remote wmi test acces denied

[rohmat]

hello,

I'm new here, I get the problem when I test connection to the client, I use test connection on domain and with administrator login, the result error here:

Remote WMI test
-----------------------------------------------
\root\cimv2 Remote WMI access test FAILED
Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

Remote Registry test using WMI
-----------------------------------------------
\root\default Remote WMI access test FAILED
Access is denied. (Exception from HRESULT: 0x80070005 (E_ACCESSDENIED))

I trying with wmidiag, wmi repair but not work..
can anybody help me...plss

[Hemoco]

As you can see in the log the security for wmi is changed.

I suggest to follow http://windowsxp.mvps.org/repairwmi.htm
and use the "Comprehensive rebuild method"

[rohmat]

here is the result from wmidiag, Please help thanks,


18797 08:33:42 (0) ** WMIDiag v2.0 started on Friday, January 22, 2010 at 08:28.
18798 08:33:42 (0) **
18799 08:33:42 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - January 2007.
18800 08:33:42 (0) **
18801 08:33:42 (0) ** This script is not supported under any Microsoft standard support program or service.
18802 08:33:42 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all
18803 08:33:42 (0) ** implied warranties including, without limitation, any implied warranties of merchantability
18804 08:33:42 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance
18805 08:33:42 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,
18806 08:33:42 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for
18807 08:33:42 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,
18808 08:33:42 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of
18809 08:33:42 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised
18810 08:33:42 (0) ** of the possibility of such damages.
18811 08:33:42 (0) **
18812 08:33:42 (0) **
18813 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18814 08:33:42 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------
18815 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18816 08:33:42 (0) **
18817 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18818 08:33:42 (0) ** Windows XP - Service pack 2 - 32-bit (2600) - User 'IDS\ADMINISTRATOR' on computer 'WIDKL1TSRIWAHYU'.
18819 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18820 08:33:42 (0) ** Environment: ........................................................................................................ OK..
18821 08:33:42 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #0).
18822 08:33:42 (0) ** Drive type: ......................................................................................................... IDE (ST320014A).
18823 08:33:42 (0) ** There are no missing WMI system files: .............................................................................. OK.
18824 08:33:42 (0) ** There are no missing WMI repository files: .......................................................................... OK.
18825 08:33:42 (0) ** WMI repository state: ............................................................................................... NOT TESTED.
18826 08:33:42 (0) ** BEFORE running WMIDiag:
18827 08:33:42 (0) ** The WMI repository has a size of: ................................................................................... 33 MB.
18828 08:33:42 (0) ** - Disk free space on 'C:': .......................................................................................... 8813 MB.
18829 08:33:42 (0) ** - INDEX.BTR, 1466368 bytes, 1/22/2010 7:52:08 AM
18830 08:33:42 (0) ** - INDEX.MAP, 744 bytes, 1/22/2010 7:53:09 AM
18831 08:33:42 (0) ** - MAPPING.VER, 4 bytes, 1/22/2010 7:53:09 AM
18832 08:33:42 (0) ** - MAPPING1.MAP, 16784 bytes, 1/22/2010 7:52:08 AM
18833 08:33:42 (0) ** - MAPPING2.MAP, 16784 bytes, 1/22/2010 7:53:09 AM
18834 08:33:42 (0) ** - OBJECTS.DATA, 32792576 bytes, 1/22/2010 7:52:08 AM
18835 08:33:42 (0) ** - OBJECTS.MAP, 16040 bytes, 1/22/2010 7:53:09 AM
18836 08:33:42 (0) ** AFTER running WMIDiag:
18837 08:33:42 (0) ** The WMI repository has a size of: ................................................................................... 33 MB.
18838 08:33:42 (0) ** - Disk free space on 'C:': .......................................................................................... 8811 MB.
18839 08:33:42 (0) ** - INDEX.BTR, 1466368 bytes, 1/22/2010 7:52:08 AM
