RPC server unavailable

[Aggrajag]

I posted this originally in the SpiceWorks forum as the error isn't solely related to Lansweeper. However after a week with no successful responses I'm re-posting here:


After 6 weeks occasional tinkering, and now three days solid work, I'm finally throwing in the towel and conceding defeat. I'm getting nowhere and I'm hoping someone can prove that I'm an idiot and have missed something obvious...

Forgive the length of this post but I'm going to try to give as much information as possible upfront.

I'm getting the dreaded "RPC server unavailable" error and I've tried every fix on the first 3 pages of Google and also all the posts and recommendations on the LanSweeper website and forums. I do confess the Microsoft technet article (4494) at the top of Google goes beyond my understanding as I'm not familiar with network tracing.

I'm testing with the LanSweeper "TestConnection" program (only for paid-up users I believe) and it's failing on the "Scanning WMI" section, returning 3 x "The RPC server is unavailable" errors.

I'm also testing with WMIC as follows:

wmic /node:"<pcname>" /user:<myadminname> /password:"<mypassword>" cpu get maxclockspeed

which returns "The RPC server is unavailable." It does work if I run it locally (just to prove WMI is running.) Note that I put quotes around <pcname> and <password> as they contain non-alphanumeric characters.

Our machines did scan using both LanSweeper and SpiceWorks until January and then it seems that over a two week period (12th-28th) they all stopped being scannable. I've no idea what caused this. Currently I have 6 out of 110 machines that I can scan, plus all the servers.

Environment: Windows 7 pro, all PCs on the same LAN subnet (255.255.255.0) and on the same Domain. Lansweeper and SpiceWorks running on the same server, virtualised Windows 2012, but this isn't really relevant as any two machines cannot RPC/WMI to each other.

I can REGEDIT to a remote registry.

I can COMPMGMT.MSC to a remote PC and view Windows Logs, start/stop Services and use Performance Monitor but I cannot use WMI Control ("Failed to connect to \\<pcname> because "Win32: The RPC server is unavailable.")

I've re-written the entire Domain Windows firewall policies (and used 'gpupdate /force') so they're cleaner and so that I can turn off specific ones for testing. I believe all the recommended ports are open but again this isn't seemingly relevant as turning off the firewall (at both ends) makes no difference.

We use Kaspersky AntiVirus but again this makes no difference as I can disable it, or remove it, and it makes no difference.

I believe all the required services are running:

* Remote Procedure Call (RPC)

* Remote Procedure Call (RPC) Locator

* Windows Remote Management (WS-Management)

* Windows Management Instrumentation

Plus some others I've seen mentioned in various articles:

* DCOM Server Process Launcher

* WMI Performance Adapter

DNS and DHCP are setup correctly (with scavenging) and PC names and IP addresses correctly resolve back and forth.

I've run "wmi_fix" that I found posted by someone on SpiceWorks.

I've run the much more comprehensive "WMI_rebuild" that I found posted by someone on SpiceWorks.

I've run WMIDiag.vbs (by Microsoft) on my own machine but don't particularly understand the results so I'll post them below.

Any help genuinely appreciated. I'm stumped 😞

[Aggrajag · Accepted solution]

Yes LsPush works. I'll look at the corrupt WMI documentation and if necessary take this to email as suggested.

Thank you.

[Hemoco]

Can you check if you can scan with LsPush. If this fails also, WMI is probably corrupt.
==>http://www.lansweeper.com/kb/47/How-to-repair-a-corrupt-WMI-installation.html

May we ask you to send urgent support questions for Lansweeper to support@lansweeper.com. We only look at the forum posts when all e-mail requests to the support team are solved.

[willpolley]

I'm having a similar issue with Windows Server 2012 and 2012 R2.

The connection tester reports closed ports for 135 and 445.

However, if I run the same remote computer on Windows 7, 8.1 or Server 2008 R2 the ports are open.

Scanning WMI works in all cases.

DNS and DHCP are correct.

[Aggrajag]

Any thoughts? Any help?

[Aggrajag]

Using FQDN:


Lansweeper Connection Tester 5.1.0.7

Scanning Lansweeper Service (on this machine)..
Status: Running
Version: 5.1.0.49

Pinging hp-markw.leger.co.uk
Ping ok.

