The Windows Management Instrumentation (WMI) service cancels Lockdown feature tasks when there is insufficient physical memory available. Lockdown features include Dialog Filter, Embedded Lockdown Manager, Shell Launcher, and Gesture Filter, among others.
Additionally, the following error is returned in this situation:
The calculation for available memory for WMI is based on the available physical memory and a multiplication factor that's determined by the ArbSystemHighMaxLimitFactor registry value. If the user’s configuration reduces the amount of available physical memory, there may not be sufficient physical memory for WMI to run while using the Lockdown tasks.
The default value for ArbSystemHighMaxLimitFactor is 0x00000032 (50), which specifies 50 percent of memory. To increase the available physical memory for WMI, set ArbSystemHighMaxLimitFactor to 75 percent of memory, as follows: