................................................................... ENABLED.
    17897 22:21:29 (0) ** Windows Firewall Profile: ........................................................................................... STANDARD.
    17898 22:21:29 (0) ** Windows Firewall 'RemoteAdmin' status: .............................................................................. DISABLED.
    17899 22:21:29 (0) ** => This will prevent any WMI remote connectivity to this machine.
    17900 22:21:29 (0) ** - You can adjust the configuration by executing the following command:
    17901 22:21:29 (0) ** i.e. 'NETSH.EXE FIREWALL SET SERVICE REMOTEADMIN ENABLE SUBNET'
    17902 22:21:29 (0) **
    17903 22:21:29 (0) ** Windows Firewall application exception for 'UNSECAPP.EXE': .......................................................... MISSING.
    17904 22:21:29 (0) ** => This will prevent any script and MMC application asynchronous callbacks to this machine.
    17905 22:21:29 (0) ** - You can adjust the configuration by executing the following command:
    17906 22:21:29 (0) ** i.e. 'NETSH.EXE FIREWALL SET ALLOWEDPROGRAM C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE WMICALLBACKS ENABLE'
    17907 22:21:29 (0) **
    17908 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17909 22:21:29 (0) ** DCOM Status: ........................................................................................................ OK.
    17910 22:21:29 (0) ** WMI registry setup: ................................................................................................. OK.
    17911 22:21:29 (0) ** INFO: WMI service has dependents: ................................................................................... 2 SERVICE(S)!
    17912 22:21:29 (0) ** - Security Center (WSCSVC, StartMode='Automatic')
    17913 22:21:29 (0) ** - Windows Firewall/Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Automatic')
    17914 22:21:29 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    17915 22:21:29 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
    17916 22:21:29 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
    17917 22:21:29 (0) ** this can prevent the service/application to work as expected.
    17918 22:21:29 (0) **
    17919 22:21:29 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    17920 22:21:29 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    17921 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17922 22:21:29 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    17923 22:21:29 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    17924 22:21:29 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    17925 22:21:29 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    17926 22:21:29 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    17927 22:21:29 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    17928 22:21:29 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    17929 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17930 22:21:29 (0) ** Overall DCOM security status: ....................................................................................... OK.
    17931 22:21:29 (0) ** Overall WMI security status: ........................................................................................ OK.
    17932 22:21:29 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    17933 22:21:29 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
    17934 22:21:29 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name= "Microsoft WMI Updating Consumer Scenario Control ".
    17935 22:21:29 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
    17936 22:21:29 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name= "SCM Event Log Consumer ".
    17937 22:21:29 (0) ** 'select * from MSFT_SCMEventLogEvent'
    17938 22:21:29 (0) **
    17939 22:21:29 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    17940 22:21:29 (0) ** WMI ADAP status: .................................................................................................... OK.
    17941 22:21:29 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    17942 22:21:29 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    17943 22:21:29 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 4 ERROR(S)!
    17944 22:21:29 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17945 22:21:29 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17946 22:21:29 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17947 22:21:29 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17948 22:21:29 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17949 22:21:29 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17950 22:21:29 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17951 22:21:29 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17952 22:21:29 (0) **
    17953 22:21:29 (0) ** WMI MOF representations: ............................................................................................ OK.
    17954 22:21:29 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
    17955 22:21:29 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
    17956 22:21:29 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
    17957 22:21:29 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
    17958 22:21:29 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
    17959 22:21:29 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
    17960 22:21:29 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
    17961 22:21:29 (0) ** WMI static instances retrieved: ..................................................................................... 557.
    17962 22:21:29 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
    17963 22:21:29 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
    17964 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17965 22:21:29 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
    17966 22:21:29 (0) ** DCOM: ............................................................................................................. 21.
    17967 22:21:29 (0) ** WINMGMT: .......................................................................................................... 30.
    17968 22:21:29 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17969 22:21:29 (0) ** => Verify the WMIDiag LOG at line #17386 for more details.
    17970 22:21:29 (0) **
    17971 22:21:29 (0) ** # of additional Event Log events AFTER WMIDiag execution:
    17972 22:21:29 (0) ** DCOM: ............................................................................................................. 0.
    17973 22:21:29 (0) ** WINMGMT: .......................................................................................................... 1.
    17974 22:21:29 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17975 22:21:29 (2) !! WARNING: => Verify the WMIDiag LOG at line #17581 for more details.
    17976 22:21:29 (0) **
    17977 22:21:29 (0) ** 4 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
    17978 22:21:29 (0) ** => This error is typically a WMI error. This WMI error is due to:
    17979 22:21:29 (0) ** - a missing WMI class definition or object.
    17980 22:21:29 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
    17981 22:21:29 (0) ** You can correct the missing class definitions by:
    17982 22:21:29 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
    17983 22:21:29 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
    17984 22:21:29 (0) ** (This list can be built on a similar and working WMI Windows installation)
    17985 22:21:29 (0) ** The following command line must be used:
    17986 22:21:29 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
    17987 22:21:29 (0) ** - a WMI repository corruption.
    17988 22:21:29 (0) ** Under Windows XP SP2, you can validate the repository consistency
    17989 22:21:29 (0) ** by executing the following command:
    17990 22:21:29 (0) ** i.e. 'WMIDiag CheckConsistency'
    17991 22:21:29 (0) ** Note: Under Windows XP SP2, when the repository is checked and detected INCONSISTENT,
    17992 22:21:29 (0) ** a new repository is automatically re-created based on Auto-Recovery mechanism.
    17993 22:21:29 (0) ** Note that some information can be lost during this process (i.e. static data, CIM registration).
    17994 22:21:29 (0) ** However, the original repository is located at 'C:\WINDOWS\SYSTEM32\WBEM\Repository.001'.
    17995 22:21:29 (0) ** The computer must be rebooted for the system to work with the re-created repository.
    17996 22:21:29 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
    17997 22:21:29 (0) ** otherwise some applications may fail after the reconstruction.
    17998 22:21:29 (0) ** This can be achieved with the following command:
    17999 22:21:29 (0) ** i.e. 'WMIDiag ShowMOFErrors'
    18000 22:21:29 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
    18001 22:21:29 (0) ** ALL fixes previously mentioned.
    18002 22:21:29 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
    18003 22:21:29 (0) **
    18004 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18005 22:21:29 (0) ** WMI Registry key setup: ............................................................................................. OK.
    18006 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18007 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18008 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18009 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18010 22:21:29 (0) **
    18011 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18012 22:21:29 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
    18013 22:21:29 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18014 22:21:29 (0) **
    18015 22:21:29 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\DAVE\LOCAL SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.SP2.32_DAVID-8B06329F0_2007.08.16_22.17.47.LOG' for details.
    18016 22:21:29 (0) **
    18017 22:21:29 (0) ** WMIDiag v2.0 ended on Thursday, August 16, 2007 at 22:21 (W:54 E:5 S:1).
     