Scanning TCP ports..
135 open (EPMAP)
139 open (NetBIOS Session Service)
445 open (SMB)

Checking DNS..
hp-markw.leger.co.uk resolved to: 10.57.18.253
If this is not correct, please check for DNS problems.

Checking reverse DNS..
10.57.18.253:
hp-markw.leger.co.uk

Scanning netbios (UDP)..
Computername: HP-MARKW
Domain: LEGER

Scanning Active Directory..
operatingSystem: Windows 7 Professional
operatingSystemServicePack: Service Pack 1
operatingSystemVersion: 6.1 (7601)

Scanning WMI..
The RPC server is unavailable.

The RPC server is unavailable.

The RPC server is unavailable.

Warning: 1 Kerberos errors:
Category: 0
ComputerName: MARS.leger.co.uk
EventCode: 3
EventIdentifier: 2147483651
EventType: 1
InsertionStrings: ; ; 9:54:54.0000 3/13/2014 Z; 0x29; KRB_AP_ERR_MODIFIED; ; ; ; LEGER.CO.UK; hp-markw$; ; ; 3; 586
Logfile: System
Message: A Kerberos error message was received: on logon session Client Time: Server Time: 9:54:54.0000 3/13/2014 Z Error Code: 0x29 KRB_AP_ERR_MODIFIED Extended Error: Client Realm: Client Name: Server Realm: LEGER.CO.UK Server Name: hp-markw$ Target Name: Error Text: File: 3 Line: 586 Error Data is in record data.
RecordNumber: 100994
SourceName: Microsoft-Windows-Security-Kerberos
TimeGenerated: 20140313095454.000000-000
TimeWritten: 20140313095454.000000-000
Type: Error

Done.

[Aggrajag]

Using netbios:


Lansweeper Connection Tester 5.1.0.7

Scanning Lansweeper Service (on this machine)..
Status: Running
Version: 5.1.0.49

Pinging hp-markw
Ping ok.

Scanning TCP ports..
135 open (EPMAP)
139 open (NetBIOS Session Service)
445 open (SMB)

Checking DNS..
hp-markw resolved to: 10.57.18.253
If this is not correct, please check for DNS problems.

Checking reverse DNS..
10.57.18.253:
hp-markw.leger.co.uk

Scanning netbios (UDP)..
Computername: HP-MARKW
Domain: LEGER

Scanning Active Directory..
operatingSystem: Windows 7 Professional
operatingSystemServicePack: Service Pack 1
operatingSystemVersion: 6.1 (7601)

Scanning WMI..
The RPC server is unavailable.

The RPC server is unavailable.

The RPC server is unavailable.

Warning: 1 Kerberos errors:
Category: 0
ComputerName: MARS.leger.co.uk
EventCode: 3
EventIdentifier: 2147483651
EventType: 1
InsertionStrings: ; ; 9:54:31.0000 3/13/2014 Z; 0x29; KRB_AP_ERR_MODIFIED; ; ; ; LEGER.CO.UK; hp-markw$; ; ; 3; 586
Logfile: System
Message: A Kerberos error message was received: on logon session Client Time: Server Time: 9:54:31.0000 3/13/2014 Z Error Code: 0x29 KRB_AP_ERR_MODIFIED Extended Error: Client Realm: Client Name: Server Realm: LEGER.CO.UK Server Name: hp-markw$ Target Name: Error Text: File: 3 Line: 586 Error Data is in record data.
RecordNumber: 100990
SourceName: Microsoft-Windows-Security-Kerberos
TimeGenerated: 20140313095430.000000-000
TimeWritten: 20140313095430.000000-000
Type: Error

Done.

[Aggrajag]

Using IP address:


Lansweeper Connection Tester 5.1.0.7

Scanning Lansweeper Service (on this machine)..
Status: Running
Version: 5.1.0.49

Pinging 10.57.18.253
Ping ok.

Scanning TCP ports..
135 open (EPMAP)
139 open (NetBIOS Session Service)
445 open (SMB)

Checking DNS..
10.57.18.253 resolved to: 10.57.18.253
If this is not correct, please check for DNS problems.

Checking reverse DNS..
10.57.18.253:
hp-markw.leger.co.uk

Scanning netbios (UDP)..
Computername: HP-MARKW
Domain: LEGER

Scanning Active Directory..
operatingSystem: Windows 7 Professional
operatingSystemServicePack: Service Pack 1
operatingSystemVersion: 6.1 (7601)

Scanning WMI..
The RPC server is unavailable.