18840 08:33:42 (0) ** - INDEX.MAP, 744 bytes, 1/22/2010 7:53:09 AM
18841 08:33:42 (0) ** - MAPPING.VER, 4 bytes, 1/22/2010 7:53:09 AM
18842 08:33:42 (0) ** - MAPPING1.MAP, 16784 bytes, 1/22/2010 7:52:08 AM
18843 08:33:42 (0) ** - MAPPING2.MAP, 16784 bytes, 1/22/2010 7:53:09 AM
18844 08:33:42 (0) ** - OBJECTS.DATA, 32792576 bytes, 1/22/2010 7:52:08 AM
18845 08:33:42 (0) ** - OBJECTS.MAP, 16040 bytes, 1/22/2010 7:53:09 AM
18846 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18847 08:33:42 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.
18848 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18849 08:33:42 (0) ** DCOM Status: ........................................................................................................ OK.
18850 08:33:42 (0) ** WMI registry setup: ................................................................................................. OK.
18851 08:33:42 (0) ** INFO: WMI service has dependents: ................................................................................... 3 SERVICE(S)!
18852 08:33:42 (0) ** - Security Center (WSCSVC, StartMode='Automatic')
18853 08:33:42 (0) ** - Windows Firewall/Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Automatic')
18854 08:33:42 (0) ** - IPv6 Helper Service (6TO4, StartMode='Automatic')
18855 08:33:42 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.
18856 08:33:42 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but
18857 08:33:42 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,
18858 08:33:42 (0) ** this can prevent the service/application to work as expected.
18859 08:33:42 (0) **
18860 08:33:42 (0) ** RPCSS service: ...................................................................................................... OK (Already started).
18861 08:33:42 (0) ** WINMGMT service: .................................................................................................... OK (Already started).
18862 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18863 08:33:42 (0) ** WMI service DCOM setup: ............................................................................................. OK.
18864 08:33:42 (0) ** WMI components DCOM registrations: .................................................................................. OK.
18865 08:33:42 (0) ** WMI ProgID registrations: ........................................................................................... OK.
18866 08:33:42 (2) !! WARNING: WMI provider DCOM registrations missing for the following provider(s): ..................................... 1 WARNING(S)!
18867 08:33:42 (0) ** - ROOT/MSAPPS10, OffProv10 ({9E30754B-29A9-41CE-8892-70E9E07D15DC}) (i.e. WMI Class 'Win32_ExcelComAddins')
18868 08:33:42 (0) ** Provider DLL: 'WMI information not available (This could be the case for an external application or a third party WMI provider)'
18869 08:33:42 (0) ** => This is an issue because there are still some WMI classes referencing this list of providers
18870 08:33:42 (0) ** while the DCOM registration is wrong or missing. This can be due to:
18871 08:33:42 (0) ** - a de-installation of the software.
18872 08:33:42 (0) ** - a deletion of some registry key data.
18873 08:33:42 (0) ** - a registry corruption.
18874 08:33:42 (0) ** => You can correct the DCOM configuration by:
18875 08:33:42 (0) ** - Executing the 'REGSVR32.EXE <Provider.DLL>' command.
18876 08:33:42 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.
18877 08:33:42 (0) ** (This list can be built on a similar and working WMI Windows installation)
18878 08:33:42 (0) ** The following command line must be used:
18879 08:33:42 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'
18880 08:33:42 (2) !! WARNING: Re-registering with REGSVR32.EXE all DLL from 'C:\WINDOWS\SYSTEM32\WBEM\'
18881 08:33:42 (0) ** may not solve the problem as the DLL supporting the WMI class(es)
18882 08:33:42 (0) ** can be located in a different folder.
18883 08:33:42 (0) ** You must refer to the class name to determine the software delivering the related DLL.
18884 08:33:42 (0) ** => If the software has been de-installed intentionally, then this information must be
18885 08:33:42 (0) ** removed from the WMI repository. You can use the 'WMIC.EXE' command to remove
18886 08:33:42 (0) ** the provider registration data.
18887 08:33:42 (0) ** i.e. 'WMIC.EXE /NAMESPACE:\\ROOT\DEFAULT path __Win32Provider Where Name='Microsoft WMI Template Association Provider' DELETE'
