Home
  •  

SMS 2003 dependent service failure: Windows Management Instrumentation was unable to log on

SMS_2003_dependent_service_failure__Windows_Management_Instrumentation_was_unable_to_log_on_6_Rule (Rule)

Knowledge Base article:

Summary

The service has failed to start because the user credentials and password are no longer valid. As a result the service is no longer available to dependent services and clients. By default the WMI service logs on under the Local System account. It is possible that the account used to log on was changed from Local System to something else.

Causes

The account used to start the service has invalid credentials or insufficient privilege to start the service.

Resolutions

To ensure that the service is configured properly, use the Services snap-in, in Microsoft Management Console (MMC) to change the user account back to Local System.

External

For more information about WMI see Appendix B, "Windows Management Instrumentation" in the Microsoft Systems Management Server Operations Guide at the Systems Management Server 2003 Product Documentation Web page.

For more assistance, a list of additional support options is available in the support section of the SMS Web site at Support for Systems Management Server.

Additional

This alert is best handled by SMS administrators.

Sample Events

The %1 service was unable to log on as %2 with the currently configured password due to the following error: %n%3%n%n To ensure that the service is configured properly, use the Services snap-in in Microsoft Management Console (MMC).

Element properties:

TargetMicrosoft.SMS.2003.Microsoft_SMS_2003_Servers_Installation
CategoryEventCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
RemotableTrue
Alert Message
SMS 2003 依赖服务故障: Windows Management Instrumentation 无法登录

$Data/LoggingComputer$ - SMS 2003 依赖服务故障: Windows Management Instrumentation 无法登录。

检测到 $Data/LoggingComputer$ 上运行的 Windows Management Instrumentation 服务在 $Data/@time$ 停止。
Event LogSystem
CommentMom2005ID='{10446F4F-E298-41EB-958A-2E75DBF20E21}';MOM2005ComputerGroupID={551F3751-72E1-4F62-B516-775D9ACBE7BD}

Member Modules:

ID Module Type TypeId RunAs 
_907D4578_146C_11D3_AB21_00A0C98620CE_ DataSource Microsoft.Windows.EventProvider Default
CollectEventData WriteAction Microsoft.SystemCenter.CollectEvent Default
CollectEventDataWarehouse WriteAction Microsoft.SystemCenter.DataWarehouse.PublishEventData Default
GenerateAlert WriteAction System.Mom.BackwardCompatibility.AlertResponse Default

Source Code:

<Rule ID="SMS_2003_dependent_service_failure__Windows_Management_Instrumentation_was_unable_to_log_on_6_Rule" Target="Microsoft.SMS.2003.Microsoft_SMS_2003_Servers_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{10446F4F-E298-41EB-958A-2E75DBF20E21}';MOM2005ComputerGroupID={551F3751-72E1-4F62-B516-775D9ACBE7BD}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_907D4578_146C_11D3_AB21_00A0C98620CE_" Comment="{907D4578-146C-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>System</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Service Control Manager</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">Params/Param[1]</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Windows Management Instrumentation</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>7038</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/LoggingComputer$

           - SMS 2003 dependent service failure: Windows Management Instrumentation was unable to log on.



The  Windows Management Instrumentation service running on 

            $Data/LoggingComputer$

           was detected as stopped at 

            $Data/@time$

          .</Description>

        <AlertLevel>70</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>SMS 2003 dependent service failure: Windows Management Instrumentation was unable to log on</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>