The RPC server is unavailable.

The RPC server is unavailable.

Warning: 2 Kerberos errors:
Category: 0
ComputerName: MARS.leger.co.uk
EventCode: 4
EventIdentifier: 1073741828
EventType: 1
InsertionStrings: hp-markw$; LEGER.CO.UK; RPCSS/hp-markw.leger.co.uk; LEGER.CO.UK
Logfile: System
Message: The Kerberos client received a KRB_AP_ERR_MODIFIED error from the server hp-markw$. The target name used was RPCSS/hp-markw.leger.co.uk. This indicates that the target server failed to decrypt the ticket provided by the client. This can occur when the target server principal name (SPN) is registered on an account other than the account the target service is using. Ensure that the target SPN is only registered on the account used by the server. This error can also happen if the target service account password is different than what is configured on the Kerberos Key Distribution Center for that target service. Ensure that the service on the server and the KDC are both configured to use the same password. If the server name is not fully qualified, and the target domain (LEGER.CO.UK) is different from the client domain (LEGER.CO.UK), check if there are identically named server accounts in these two domains, or use the fully-qualified name to identify the server.
RecordNumber: 100982
SourceName: Microsoft-Windows-Security-Kerberos
TimeGenerated: 20140313095249.000000-000
TimeWritten: 20140313095249.000000-000
Type: Error

Category: 0
ComputerName: MARS.leger.co.uk
EventCode: 3
EventIdentifier: 2147483651
EventType: 1
InsertionStrings: ; ; 9:52:50.0000 3/13/2014 Z; 0x29; KRB_AP_ERR_MODIFIED; ; ; ; LEGER.CO.UK; hp-markw$; ; ; 3; 586
Logfile: System
Message: A Kerberos error message was received: on logon session Client Time: Server Time: 9:52:50.0000 3/13/2014 Z Error Code: 0x29 KRB_AP_ERR_MODIFIED Extended Error: Client Realm: Client Name: Server Realm: LEGER.CO.UK Server Name: hp-markw$ Target Name: Error Text: File: 3 Line: 586 Error Data is in record data.
RecordNumber: 100981
SourceName: Microsoft-Windows-Security-Kerberos
TimeGenerated: 20140313095249.000000-000
TimeWritten: 20140313095249.000000-000
Type: Error

Done.

[Hemoco]

Can you please post the full output of the connection tester on both IP address, FQDN, and netbios name please.

[Aggrajag]

Microsoft WMIDiags report:

(For security I've replaced our Domain with xxx and my username (also my PC name) with yyyyy.)

31482 10:38:35 (0) ** WMIDiag v2.1 started on 05 March 2014 at 10:33.

31483 10:38:35 (0) **

31484 10:38:35 (0) ** Copyright (c) Microsoft Corporation. All rights reserved - July 2007.

31485 10:38:35 (0) **

31486 10:38:35 (0) ** This script is not supported under any Microsoft standard support program or service.

31487 10:38:35 (0) ** The script is provided AS IS without warranty of any kind. Microsoft further disclaims all

31488 10:38:35 (0) ** implied warranties including, without limitation, any implied warranties of merchantability

31489 10:38:35 (0) ** or of fitness for a particular purpose. The entire risk arising out of the use or performance

31490 10:38:35 (0) ** of the scripts and documentation remains with you. In no event shall Microsoft, its authors,

31491 10:38:35 (0) ** or anyone else involved in the creation, production, or delivery of the script be liable for

31492 10:38:35 (0) ** any damages whatsoever (including, without limitation, damages for loss of business profits,

31493 10:38:35 (0) ** business interruption, loss of business information, or other pecuniary loss) arising out of

31494 10:38:35 (0) ** the use of or inability to use the script or documentation, even if Microsoft has been advised

31495 10:38:35 (0) ** of the possibility of such damages.

31496 10:38:35 (0) **

31497 10:38:35 (0) **

31498 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31499 10:38:35 (0) ** ----------------------------------------------------- WMI REPORT: BEGIN ----------------------------------------------------------

31500 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31501 10:38:35 (0) **

31502 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31503 10:38:35 (0) ** Windows 7 - Service Pack 1 - 64-bit (7601) - User 'xxx\yyyyy' on computer 'HP-yyyyy'.

31504 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31505 10:38:35 (0) ** INFO: Environment: .................................................................................................. 1 ITEM(S)!