18888 08:33:42 (0) ** => If the namespace was ENTIRELY dedicated to the intentionally de-installed software,
18889 08:33:42 (0) ** the namespace and ALL its content can be ENTIRELY deleted.
18890 08:33:42 (0) ** i.e. 'WMIC.EXE /NAMESPACE:\\ROOT path __NAMESPACE Where Name='DEFAULT' DELETE'
18891 08:33:42 (0) ** - Re-installing the software.
18892 08:33:42 (0) **
18893 08:33:42 (0) ** WMI provider CIM registrations: ..................................................................................... OK.
18894 08:33:42 (0) ** WMI provider CLSIDs: ................................................................................................ OK.
18895 08:33:42 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.
18896 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
18897 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP': ............................................................................. MODIFIED.
18898 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED!
18899 08:33:42 (0) ** - REMOVED ACE:
18900 08:33:42 (0) ** ACEType: &h0
18901 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
18902 08:33:42 (0) ** ACEFlags: &h12
18903 08:33:42 (0) ** CONTAINER_INHERIT_ACE
18904 08:33:42 (0) ** INHERITED_ACE
18905 08:33:42 (0) ** ACEMask: &h6003F
18906 08:33:42 (0) ** WBEM_ENABLE
18907 08:33:42 (0) ** WBEM_METHOD_EXECUTE
18908 08:33:42 (0) ** WBEM_FULL_WRITE_REP
18909 08:33:42 (0) ** WBEM_PARTIAL_WRITE_REP
18910 08:33:42 (0) ** WBEM_WRITE_PROVIDER
18911 08:33:42 (0) ** WBEM_REMOTE_ACCESS
18912 08:33:42 (0) ** WBEM_WRITE_DAC
18913 08:33:42 (0) ** WBEM_READ_CONTROL
18914 08:33:42 (0) **
18915 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18916 08:33:42 (0) ** Removing default security will cause some operations to fail!
18917 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18918 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18919 08:33:42 (0) **
18920 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP': ............................................................................. MODIFIED.
18921 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\AUTHENTICATED USERS' has been REMOVED!
18922 08:33:42 (0) ** - REMOVED ACE:
18923 08:33:42 (0) ** ACEType: &h0
18924 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
18925 08:33:42 (0) ** ACEFlags: &h12
18926 08:33:42 (0) ** CONTAINER_INHERIT_ACE
18927 08:33:42 (0) ** INHERITED_ACE
18928 08:33:42 (0) ** ACEMask: &h20023
18929 08:33:42 (0) ** WBEM_ENABLE
18930 08:33:42 (0) ** WBEM_METHOD_EXECUTE
18931 08:33:42 (0) ** WBEM_REMOTE_ACCESS
18932 08:33:42 (0) ** WBEM_READ_CONTROL
18933 08:33:42 (0) **
18934 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18935 08:33:42 (0) ** Removing default security will cause some operations to fail!
18936 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18937 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18938 08:33:42 (0) **
18939 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP/USER': ........................................................................ MODIFIED.
18940 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED!
18941 08:33:42 (0) ** - REMOVED ACE:
18942 08:33:42 (0) ** ACEType: &h0
18943 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
18944 08:33:42 (0) ** ACEFlags: &h12
18945 08:33:42 (0) ** CONTAINER_INHERIT_ACE
18946 08:33:42 (0) ** INHERITED_ACE
18947 08:33:42 (0) ** ACEMask: &h6003F
18948 08:33:42 (0) ** WBEM_ENABLE
18949 08:33:42 (0) ** WBEM_METHOD_EXECUTE
18950 08:33:42 (0) ** WBEM_FULL_WRITE_REP
18951 08:33:42 (0) ** WBEM_PARTIAL_WRITE_REP
18952 08:33:42 (0) ** WBEM_WRITE_PROVIDER
18953 08:33:42 (0) ** WBEM_REMOTE_ACCESS
18954 08:33:42 (0) ** WBEM_WRITE_DAC
18955 08:33:42 (0) ** WBEM_READ_CONTROL
18956 08:33:42 (0) **
18957 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18958 08:33:42 (0) ** Removing default security will cause some operations to fail!
18959 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18960 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18961 08:33:42 (0) **
18962 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP/USER': ........................................................................ MODIFIED.
18963 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\AUTHENTICATED USERS' has been REMOVED!
18964 08:33:42 (0) ** - REMOVED ACE:
18965 08:33:42 (0) ** ACEType: &h0
18966 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