    dcfrazel,
    #52
  14. 2007/08/16
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    And Once Again to Noahdfear:

    Here's the report from the second WMIDiag Tool run, this time without the switch. The log will follow shortly via email.
    ---------------------------------------------------------

    17840 22:46:20 (0) ** WMIDiag v2.0 started on Thursday, August 16, 2007 at 22:43.
    17841 22:46:20 (0) **
    17842 22:46:20 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - January 2007.
    17843 22:46:20 (0) **
    17844 22:46:20 (0) ** This script is not supported under any Microsoft standard support program or service.
    17845 22:46:20 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
    17846 22:46:20 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
    17847 22:46:20 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
    17848 22:46:20 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
    17849 22:46:20 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
    17850 22:46:20 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
    17851 22:46:20 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
    17852 22:46:20 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
    17853 22:46:20 (0) ** of the possibility of such damages.
    17854 22:46:20 (0) **
    17855 22:46:20 (0) **
    17856 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17857 22:46:20 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
    17858 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17859 22:46:20 (0) **
    17860 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17861 22:46:20 (0) ** Windows XP - Service pack 2 - 32-bit (2600) - User 'DAVID-8B06329F0\DAVE' on computer 'DAVID-8B06329F0'.
    17862 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17863 22:46:20 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!
    17864 22:46:20 (0) ** INFO: => 2 incorrect shutdown(s) detected on:
    17865 22:46:20 (0) ** - Shutdown on 19 July 2007 19:53:23 (GMT+5).
    17866 22:46:20 (0) ** - Shutdown on 02 August 2007 12:52:07 (GMT+5).
    17867 22:46:20 (0) **
    17868 22:46:20 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #0).
    17869 22:46:20 (0) ** Drive type: ......................................................................................................... IDE (Maxtor 7Y250M0).
    17870 22:46:20 (0) ** There are no missing WMI system files: .............................................................................. OK.
    17871 22:46:20 (0) ** There are no missing WMI repository files: .......................................................................... OK.
    17872 22:46:20 (0) ** WMI repository state: ............................................................................................... NOT TESTED.
    17873 22:46:20 (0) ** BEFORE running WMIDiag:
    17874 22:46:20 (0) ** The WMI repository has a size of: ................................................................................... 20 MB.
    17875 22:46:20 (0) ** - Disk free space on 'C:': .......................................................................................... 221870 MB.
    17876 22:46:20 (0) ** - INDEX.BTR, 1351680 bytes, 8/16/2007 10:27:25 PM
    17877 22:46:20 (0) ** - INDEX.MAP, 684 bytes, 8/16/2007 10:39:08 PM
    17878 22:46:20 (0) ** - MAPPING.VER, 4 bytes, 8/16/2007 10:39:08 PM
    17879 22:46:20 (0) ** - MAPPING1.MAP, 10080 bytes, 8/16/2007 10:30:26 PM
    17880 22:46:20 (0) ** - MAPPING2.MAP, 10080 bytes, 8/16/2007 10:39:08 PM
    17881 22:46:20 (0) ** - OBJECTS.DATA, 19193856 bytes, 8/16/2007 10:27:24 PM
    17882 22:46:20 (0) ** - OBJECTS.MAP, 9396 bytes, 8/16/2007 10:39:08 PM
    17883 22:46:20 (0) ** AFTER running WMIDiag:
    17884 22:46:20 (0) ** The WMI repository has a size of: ................................................................................... 20 MB.
    17885 22:46:20 (0) ** - Disk free space on 'C:': .......................................................................................... 221868 MB.
    17886 22:46:20 (0) ** - INDEX.BTR, 1351680 bytes, 8/16/2007 10:27:25 PM
    17887 22:46:20 (0) ** - INDEX.MAP, 684 bytes, 8/16/2007 10:39:08 PM
    17888 22:46:20 (0) ** - MAPPING.VER, 4 bytes, 8/16/2007 10:39:08 PM
    17889 22:46:20 (0) ** - MAPPING1.MAP, 10080 bytes, 8/16/2007 10:30:26 PM
    17890 22:46:20 (0) ** - MAPPING2.MAP, 10080 bytes, 8/16/2007 10:39:08 PM
    17891 22:46:20 (0) ** - OBJECTS.DATA, 19193856 bytes, 8/16/2007 10:27:24 PM
    17892 22:46:20 (0) ** - OBJECTS.MAP, 9396 bytes, 8/16/2007 10:39:08 PM
    17893 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17894 22:46:20 (0) ** INFO: Windows Firewall status: ...................................................................................... ENABLED.
    17895 22:46:20 (0) ** Windows Firewall Profile: ........................................................................................... STANDARD.
    17896 22:46:20 (0) ** Windows Firewall 'RemoteAdmin' status: .............................................................................. DISABLED.