31524 10:38:35 (0) **

31525 10:38:35 (0) ** System drive: ....................................................................................................... C: (Disk #0 Partition #1).

31526 10:38:35 (0) ** Drive type: ......................................................................................................... IDE (ATA WDC WD10EZEX-60Z SCSI Disk Device).

31527 10:38:35 (0) ** There are no missing WMI system files: .............................................................................. OK.

31528 10:38:35 (0) ** There are no missing WMI repository files: .......................................................................... OK.

31529 10:38:35 (0) ** WMI repository state: ............................................................................................... CONSISTENT.

31530 10:38:35 (0) ** AFTER running WMIDiag:

31531 10:38:35 (0) ** The WMI repository has a size of: ................................................................................... 24 MB.

31532 10:38:35 (0) ** - Disk free space on 'C:': .......................................................................................... 720404 MB.

31533 10:38:35 (0) ** - INDEX.BTR, 4481024 bytes, 05/03/2014 10:33:09

31534 10:38:35 (0) ** - MAPPING1.MAP, 56320 bytes, 05/03/2014 10:33:09

31535 10:38:35 (0) ** - MAPPING2.MAP, 56320 bytes, 05/03/2014 10:30:16

31536 10:38:35 (0) ** - OBJECTS.DATA, 20201472 bytes, 05/03/2014 10:33:09

31537 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31538 10:38:35 (2) !! WARNING: Windows Firewall: .......................................................................................... DISABLED.

31539 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31540 10:38:35 (0) ** DCOM Status: ........................................................................................................ OK.

31541 10:38:35 (0) ** WMI registry setup: ................................................................................................. OK.

31542 10:38:35 (0) ** INFO: WMI service has dependents: ................................................................................... 2 SERVICE(S)!

31543 10:38:35 (0) ** - Security Center (WSCSVC, StartMode='Automatic')

31544 10:38:35 (0) ** - Internet Connection Sharing (ICS) (SHAREDACCESS, StartMode='Disabled')

31545 10:38:35 (0) ** => If the WMI service is stopped, the listed service(s) will have to be stopped as well.

31546 10:38:35 (0) ** Note: If the service is marked with (*), it means that the service/application uses WMI but

31547 10:38:35 (0) ** there is no hard dependency on WMI. However, if the WMI service is stopped,

31548 10:38:35 (0) ** this can prevent the service/application to work as expected.

31549 10:38:35 (0) **

31550 10:38:35 (0) ** RPCSS service: ...................................................................................................... OK (Already started).

31551 10:38:35 (0) ** WINMGMT service: .................................................................................................... OK (Already started).

31552 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31553 10:38:35 (0) ** WMI service DCOM setup: ............................................................................................. OK.

31554 10:38:35 (0) ** WMI components DCOM registrations: .................................................................................. OK.

31555 10:38:35 (0) ** WMI ProgID registrations: ........................................................................................... OK.

31556 10:38:35 (2) !! WARNING: WMI provider DCOM registrations missing for the following provider(s): ..................................... 1 WARNING(S)!

31557 10:38:35 (0) ** - ROOT/MSAPPS12, OffProv12 ({DBF82DC7-E750-4CCF-B09C-D8AECEF7158E}) (i.e. WMI Class 'Win32_PowerPoint12Tables')

31558 10:38:35 (0) ** Provider DLL: ''

31559 10:38:35 (0) ** => This is an issue because there are still some WMI classes referencing this list of providers

31560 10:38:35 (0) ** while the DCOM registration is wrong or missing. This can be due to:

31561 10:38:35 (0) ** - a de-installation of the software.

31562 10:38:35 (0) ** - a deletion of some registry key data.

31563 10:38:35 (0) ** - a registry corruption.

31564 10:38:35 (0) ** => You can correct the DCOM configuration by:

31565 10:38:35 (0) ** - Executing the 'REGSVR32.EXE <Provider.DLL>' command.

31566 10:38:35 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.

31567 10:38:35 (0) ** (This list can be built on a similar and working WMI Windows installation)

31568 10:38:35 (0) ** The following command line must be used:

31569 10:38:35 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'

31570 10:38:35 (2) !! WARNING: Re-registering with REGSVR32.EXE all DLL from 'C:\WINDOWS\SYSTEM32\WBEM\'

31571 10:38:35 (0) ** may not solve the problem as the DLL supporting the WMI class(es)

31572 10:38:35 (0) ** can be located in a different folder.

