Home
  •  

SMS 2003 依赖服务故障: Windows Management Instrumentation 无法登录

SMS_2003_dependent_service_failure__Windows_Management_Instrumentation_was_unable_to_log_on_6_Rule (Rule)

Knowledge Base article:

摘要

由于用户凭据和密码失效，该服务无法启动。因此，依赖服务和客户端不能再使用该服务。默认情况下，WMI 服务以本地系统帐户登录。用于登录的帐户可能已从本地系统帐户更改为其他帐户。

原因

用于启动该服务的帐户的凭据无效，或不具有启动该服务的足够权限。

解决方法

为确保正确配置该服务，请使用 Microsoft 管理控制台 (MMC) 中的服务管理单元，将用户帐户更改回本地系统帐户。

外部支持

有关 WMI 的详细信息，请参阅有关 Microsoft Systems Management Server 的操作指南的附录 B“Windows Management Instrumentation”。该指南位于 Systems Management Server 2003 产品文档网页（该网页可能为英文）。

若要获取进一步的帮助，请参阅 SMS 网站的支持部分 针对 Systems Management Server 的支持所提供的其他支持选项。

其他信息

最好由 SMS 管理员来处理此警报。

示例事件

%1 服务无法使用当前配置的密码以 %2 身份登录，错误原因如下:%n%3%n%n 要确保服务配置正确，请使用 Microsoft 管理控制台 (MMC) 中的服务管理单元。

Element properties:

TargetMicrosoft.SMS.2003.Microsoft_SMS_2003_Servers_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert MessageSMS_2003_dependent_service_failure__Windows_Management_Instrumentation_was_unable_to_log_on_6_Rule.AllertMessageBackwardCompatibility
Event LogSystem
CommentMom2005ID='{10446F4F-E298-41EB-958A-2E75DBF20E21}';MOM2005ComputerGroupID={551F3751-72E1-4F62-B516-775D9ACBE7BD}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="SMS_2003_dependent_service_failure__Windows_Management_Instrumentation_was_unable_to_log_on_6_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{10446F4F-E298-41EB-958A-2E75DBF20E21}';MOM2005ComputerGroupID={551F3751-72E1-4F62-B516-775D9ACBE7BD}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Service Control Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Windows Management Instrumentation</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>7038</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/LoggingComputer$

           - SMS 2003 dependent service failure: Windows Management Instrumentation was unable to log on.



The  Windows Management Instrumentation service running on 

            $Data/LoggingComputer$

           was detected as stopped at 

            $Data/@time$

          .</Description>

        <AlertLevel>70</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>SMS 2003 dependent service failure: Windows Management Instrumentation was unable to log on</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>