Edit

Group policy with WMI filters can be denied or cause slow logon/boot

  • Article

This article provides a resolution to an issue where Group policy with WMI filters can be denied or cause slow logon/boot.

Applies to:   Windows Server 2008 R2 Service Pack 1
Original KB number:   2663850

Symptoms

Group policy with WMI filter fails to apply. The WMI query (WMI filter linked to a GPO) times out due to which the GPO does not apply to the computers, intermittently.

GPSVC logs show the following:

GPSVC(320.af8) <DateTime> FilterCheck: Evaluate returned error. hr=0x80041069
GPSVC(320.af8) <DateTime> ProcessGPO: The GPO does not pass the filter check and so will not be applied.

ERR for 0x80041069 gives the following result:

# for hex 0x80041069 / decimal -2147217303
WBEM_E_TIMED_OUT wbemcli.h
# as an HRESULT: Severity: FAILURE (1), FACILITY_ITF (0x4), Code 0x1069
# for hex 0x1069 / decimal 4201
ERROR_WMI_INSTANCE_NOT_FOUND winerror.h
# The instance name passed was not recognized as valid by a # WMI data provider
# 2 matches found for "0x80041069"

Cause

WMI filtering was taking time while being processed. It was trying to enumerate all the domain names as query used was:

Select * from Win32_NTDomain where ClientSiteName  = "XYZ"

Resolution

Add domain name component to the WMI query to resolve the issue (along with the AND operator):

Select * from Win32_NTDomain where DomainName = "Domain_name" AND ClientSiteName  = "XYZ"

Make sure the below hotfix is already installed:

After you apply a WMI filter, the GPO does not take effect on a client computer that is running Windows 7 or Windows Server 2008 R2

More information

Timeout for WMI queries:

Per-Vista = None
Vista onwards = 30 seconds (hardcoded)

In one of the cases, it was informed that removing customized security filtering from the GPO (that has WMI filter configured) resolved the issue, however, it has not been tested or verified.

Data collection

If you need assistance from Microsoft support, we recommend you collect the information by following the steps mentioned in Gather information by using TSS for User Experience issues.