31573 10:38:35 (0) ** You must refer to the class name to determine the software delivering the related DLL.

31574 10:38:35 (0) ** => If the software has been de-installed intentionally, then this information must be

31575 10:38:35 (0) ** removed from the WMI repository. You can use the 'WMIC.EXE' command to remove

31576 10:38:35 (0) ** the provider registration data.

31577 10:38:35 (0) ** i.e. 'WMIC.EXE /NAMESPACE:\\ROOT\MSAPPS12 path __Win32Provider Where Name='OffProv12' DELETE'

31578 10:38:35 (0) ** => If the namespace was ENTIRELY dedicated to the intentionally de-installed software,

31579 10:38:35 (0) ** the namespace and ALL its content can be ENTIRELY deleted.

31580 10:38:35 (0) ** i.e. 'WMIC.EXE /NAMESPACE:\\ROOT path __NAMESPACE Where Name='MSAPPS12' DELETE'

31581 10:38:35 (0) ** - Re-installing the software.

31582 10:38:35 (0) **

31583 10:38:35 (0) ** WMI provider CIM registrations: ..................................................................................... OK.

31584 10:38:35 (0) ** WMI provider CLSIDs: ................................................................................................ OK.

31585 10:38:35 (0) ** WMI providers EXE/DLL availability: ................................................................................. OK.

31586 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31587 10:38:35 (0) ** INFO: User Account Control (UAC): ................................................................................... DISABLED.

31588 10:38:35 (0) ** INFO: Local Account Filtering: ...................................................................................... DISABLED.

31589 10:38:35 (0) ** Overall DCOM security status: ....................................................................................... OK.

31590 10:38:35 (0) ** Overall WMI security status: ........................................................................................ OK.

31591 10:38:35 (0) ** - Started at 'Root' --------------------------------------------------------------------------------------------------------------

31592 10:38:35 (0) ** INFO: WMI permanent SUBSCRIPTION(S): ................................................................................ 1.

31593 10:38:35 (0) ** - ROOT/SUBSCRIPTION, NTEventLogEventConsumer.Name="SCM Event Log Consumer".

31594 10:38:35 (0) ** 'select * from MSFT_SCMEventLogEvent'

31595 10:38:35 (0) **

31596 10:38:35 (0) ** WMI TIMER instruction(s): ........................................................................................... NONE.

31597 10:38:35 (0) ** INFO: WMI namespace(s) requiring PACKET PRIVACY: .................................................................... 3 NAMESPACE(S)!

31598 10:38:35 (0) ** - ROOT/CIMV2/SECURITY/MICROSOFTTPM.

31599 10:38:35 (0) ** - ROOT/CIMV2/TERMINALSERVICES.

31600 10:38:35 (0) ** - ROOT/SERVICEMODEL.

31601 10:38:35 (0) ** => When remotely connecting, the namespace(s) listed require(s) the WMI client to

31602 10:38:35 (0) ** use an encrypted connection by specifying the PACKET PRIVACY authentication level.

31603 10:38:35 (0) ** (RPC_C_AUTHN_LEVEL_PKT_PRIVACY or PktPrivacy flags)

31604 10:38:35 (0) ** i.e. 'WMIC.EXE /NODE:"HP-yyyyy" /AUTHLEVEL:Pktprivacy /NAMESPACE:\\ROOT\SERVICEMODEL Class __SystemSecurity'

31605 10:38:35 (0) **

31606 10:38:35 (0) ** WMI MONIKER CONNECTIONS: ............................................................................................ OK.

31607 10:38:35 (0) ** WMI CONNECTIONS: .................................................................................................... OK.

31608 10:38:35 (1) !! ERROR: WMI GET operation errors reported: ........................................................................... 72 ERROR(S)!

