Constant wmiprvse.exe Errors


we have 5 windows server datacenter edition sp1 servers in cluster.  @ least 1 server per week starts getting error below , once occurs can no longer add new virtual machines cluster via scvmm until remove affected server cluster.

so far thing has worked complete reinstall.  after full reinstall backup wmi repository, turn on shadow copies , create backup of c: drive.  once error begins have tried restore wmi repository no luck, restore x32 , x64 wbeb , inf folders our backups , search through shadow copy shows no modified files around time errors begin.

we cannot find change causes start nor fix it.

anyone have a thought?

log name:      application
source:        application error
date:          2/19/2009 8:01:55 pm
event id:      1000
task category: (100)
level:         error
keywords:      classic
user:          n/a
computer:      srv1.domain.net
description:
faulting application wmiprvse.exe, version 6.0.6001.18000, time stamp 0x4791950f, faulting module ntdll.dll, version 6.0.6001.18000, time stamp 0x4791adec, exception code 0xc0000374, fault offset 0x00000000000a6e97, process id 0x5f4, application start time 0x01c9930f5a8798a6.
event xml:
<event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <system>
    <provider name="application error" />
    <eventid qualifiers="0">1000</eventid>
    <level>2</level>
    <task>100</task>
    <keywords>0x80000000000000</keywords>
    <timecreated systemtime="2009-02-20t04:01:55.000z" />
    <eventrecordid>1886</eventrecordid>
    <channel>application</channel>
    <computer>srv1.domain.net</computer>
    <security />
  </system>
  <eventdata>
    <data>wmiprvse.exe</data>
    <data>6.0.6001.18000</data>
    <data>4791950f</data>
    <data>ntdll.dll</data>
    <data>6.0.6001.18000</data>
    <data>4791adec</data>
    <data>c0000374</data>
    <data>00000000000a6e97</data>
    <data>5f4</data>
    <data>01c9930f5a8798a6</data>
  </eventdata>
</event>

hi,

 

please verify various wmi namespaces can connected to, update wmi on involved windows 2008 machines.

 

1.    verify wmi namspace on each machine involved:

 

1.1 using wbemtest

- click 'start' button

- start> run> wbemtest

- click 'connect' , enter 'root\cimv2' click 'connect' again. should not prompt error

- click 'connect' , enter 'root\default' click 'connect' again. should not prompt error

on hyper-v server, should work

- click 'connect' , enter 'root\virtualization' click 'connect' again.

this should not prompt error

on scvmm server (host) should work

- click 'connect' , enter 'root\scvmm' click 'connect' again. should not prompt error

- close 'wbemtest'

 

1.2 using command line

- elevated command prompt type 'wmic nic' , press enter

- should return information, not error. if there error, , other tests work, due nic teaming. uninstall nic teaming software, reboot , try again

- elevated command prompt type 'wmic diskdrive list brief' , press enter

- should return information, not error

 

 

2.    install wmi updates , hotfixes

currently following updates have been tested , confirmed. if have other wmi updates have confirmed please notify me or update article.

 

each requires reboot:

 

954563 memory corruption may occur windows management instrumentation (wmi) service on computer running windows server 2008 or windows vista service pack 1

http://support.microsoft.com/default.aspx?scid=kb;en-us;954563

 

958124 wmiprvse.exe process may leak memory when wmi notification query used heavily on windows server 2008-based or windows vista-based computer

http://support.microsoft.com/default.aspx?scid=kb;en-us;958124

 

955805 applications become slow on windows server 2008-based or windows vista sp1-based computer when certificate sia extension installed

http://support.microsoft.com/default.aspx?scid=kb;en-us;955805

 

 

best regards,

vincent hu

 



Windows Server  >  Hyper-V



Comments

Popular posts from this blog

2008 Windows Deployment Server Properties Error

Can no longer user MS Update - Files required to use Microsoft Update are no longer registered

How do a find data in one file, search for it in another file and if not found, write a custom message to another file