Saturday, 15 November 2014

Event ID 10 - SELECT * FROM __InstanceModificationEvent - WMI

I have got below error Event 10 in Application log after installed the Windows Server 2008 R2 Service Pack 1.
Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          11/15/2014 1:48:57 PM
Event ID:      10
Level:         Error
Computer:      TPVServer.MTS.local
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

Fix/Solution for Windows 7 or Windows Server with Service Pack 1

I have got the quick fix for this error Event 10 from microsoft support forum: Fix Application Error Event ID 10

We need to run below script to stop the Event ID 10 messages. To run the script follow these steps:

1) Copy the below script code and paste in Notepad file.

2) Save As the Notepad file with the extension .vbs like FixErrorEvent10.vbs
strComputer = "."

Set objWMIService = GetObject("winmgmts:" _
& "{impersonationLevel=impersonate}!\\" _
& strComputer & "\root\subscription")
Set obj1 = objWMIService.ExecQuery("select * from __eventfilter where name='BVTFilter' and query='SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA ""Win32_Processor"" AND TargetInstance.LoadPercentage > 99'")

For Each obj1elem in obj1

set obj2set = obj1elem.Associators_("__FilterToConsumerBinding")
set obj3set = obj1elem.References_("__FilterToConsumerBinding")

For each obj2 in obj2set
WScript.echo "Deleting the object"
WScript.echo obj2.GetObjectText_

For each obj3 in obj3set
WScript.echo "Deleting the object"
WScript.echo obj3.GetObjectText_

WScript.echo "Deleting the object"
WScript.echo obj1elem.GetObjectText_
3) Open the command prompt with elevated privilege (Run As Administrator)

4) Now run the vb script file FixErrorEvent10.vbs using CScript from command prompt to stop the event 10 with the above error message.

Event ID 10 - SELECT * FROM __InstanceModificationEvent - WMI

After running this script the Event ID 10 errors related to this event should stop occurring.

Note: If you receive the Event ID 10 with different error message, there can be other reasons, this only prevents the Event ID 10 with above error message.

Software Developer


No comments:

Post a Comment