    17897 22:46:20 (0) ** => This will prevent any WMI remote connectivity to this machine.
    17898 22:46:20 (0) ** - You can adjust the configuration by executing the following command:
    17899 22:46:20 (0) ** i.e. 'NETSH.EXE FIREWALL SET SERVICE REMOTEADMIN ENABLE SUBNET'
    17900 22:46:20 (0) **
    17901 22:46:20 (0) ** Windows Firewall application exception for 'UNSECAPP.EXE': .......................................................... MISSING.
    17902 22:46:20 (0) ** => This will prevent any script and MMC application asynchronous callbacks to this machine.
    17903 22:46:20 (0) ** - You can adjust the configuration by executing the following command:
    17904 22:46:20 (0) ** i.e. 'NETSH.EXE FIREWALL SET ALLOWEDPROGRAM C:\WINDOWS\SYSTEM32\WBEM\UNSECAPP.EXE WMICALLBACKS ENABLE'
    17905 22:46:20 (0) **
    17906 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17907 22:46:20 (0) ** DCOM Status: ........................................................................................................ OK.
    17908 22:46:20 (0) ** WMI registry setup: ................................................................................................. OK.
    17909 22:46:20 (0) ** INFO: WMI service has dependents: ................................................................................... 2 SERVICE(S)!
    17910 22:46:20 (0) ** - Security Center (WSCSVC, StartMode='Automatic')
    17911 22:46:20 (0) ** - Windows Firewall/Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Automatic')
    17912 22:46:20 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
    17913 22:46:20 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
    17914 22:46:20 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
    17915 22:46:20 (0) ** this can prevent the service/application to work as expected.
    17916 22:46:20 (0) **
    17917 22:46:20 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
    17918 22:46:20 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
    17919 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17920 22:46:20 (0) ** WMI service DCOM setup: ............................................................................................. OK.
    17921 22:46:20 (0) ** WMI components DCOM registrations: .................................................................................. OK.
    17922 22:46:20 (0) ** WMI ProgID registrations: ........................................................................................... OK.
    17923 22:46:20 (0) ** WMI provider DCOM registrations: .................................................................................... OK.
    17924 22:46:20 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
    17925 22:46:20 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
    17926 22:46:20 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
    17927 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17928 22:46:20 (0) ** Overall DCOM security status: ....................................................................................... OK.
    17929 22:46:20 (0) ** Overall WMI security status: ........................................................................................ OK.
    17930 22:46:20 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
    17931 22:46:20 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 2.
    17932 22:46:20 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name= "Microsoft WMI Updating Consumer Scenario Control ".
    17933 22:46:20 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
    17934 22:46:20 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name= "SCM Event Log Consumer ".
    17935 22:46:20 (0) ** 'select * from MSFT_SCMEventLogEvent'
    17936 22:46:20 (0) **
    17937 22:46:20 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
    17938 22:46:20 (0) ** WMI ADAP status: .................................................................................................... OK.
    17939 22:46:20 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
    17940 22:46:20 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
    17941 22:46:20 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 4 ERROR(S)!
    17942 22:46:20 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17943 22:46:20 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17944 22:46:20 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17945 22:46:20 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17946 22:46:20 (0) ** - Root/Default, SystemRestore, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17947 22:46:20 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17948 22:46:20 (0) ** - Root/Default, SystemRestoreConfig, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.
    17949 22:46:20 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
    17950 22:46:20 (0) **
    17951 22:46:20 (0) ** WMI MOF representations: ............................................................................................ OK.
    17952 22:46:20 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