31609 10:38:35 (0) ** - Root/CIMV2, MSFT_NetInvalidDriverDependency, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31610 10:38:35 (0) ** MOF Registration: ''

31611 10:38:35 (0) ** - Root/CIMV2, Win32_OsBaselineProvider, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31612 10:38:35 (0) ** MOF Registration: ''

31613 10:38:35 (0) ** - Root/CIMV2, Win32_OsBaseline, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31614 10:38:35 (0) ** MOF Registration: ''

31615 10:38:35 (0) ** - Root/CIMV2, Win32_DriverVXD, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31616 10:38:35 (0) ** MOF Registration: ''

31617 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_BITS_BITSNetUtilization, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31618 10:38:35 (0) ** MOF Registration: ''

31619 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_BITS_BITSNetUtilization, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31620 10:38:35 (0) ** MOF Registration: ''

31621 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_GenericIKEandAuthIP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31622 10:38:35 (0) ** MOF Registration: ''

31623 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_GenericIKEandAuthIP, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31624 10:38:35 (0) ** MOF Registration: ''

31625 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31626 10:38:35 (0) ** MOF Registration: ''

31627 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31628 10:38:35 (0) ** MOF Registration: ''

31629 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecAuthIPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31630 10:38:35 (0) ** MOF Registration: ''

31631 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecAuthIPv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31632 10:38:35 (0) ** MOF Registration: ''

31633 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31634 10:38:35 (0) ** MOF Registration: ''

31635 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv4, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31636 10:38:35 (0) ** MOF Registration: ''

31637 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Counters_IPsecIKEv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31638 10:38:35 (0) ** MOF Registration: ''

31639 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Counters_IPsecIKEv6, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31640 10:38:35 (0) ** MOF Registration: ''

31641 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31642 10:38:35 (0) ** MOF Registration: ''

31643 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecurityPerProcessStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31644 10:38:35 (0) ** MOF Registration: ''

31645 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31646 10:38:35 (0) ** MOF Registration: ''

31647 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Lsa_SecuritySystemWideStatistics, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31648 10:38:35 (0) ** MOF Registration: ''

31649 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31650 10:38:35 (0) ** MOF Registration: ''

31651 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_MSDTC_DistributedTransactionCoordinator, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31652 10:38:35 (0) ** MOF Registration: ''

31653 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31654 10:38:35 (0) ** MOF Registration: ''

31655 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRData_NETCLRData, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31656 10:38:35 (0) ** MOF Registration: ''

31657 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31658 10:38:35 (0) ** MOF Registration: ''

31659 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETCLRNetworking_NETCLRNetworking, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31660 10:38:35 (0) ** MOF Registration: ''

31661 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31662 10:38:35 (0) ** MOF Registration: ''

31663 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforOracle_NETDataProviderforOracle, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31664 10:38:35 (0) ** MOF Registration: ''

31665 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31666 10:38:35 (0) ** MOF Registration: ''

31667 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETDataProviderforSqlServer_NETDataProviderforSqlServer, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31668 10:38:35 (0) ** MOF Registration: ''

31669 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31670 10:38:35 (0) ** MOF Registration: ''

31671 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRExceptions, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31672 10:38:35 (0) ** MOF Registration: ''

31673 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31674 10:38:35 (0) ** MOF Registration: ''

31675 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRInterop, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31676 10:38:35 (0) ** MOF Registration: ''

31677 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31678 10:38:35 (0) ** MOF Registration: ''

31679 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRJit, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31680 10:38:35 (0) ** MOF Registration: ''

31681 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31682 10:38:35 (0) ** MOF Registration: ''

31683 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLoading, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31684 10:38:35 (0) ** MOF Registration: ''

31685 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31686 10:38:35 (0) ** MOF Registration: ''

31687 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRLocksAndThreads, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31688 10:38:35 (0) ** MOF Registration: ''

31689 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31690 10:38:35 (0) ** MOF Registration: ''

31691 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRMemory, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31692 10:38:35 (0) ** MOF Registration: ''

31693 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31694 10:38:35 (0) ** MOF Registration: ''

31695 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRRemoting, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31696 10:38:35 (0) ** MOF Registration: ''

31697 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31698 10:38:35 (0) ** MOF Registration: ''

31699 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_NETFramework_NETCLRSecurity, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31700 10:38:35 (0) ** MOF Registration: ''

31701 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31702 10:38:35 (0) ** MOF Registration: ''

31703 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASPort, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31704 10:38:35 (0) ** MOF Registration: ''

31705 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31706 10:38:35 (0) ** MOF Registration: ''

31707 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_RemoteAccess_RASTotal, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31708 10:38:35 (0) ** MOF Registration: ''

31709 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31710 10:38:35 (0) ** MOF Registration: ''

31711 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_Spooler_PrintQueue, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31712 10:38:35 (0) ** MOF Registration: ''

31713 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31714 10:38:35 (0) ** MOF Registration: ''