18967 08:33:42 (0) ** ACEFlags: &h12
18968 08:33:42 (0) ** CONTAINER_INHERIT_ACE
18969 08:33:42 (0) ** INHERITED_ACE
18970 08:33:42 (0) ** ACEMask: &h20023
18971 08:33:42 (0) ** WBEM_ENABLE
18972 08:33:42 (0) ** WBEM_METHOD_EXECUTE
18973 08:33:42 (0) ** WBEM_REMOTE_ACCESS
18974 08:33:42 (0) ** WBEM_READ_CONTROL
18975 08:33:42 (0) **
18976 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
18977 08:33:42 (0) ** Removing default security will cause some operations to fail!
18978 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
18979 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
18980 08:33:42 (0) **
18981 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP/COMPUTER': .................................................................... MODIFIED.
18982 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\SYSTEM' has been REMOVED!
18983 08:33:42 (0) ** - REMOVED ACE:
18984 08:33:42 (0) ** ACEType: &h0
18985 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
18986 08:33:42 (0) ** ACEFlags: &h12
18987 08:33:42 (0) ** CONTAINER_INHERIT_ACE
18988 08:33:42 (0) ** INHERITED_ACE
18989 08:33:42 (0) ** ACEMask: &h6003F
18990 08:33:42 (0) ** WBEM_ENABLE
18991 08:33:42 (0) ** WBEM_METHOD_EXECUTE
18992 08:33:42 (0) ** WBEM_FULL_WRITE_REP
18993 08:33:42 (0) ** WBEM_PARTIAL_WRITE_REP
18994 08:33:42 (0) ** WBEM_WRITE_PROVIDER
18995 08:33:42 (0) ** WBEM_REMOTE_ACCESS
18996 08:33:42 (0) ** WBEM_WRITE_DAC
18997 08:33:42 (0) ** WBEM_READ_CONTROL
18998 08:33:42 (0) **
18999 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
19000 08:33:42 (0) ** Removing default security will cause some operations to fail!
19001 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
19002 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
19003 08:33:42 (0) **
19004 08:33:42 (0) ** WMI namespace security for 'ROOT/RSOP/COMPUTER': .................................................................... MODIFIED.
19005 08:33:42 (1) !! ERROR: Default trustee 'NT AUTHORITY\AUTHENTICATED USERS' has been REMOVED!
19006 08:33:42 (0) ** - REMOVED ACE:
19007 08:33:42 (0) ** ACEType: &h0
19008 08:33:42 (0) ** ACCESS_ALLOWED_ACE_TYPE
19009 08:33:42 (0) ** ACEFlags: &h12
19010 08:33:42 (0) ** CONTAINER_INHERIT_ACE
19011 08:33:42 (0) ** INHERITED_ACE
19012 08:33:42 (0) ** ACEMask: &h20023
19013 08:33:42 (0) ** WBEM_ENABLE
19014 08:33:42 (0) ** WBEM_METHOD_EXECUTE
19015 08:33:42 (0) ** WBEM_REMOTE_ACCESS
19016 08:33:42 (0) ** WBEM_READ_CONTROL
19017 08:33:42 (0) **
19018 08:33:42 (0) ** => The REMOVED ACE was part of the DEFAULT setup for the trustee.
19019 08:33:42 (0) ** Removing default security will cause some operations to fail!
19020 08:33:42 (0) ** It is possible to fix this issue by editing the security descriptor and adding the ACE.
19021 08:33:42 (0) ** For WMI namespaces, this can be done with 'WMIMGMT.MSC'.
19022 08:33:42 (0) **
19023 08:33:42 (0) **
19024 08:33:42 (0) ** DCOM security warning(s) detected: .................................................................................. 0.
19025 08:33:42 (0) ** DCOM security error(s) detected: .................................................................................... 0.
19026 08:33:42 (0) ** WMI security warning(s) detected: ................................................................................... 0.
19027 08:33:42 (0) ** WMI security error(s) detected: ..................................................................................... 6.
19028 08:33:42 (0) **
19029 08:33:42 (0) ** Overall DCOM security status: ....................................................................................... OK.
19030 08:33:42 (1) !! ERROR: Overall WMI security status: ................................................................................. ERROR!
19031 08:33:42 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------
19032 08:33:42 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 3.
19033 08:33:42 (0) ** - ROOT/DEFAULT, MSFT_UCScenarioControl.Name="Microsoft WMI Updating Consumer Scenario Control".
19034 08:33:42 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
19035 08:33:42 (0) ** - ROOT/SUBSCRIPTION, MSFT_UCScenarioControl.Name="Microsoft WMI Updating Consumer Scenario Control".
19036 08:33:42 (0) ** 'SELECT * FROM __InstanceOperationEvent WHERE TargetInstance ISA 'MSFT_UCScenario''
19037 08:33:42 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".
19038 08:33:42 (0) ** 'select * from MSFT_SCMEventLogEvent'