    17953 22:46:20 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.
    17954 22:46:20 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.
    17955 22:46:20 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
    17956 22:46:20 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
    17957 22:46:20 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
    17958 22:46:20 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
    17959 22:46:20 (0) ** WMI static instances retrieved: ..................................................................................... 557.
    17960 22:46:20 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
    17961 22:46:20 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
    17962 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    17963 22:46:20 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
    17964 22:46:20 (0) ** DCOM: ............................................................................................................. 21.
    17965 22:46:20 (0) ** WINMGMT: .......................................................................................................... 31.
    17966 22:46:20 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17967 22:46:20 (0) ** => Verify the WMIDiag LOG at line #17386 for more details.
    17968 22:46:20 (0) **
    17969 22:46:20 (0) ** # of additional Event Log events AFTER WMIDiag execution:
    17970 22:46:20 (0) ** DCOM: ............................................................................................................. 0.
    17971 22:46:20 (0) ** WINMGMT: .......................................................................................................... 0.
    17972 22:46:20 (0) ** WMIADAPTER: ....................................................................................................... 0.
    17973 22:46:20 (0) **
    17974 22:46:20 (0) ** 4 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found
    17975 22:46:20 (0) ** => This error is typically a WMI error. This WMI error is due to:
    17976 22:46:20 (0) ** - a missing WMI class definition or object.
    17977 22:46:20 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).
    17978 22:46:20 (0) ** You can correct the missing class definitions by:
    17979 22:46:20 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.
    17980 22:46:20 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
    17981 22:46:20 (0) ** (This list can be built on a similar and working WMI Windows installation)
    17982 22:46:20 (0) ** The following command line must be used:
    17983 22:46:20 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
    17984 22:46:20 (0) ** - a WMI repository corruption.
    17985 22:46:20 (0) ** Under Windows XP SP2, you can validate the repository consistency
    17986 22:46:20 (0) ** by executing the following command:
    17987 22:46:20 (0) ** i.e. 'WMIDiag CheckConsistency'
    17988 22:46:20 (0) ** Note: Under Windows XP SP2, when the repository is checked and detected INCONSISTENT,
    17989 22:46:20 (0) ** a new repository is automatically re-created based on Auto-Recovery mechanism.
    17990 22:46:20 (0) ** Note that some information can be lost during this process (i.e. static data, CIM registration).
    17991 22:46:20 (0) ** However, the original repository is located at 'C:\WINDOWS\SYSTEM32\WBEM\Repository.001'.
    17992 22:46:20 (0) ** The computer must be rebooted for the system to work with the re-created repository.
    17993 22:46:20 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,
    17994 22:46:20 (0) ** otherwise some applications may fail after the reconstruction.
    17995 22:46:20 (0) ** This can be achieved with the following command:
    17996 22:46:20 (0) ** i.e. 'WMIDiag ShowMOFErrors'
    17997 22:46:20 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing
    17998 22:46:20 (0) ** ALL fixes previously mentioned.
    17999 22:46:20 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)
    18000 22:46:20 (0) **
    18001 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18002 22:46:20 (0) ** WMI Registry key setup: ............................................................................................. OK.
    18003 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18004 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18005 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18006 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18007 22:46:20 (0) **
    18008 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18009 22:46:20 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
    18010 22:46:20 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
    18011 22:46:20 (0) **
    18012 22:46:20 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\DAVE\LOCAL SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.SP2.32_DAVID-8B06329F0_2007.08.16_22.43.04.LOG' for details.
    18013 22:46:20 (0) **
    18014 22:46:20 (0) ** WMIDiag v2.0 ended on Thursday, August 16, 2007 at 22:46 (W:54 E:5 S:1).
     
