Event ID 10 is logged in the Application log after you install Windows Vista Service Pack 1 or Windows Server 2008

Article translations Article translations
Article ID: 950375 - View products that this article applies to.
Expand all | Collapse all

SYMPTOMS

After you install Windows Vista Service Pack 1 (SP1), Windows Server 2008, the following WMI error is logged in the Application log:

Log Name: Application
Source: Microsoft-Windows-WMI
Date: 1/18/2008 2:37:27 PM
Event ID: 10
Task Category: None
Level: Error
Keywords: Classic
Description: Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

When you click the Details tab in the error message and select the XML view, you receive the following error message:
Event Xml:
<Event xmlns="http://schemas.microsoft.com/win/2004/08/events/event">
  <System>
    <Provider Name="Microsoft-Windows-WMI" Guid="{1edeee53-0afe-4609-b846-d8c0b2075b1f}" EventSourceName="WinMgmt" />
    <EventID Qualifiers="49152">10</EventID>
    <Version>0</Version>
    <Level>2</Level>
    <Task>0</Task>
    <Opcode>0</Opcode>
    <Keywords>0x80000000000000</Keywords>
    <TimeCreated SystemTime="2008-01-18T22:37:27.000Z" />
    <EventRecordID>187</EventRecordID>
    <Correlation />
    <Execution ProcessID="0" ThreadID="0" />
    <Channel>Application</Channel>
    <Computer>adsd-PC</Computer>
    <Security />
  </System>
  <EventData>
    <Data>//./root/CIMV2</Data>
    <Data>SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage &gt; 99</Data>
    <Data>0x80041003</Data>
  </EventData>
</Event>

CAUSE

This problem occurs if the WMI filter is accessed without sufficient permission.

RESOLUTION

To resolve this problem, run a script to stop the Event ID 10 messages. To run this script, follow these steps:
  1. In a text editor, such as Notepad, create a new text document named Test.vbs.
  2. Paste the following code into Test.vbs:
    strComputer = "."
    Set objWMIService = GetObject("winmgmts:" _
    & "{impersonationLevel=impersonate}!\\" _
    & strComputer & "\root\subscription")
    
    Set obj1 = objWMIService.Get("__EventFilter.Name='BVTFilter'")
    
    set obj2set = obj1.Associators_("__FilterToConsumerBinding")
    
    set obj3set = obj1.References_("__FilterToConsumerBinding")
    
    
    
    For each obj2 in obj2set
                    WScript.echo "Deleting the object"
                    WScript.echo obj2.GetObjectText_
                    obj2.Delete_
    next
    
    For each obj3 in obj3set
                    WScript.echo "Deleting the object"
                    WScript.echo obj3.GetObjectText_
                    obj3.Delete_
    next
    
    WScript.echo "Deleting the object"
    WScript.echo obj1.GetObjectText_
    obj1.Delete_
  3. After you run this script, the Event ID 10 messages stop appearing in the Application log. However, you have to manually clear any previous Event ID 10 messages.

    Note Make sure that you only delete the appropriate Event ID 10 messages. There may be other pertinent Event ID 10 messages that you do not want to delete.
For Windows 7 and Windows Server 2008 R2, we have a Fix It available for Event ID 10 logged, click the following article number to view the article in the Microsoft Knowledge Base:
2545227 Event ID 10 is logged in the Application log after you install Service Pack 1 for Windows 7 or Windows Server 2008 R2

MORE INFORMATION

This particular Event ID 10 error message listed above can be safely ignored, this is not indicative of a problem with the Service Pack or with the operating system.

Properties

Article ID: 950375 - Last Review: June 30, 2011 - Revision: 3.1
APPLIES TO
  • Windows Vista Service Pack 1
  • Windows Vista Enterprise 64-bit Edition
  • Windows Vista Home Basic 64-bit Edition
  • Windows Vista Home Premium 64-bit Edition
  • Windows Vista Ultimate 64-bit Edition
  • Windows Vista Business
  • Windows Vista Business 64-bit Edition
  • Windows Vista Enterprise
  • Windows Vista Home Basic
  • Windows Vista Home Premium
  • Windows Vista Starter
  • Windows Vista Ultimate
  • Windows Server 2008 Standard
  • Windows Server 2008 Enterprise
  • Windows Server 2008 for Itanium-Based Systems
Keywords: 
kbexpertiseinter kbtshoot kbprb KB950375

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com