31715 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_TapiSrv_Telephony, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31716 10:38:35 (0) ** MOF Registration: ''

31717 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServices, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31718 10:38:35 (0) ** MOF Registration: ''

31719 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServices, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31720 10:38:35 (0) ** MOF Registration: ''

31721 10:38:35 (0) ** - Root/CIMV2, Win32_PerfFormattedData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31722 10:38:35 (0) ** MOF Registration: ''

31723 10:38:35 (0) ** - Root/CIMV2, Win32_PerfRawData_TermService_TerminalServicesSession, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31724 10:38:35 (0) ** MOF Registration: ''

31725 10:38:35 (0) ** - Root/WMI, ReserveDisjoinThread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31726 10:38:35 (0) ** MOF Registration: ''

31727 10:38:35 (0) ** - Root/WMI, ReserveLateCount, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31728 10:38:35 (0) ** MOF Registration: ''

31729 10:38:35 (0) ** - Root/WMI, ReserveJoinThread, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31730 10:38:35 (0) ** MOF Registration: ''

31731 10:38:35 (0) ** - Root/WMI, ReserveDelete, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31732 10:38:35 (0) ** MOF Registration: ''

31733 10:38:35 (0) ** - Root/WMI, ReserveBandwidth, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31734 10:38:35 (0) ** MOF Registration: ''

31735 10:38:35 (0) ** - Root/WMI, ReserveCreate, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31736 10:38:35 (0) ** MOF Registration: ''

31737 10:38:35 (0) ** - Root/WMI, SystemConfig_PhyDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31738 10:38:35 (0) ** MOF Registration: ''

31739 10:38:35 (0) ** - Root/WMI, SystemConfig_Video, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31740 10:38:35 (0) ** MOF Registration: ''

31741 10:38:35 (0) ** - Root/WMI, SystemConfig_IDEChannel, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31742 10:38:35 (0) ** MOF Registration: ''

31743 10:38:35 (0) ** - Root/WMI, SystemConfig_NIC, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31744 10:38:35 (0) ** MOF Registration: ''

31745 10:38:35 (0) ** - Root/WMI, SystemConfig_Network, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31746 10:38:35 (0) ** MOF Registration: ''

31747 10:38:35 (0) ** - Root/WMI, SystemConfig_CPU, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31748 10:38:35 (0) ** MOF Registration: ''

31749 10:38:35 (0) ** - Root/WMI, SystemConfig_LogDisk, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31750 10:38:35 (0) ** MOF Registration: ''

31751 10:38:35 (0) ** - Root/WMI, SystemConfig_Power, 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found.

31752 10:38:35 (0) ** MOF Registration: ''

31753 10:38:35 (0) ** => When a WMI performance class is missing (i.e. 'Win32_PerfRawData_TermService_TerminalServicesSession'), it is generally due to

31754 10:38:35 (0) ** a lack of buffer refresh of the WMI class provider exposing the WMI performance counters.

31755 10:38:35 (0) ** You can refresh the WMI class provider buffer with the following command:

31756 10:38:35 (0) **

31757 10:38:35 (0) ** i.e. 'WINMGMT.EXE /SYNCPERF'

31758 10:38:35 (0) **

31759 10:38:35 (0) ** WMI MOF representations: ............................................................................................ OK.

31760 10:38:35 (0) ** WMI QUALIFIER access operations: .................................................................................... OK.

31761 10:38:35 (0) ** WMI ENUMERATION operations: ......................................................................................... OK.

31762 10:38:35 (0) ** WMI EXECQUERY operations: ........................................................................................... OK.

31763 10:38:35 (0) ** WMI GET VALUE operations: ........................................................................................... OK.

31764 10:38:35 (0) ** WMI WRITE operations: ............................................................................................... NOT TESTED.

31765 10:38:35 (0) ** WMI PUT operations: ................................................................................................. NOT TESTED.

31766 10:38:35 (0) ** WMI DELETE operations: .............................................................................................. NOT TESTED.

31767 10:38:35 (0) ** WMI static instances retrieved: ..................................................................................... 2507.

31768 10:38:35 (0) ** WMI dynamic instances retrieved: .................................................................................... 0.

31769 10:38:35 (0) ** WMI instance request cancellations (to limit performance impact): ................................................... 1.