    dcfrazel,
    #53
  15. 2007/08/16
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    :) That report shows no inconsistencies; no missing WMI system files, no missing WMI repository files.

    Please execute the following command from a command window.

    MOFCOMP SR.MOF

    Reboot and run the tool again. Hoping this will be the last time. ;)
     
    noahdfear,
    #54
  16. 2007/08/17
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    Sorry, it appears something's still amiss - when I enter MOFCOMP SR.MOF, I end up with the message, "File SR.MOF NOT FOUND ".

    Also, I've just noticed that the wireless connection between the problem PC and my laptop no longer works - I can access the web from the laptop but can no longer share files or the printer. This could have happened anytime over the past couple of weeks since I haven't used the wireless network recently.
     
    dcfrazel,
    #55
  17. 2007/08/17
    noahdfear

    noahdfear Inactive

    Joined:
    2003/04/06
    Messages:
    12,178
    Likes Received:
    15
    Try using the full path.

    mofcomp C:\WINDOWS\SYSTEM32\WBEM\sr.mof
     
    noahdfear,
    #56
  18. 2007/08/17
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    HOOOOORAY - running the full path worked and when I ran the WMIDiag Tool I got the message, "Success: WMIDiag has determined that WMI works correctly ".

    And another HOOOOORAY - after restoring Windows Firewall Defaults, the advanced tab problem went away.

    Many thanks to all who helped with this problem and particularly to Noahdfear.

    As to the problem with my wireless network, does Noahdfear suggest I start a new thread in the Networking forum?
     
    dcfrazel,
    #57
  19. 2007/08/17
    mailman Lifetime Subscription

    mailman Geek Member

    Joined:
    2004/01/17
    Messages:
    1,901
    Likes Received:
    11
    That's GREAT news! Congratulations, dcfrazel!

    You're very welcome! And yep, noahdfear is certainly a wizard. :)

    I can't speak for noahdfear but I would say yes. :)
     
    mailman,
    #58
  20. 2007/08/17
    mailman Lifetime Subscription

    mailman Geek Member

    Joined:
    2004/01/17
    Messages:
    1,901
    Likes Received:
    11
    BTW (if I were in your shoes) after rebooting your computer and giving your system a few minutes to finish all its hard drive access during and after the boot (to be sure all is "set "), I would manually create a System Restore point before making further changes to your computer configuration. ;)

    Start > All Programs > Accessories > System Tools > System Restore
     
    mailman,
    #59
  21. 2007/08/17
    dcfrazel

    dcfrazel Inactive Thread Starter

    Joined:
    2006/11/14
    Messages:
    64
    Likes Received:
    0
    Hi Mailman:

    Thanks for the tip on creating a system restore point.
     
    dcfrazel,
    #60
Page 3 of 4

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...