WMI Consumer - Server could not register for notifications for configuration changes for a class from the WMI Provider.

WMI_Consumer___Server_could_not_register_for_notifications_for_configuration_changes_for_a_class_from_the_WMI_Provider._3_7_Rule (Rule)

Knowledge Base article:

Management Pack

Summary
Server could not register for notifications for configuration changes for a class from the WMI Provider.

Causes
This could happen in some instances due to insufficient permissions or because the server is unable to contact the Active Directory (or SQL backend).

Resolutions
Please make sure you have sufficient privileges and this machine can talk to the Active Directory (or SQL backend).

Element properties:

Target

Microsoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Enterprise_Edition_Installation

Category

EventCollection

Enabled

True

Event_ID

20481

Event Source

Live Communications Server WMI Consumer

Alert Generate

True

Alert Severity

Error

Alert Priority

Low

Remotable

True

Alert Message

WMI Consumer - Server could not register for notifications for configuration changes for a class from the WMI Provider.

$Data/EventDescription$

Event Log

Application

Comment

Mom2005ID='{2D812AEE-EB97-4608-A9F8-E22FBB4DA8BA}';MOM2005ComputerGroupID={CFD63B0C-55F0-407D-91B4-EE48A4AAA89A}

Member Modules:

ID	Module Type	TypeId	RunAs
_F6DA1507_12AF_11D3_AB21_00A0C98620CE_	DataSource	Microsoft.Windows.EventProvider	Default
CollectEventData	WriteAction	Microsoft.SystemCenter.CollectEvent	Default
CollectEventDataWarehouse	WriteAction	Microsoft.SystemCenter.DataWarehouse.PublishEventData	Default
GenerateAlert	WriteAction	System.Mom.BackwardCompatibility.AlertResponse	Default

Source Code:

<Rule ID="WMI_Consumer___Server_could_not_register_for_notifications_for_configuration_changes_for_a_class_from_the_WMI_Provider._3_7_Rule" Target="Microsoft.Office.LiveCommunicationsServer.2005.Microsoft_Office_Live_Communications_Server_2005_Enterprise_Edition_Installation" Enabled="true" ConfirmDelivery="true" Comment="Mom2005ID='{2D812AEE-EB97-4608-A9F8-E22FBB4DA8BA}';MOM2005ComputerGroupID={CFD63B0C-55F0-407D-91B4-EE48A4AAA89A}">

  <Category>EventCollection</Category>

  <DataSources>

    <DataSource ID="_F6DA1507_12AF_11D3_AB21_00A0C98620CE_" Comment="{F6DA1507-12AF-11D3-AB21-00A0C98620CE}" TypeID="WindowsLibrary!Microsoft.Windows.EventProvider">

      <ComputerName>$Target/Host/Property[Type="WindowsLibrary!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

      <LogName>Application</LogName>

      <Expression>

        <And>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="Integer">EventDisplayNumber</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>20481</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

          <Expression>

            <SimpleExpression>

              <ValueExpression>

                <XPathQuery Type="String">PublisherName</XPathQuery>

              </ValueExpression>

              <Operator>Equal</Operator>

              <ValueExpression>

                <Value>Live Communications Server WMI Consumer</Value>

              </ValueExpression>

            </SimpleExpression>

          </Expression>

        </And>

      </Expression>

    </DataSource>

  </DataSources>

  <WriteActions>

    <WriteAction ID="GenerateAlert" TypeID="MomBackwardCompatibility!System.Mom.BackwardCompatibility.AlertResponse">

      <AlertGeneration>

        <GenerateAlert>true</GenerateAlert>

        <Owner/>

        <Description>

            $Data/EventDescription$

          </Description>

        <AlertLevel>40</AlertLevel>

        <ResolutionState/>

        <Source>

            $Data/PublisherName$

          </Source>

        <Name>WMI Consumer - Server could not register for notifications for configuration changes for a class from the WMI Provider.</Name>

      </AlertGeneration>

      <InvokerType>0</InvokerType>

    </WriteAction>

    <WriteAction ID="CollectEventData" TypeID="SystemCenterLibrary!Microsoft.SystemCenter.CollectEvent"/>

    <WriteAction ID="CollectEventDataWarehouse" TypeID="DataWarehouseLibrary!Microsoft.SystemCenter.DataWarehouse.PublishEventData"/>

  </WriteActions>

</Rule>