31770 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31771 10:38:35 (0) ** # of Event Log events BEFORE WMIDiag execution since the last 20 day(s):

31772 10:38:35 (0) ** DCOM: ............................................................................................................. 0.

31773 10:38:35 (0) ** WINMGMT: .......................................................................................................... 0.

31774 10:38:35 (0) ** WMIADAPTER: ....................................................................................................... 0.

31775 10:38:35 (0) **

31776 10:38:35 (0) ** # of additional Event Log events AFTER WMIDiag execution:

31777 10:38:35 (0) ** DCOM: ............................................................................................................. 0.

31778 10:38:35 (0) ** WINMGMT: .......................................................................................................... 0.

31779 10:38:35 (0) ** WMIADAPTER: ....................................................................................................... 0.

31780 10:38:35 (0) **

31781 10:38:35 (0) ** 72 error(s) 0x80041002 - (WBEM_E_NOT_FOUND) Object cannot be found

31782 10:38:35 (0) ** => This error is typically a WMI error. This WMI error is due to:

31783 10:38:35 (0) ** - a missing WMI class definition or object.

31784 10:38:35 (0) ** (See any GET, ENUMERATION, EXECQUERY and GET VALUE operation failures).

31785 10:38:35 (0) ** You can correct the missing class definitions by:

31786 10:38:35 (0) ** - Manually recompiling the MOF file(s) with the 'MOFCOMP <FileName.MOF>' command.

31787 10:38:35 (0) ** Note: You can build a list of classes in relation with their WMI provider and MOF file with WMIDiag.

31788 10:38:35 (0) ** (This list can be built on a similar and working WMI Windows installation)

31789 10:38:35 (0) ** The following command line must be used:

31790 10:38:35 (0) ** i.e. 'WMIDiag CorrelateClassAndProvider'

31791 10:38:35 (0) ** Note: When a WMI performance class is missing, you can manually resynchronize performance counters

31792 10:38:35 (0) ** with WMI by starting the ADAP process.

31793 10:38:35 (0) ** - a WMI repository corruption.

31794 10:38:35 (0) ** In such a case, you must rerun WMIDiag with 'WriteInRepository' parameter

31795 10:38:35 (0) ** to validate the WMI repository operations.

31796 10:38:35 (0) ** Note: ENSURE you are an administrator with FULL access to WMI EVERY namespaces of the computer before

31797 10:38:35 (0) ** executing the WriteInRepository command. To write temporary data from the Root namespace, use:

31798 10:38:35 (0) ** i.e. 'WMIDiag WriteInRepository=Root'

31799 10:38:35 (0) ** - If the WriteInRepository command fails, while being an Administrator with ALL accesses to ALL namespaces

31800 10:38:35 (0) ** the WMI repository must be reconstructed.

31801 10:38:35 (0) ** Note: The WMI repository reconstruction requires to locate all MOF files needed to rebuild the repository,

31802 10:38:35 (0) ** otherwise some applications may fail after the reconstruction.

31803 10:38:35 (0) ** This can be achieved with the following command:

31804 10:38:35 (0) ** i.e. 'WMIDiag ShowMOFErrors'

31805 10:38:35 (0) ** Note: The repository reconstruction must be a LAST RESORT solution and ONLY after executing

31806 10:38:35 (0) ** ALL fixes previously mentioned.

31807 10:38:35 (2) !! WARNING: Static information stored by external applications in the repository will be LOST! (i.e. SMS Inventory)

31808 10:38:35 (0) **

31809 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31810 10:38:35 (0) ** WMI Registry key setup: ............................................................................................. OK.

31811 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31812 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31813 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31814 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31815 10:38:35 (0) **

31816 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31817 10:38:35 (0) ** ------------------------------------------------------ WMI REPORT: END -----------------------------------------------------------

31818 10:38:35 (0) ** ----------------------------------------------------------------------------------------------------------------------------------

31819 10:38:35 (0) **

31820 10:38:35 (0) ** ERROR: WMIDiag detected issues that could prevent WMI to work properly!. Check 'C:\USERS\yyy.xxx\APPDATA\LOCAL\TEMP\WMIDIAG-V2.1_WIN7_.CLI.SP1.64_HP-yyyyy_2014.03.05_10.33.39.LOG' for details.

31821 10:38:35 (0) **

31822 10:38:35 (0) ** WMIDiag v2.1 ended on 05 March 2014 at 10:38 (W:70 E:205 S:1).