Open-AudIT

I am getting the following error on one machine in my network.

Source: Application Error
Category: (100)
Event ID: 1000
Description:
Faulting application wmiprvse.exe, version 5.2.3790.4455, faulting module msvcrt.dll, version 7.0.3790.3959, fault address 0x00038efa.

For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.


The machine successfully audits, and has so for over a year. The WMI service restarts itself, but everytime i log into the machine i am reminded by the stack of crashed WMI errors. The times that the service crashes directly correspond to the time my audits run. Has anyone experienced this error?

Audit Server:
WinXP SP3 - 1.2ghz 768M RAM

Remote Server:
Windows Server2003 R2 - 3.6ghz 2G RAM

Both are Virtual Machines. They are running on different hosts.

Look to be WMI corruption, not sure what to say exept good luck!

You could try here...

http://windowsxp.mvps.org/repairwmi.htm

It goes in to some detail, and also mentions 2003.

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]

... Oh, and I assume you have a backup...

_________________
Andrew

[size=85]OA Server: Windows XP/ XAMPP, Mandriva/Apache, Ubuntu
Auditing: 300+ Wstns, 20+ Srvrs, Thin clients, Linux boxes, Routers, etc
OS's: Windows XP , W2K Srvr, W2K3 Srvr, W2K8, Vista, Windows 7, Linuxes (and a Mac at home)
LDAP: Active Directory[/size]

Thanks for the reply. I will try rebuilding the WMI repository...

As for backups, of course! There are two kinds of people when it comes to backups... Those that make backups, and those that haven't lost data yet.