19039 08:33:42 (0) **
19040 08:33:42 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.
19041 08:33:42 (0) ** WMI ADAP status: .................................................................................................... OK.
19042 08:33:42 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.
19043 08:33:42 (0) ** WMI CONNECTIONS: .................................................................................................... OK.
19044 08:33:42 (0) ** WMI GET operations: ................................................................................................. OK.
19045 08:33:42 (0) ** WMI MOF representations: ............................................................................................ OK.
19046 08:33:42 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.
19047 08:33:42 (2) !! WARNING: WMI ENUMERATION operation errors reported: ................................................................. 1 WARNING(S)!
19048 08:33:42 (0) ** - Root/Default, InstancesOf, 'SystemRestore' did not return any instance while AT LEAST 1 instance is expected.
19049 08:33:42 (0) ** MOF Registration: 'C:\WINDOWS\SYSTEM32\WBEM\SR.MOF'
19050 08:33:42 (0) **
19051 08:33:42 (2) !! WARNING: WMI EXECQUERY operation errors reported: ................................................................... 1 WARNING(S)!
19052 08:33:42 (0) ** - Root/Default, 'SELECT * FROM SystemRestore' did not return any instance while AT LEAST 1 instance is expected.
19053 08:33:42 (0) **
19054 08:33:42 (0) ** WMI GET VALUE operations: ........................................................................................... OK.
19055 08:33:42 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.
19056 08:33:42 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.
19057 08:33:42 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.
19058 08:33:42 (0) ** WMI static instances retrieved: ..................................................................................... 705.
19059 08:33:42 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.
19060 08:33:42 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 0.
19061 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19062 08:33:42 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):
19063 08:33:42 (0) ** DCOM: ............................................................................................................. 4.
19064 08:33:42 (0) ** WINMGMT: .......................................................................................................... 228.
19065 08:33:42 (0) ** WMIADAPTER: ....................................................................................................... 0.
19066 08:33:42 (0) ** => Verify the WMIDiag LOG at line #16875 for more details.
19067 08:33:42 (0) **
19068 08:33:42 (0) ** # of additional Event Log events AFTER WMIDiag execution:
19069 08:33:42 (0) ** DCOM: ............................................................................................................. 0.
19070 08:33:42 (0) ** WINMGMT: .......................................................................................................... 0.
19071 08:33:42 (0) ** WMIADAPTER: ....................................................................................................... 0.
19072 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19073 08:33:42 (0) ** WMI Registry key setup: ............................................................................................. OK.
19074 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19075 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19076 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19077 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19078 08:33:42 (0) **
19079 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19080 08:33:42 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------
19081 08:33:42 (0) ** ----------------------------------------------------------------------------------------------------------------------------------
19082 08:33:42 (0) **
19083 08:33:42 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.IDS\LOCAL SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.SP2.32_WIDKL1TSRIWAHYU_2010.01.22_08.28.43.LOG' for details.
19084 08:33:42 (0) **
19085 08:33:42 (0) ** WMIDiag v2.0 ended on Friday, January 22, 2010 at 08:33 (W:82 E:129 S:1).

[Hemoco]

Could you post the output of wmdiag please.