locked
WMI Invalid class 0x80041010 RRS feed

  • Question

  • I wrote a script to perform a WMI software audit of my network in powershell.  The script runs fine however some workstations return an Invalid Class error.  If I run the a software query on the workstation/server locally I get:

    wmic /Failfast:on /node:"ausdc01" product GET /all

    Node - AUSDC01
    ERROR:
    Code = 0x80041010
    Description = Invalid class
    Facility = WMI

    We are talking random 2003 and XP PC's that are experiancing this problem.

    I am also getting the following event error logs:

    Event Type: Error
    Event Source: WinMgmt
    Event Category: None
    Event ID: 10
    Date:  1/12/2009
    Time:  9:57:43 AM
    User:  N/A
    Computer: AUSDC01
    Description:
    Event filter with query "select * from MSMCAEvent_MemoryError where (type = 3221553223) and (LogToEventlog <> 0)" could not be (re)activated in namespace "//./root/WMI" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected.

    Event Type: Error
    Event Source: WinMgmt
    Event Category: None
    Event ID: 10
    Date:  1/12/2009
    Time:  9:57:43 AM
    User:  N/A
    Computer: AUSDC01
    Description:
    Event filter with query "select * from MSMCAEvent_PCIBusError where (type = 2147811416) and (LogToEventlog <> 0)" could not be (re)activated in namespace "//./root/WMI" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected.

    Event Type: Error
    Event Source: WinMgmt
    Event Category: None
    Event ID: 10
    Date:  1/12/2009
    Time:  9:57:43 AM
    User:  N/A
    Computer: AUSDC01
    Description:
    Event filter with query "select * from MSMCAEvent_SMBIOSError where (type = 3221553253) and (LogToEventlog <> 0)" could not be (re)activated in namespace "//./root/WMI" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected.

    Event Type: Error
    Event Source: WinMgmt
    Event Category: None
    Event ID: 10
    Date:  1/12/2009
    Time:  9:57:43 AM
    User:  N/A
    Computer: AUSDC01
    Description:
    Event filter with query "select * from MSMCAEvent_CPUError where (type = 2147811392) and (LogToEventlog <> 0)" could not be (re)activated in namespace "//./root/WMI" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected.

    Event Type: Error
    Event Source: WinMgmt
    Event Category: None
    Event ID: 10
    Date:  1/12/2009
    Time:  9:57:43 AM
    User:  N/A
    Computer: AUSDC01
    Description:
    Event filter with query "select * from MSMCAEvent_PlatformSpecificError where (type = 3221553255) and (LogToEventlog <> 0)" could not be (re)activated in namespace "//./root/WMI" because of error 0x80041010. Events may not be delivered through this filter until the problem is corrected.

    Can anyone shed some light on this please?


    Clint Boessen MCSE, MCITP: Messaging
    Perth, Western Australia

    Blog: http://clintboessen.blogspot.com/
    Tuesday, December 1, 2009 2:38 AM

Answers

All replies

  • I forgot to include that I have rebuilt the Repository and re-registered the services already using the following batch script:

    @ECHO OFF
    NET STOP SharedAccess
    NET STOP winmgmt
    @cd /d %windir%\system32\wbem
    for %%i in (*.dll) do RegSvr32 -s %%i
    for %%i in (*.exe) do %%i /RegServer
    CD %WINDIR%\System32\Wbem\Repository
    DEL /F /Q /S %WINDIR%\System32\Wbem\Repository\*.*
    CD %WINDIR%\system32\wbem
    REGSVR32 /s %WINDIR%\system32\scecli.dll
    REGSVR32 /s %WINDIR%\system32\userenv.dll
    MOFCOMP cimwin32.mof
    MOFCOMP cimwin32.mfl
    MOFCOMP rsop.mof
    MOFCOMP rsop.mfl
    FOR /f %%s IN ('DIR /b /s *.dll') DO REGSVR32 /s %%s
    FOR /f %%s IN ('DIR /b *.mof') DO MOFCOMP %%s
    FOR /f %%s IN ('DIR /b *.mfl') DO MOFCOMP %%s
    MOFCOMP exwmi.mof
    MOFCOMP -n:root\cimv2\applications\exchange wbemcons.mof
    MOFCOMP -n:root\cimv2\applications\exchange smtpcons.mof
    MOFCOMP exmgmt.mof
    rundll32 wbemupgd, UpgradeRepository
    msiexec /unregister
    msiexec /regserver
    REGSVR32 /s msi.dll
    NET START winmgmt
    NET START SharedAccess






    This did not solve my problem.


    Clint Boessen MCSE, MCITP: Messaging
    Perth, Western Australia

    Blog: http://clintboessen.blogspot.com/
    Tuesday, December 1, 2009 2:44 AM
  • I found a resolution to the problem.  It can be found here.

    http://clintboessen.blogspot.com/2009/11/wmi-error-invalid-class-0x80041010-fix.html
    Clint Boessen MCSE, MCITP: Messaging
    Perth, Western Australia

    Blog: http://clintboessen.blogspot.com/
    • Marked as answer by Clint Boessen Tuesday, December 1, 2009 7:50 AM
    Tuesday, December 1, 2009 7:50 AM
  • Just a small comment: deleting the repository should be avoided - see here for information about troubleshooting WMI (the Webcasts section).
    Uros Calakovic
    Tuesday, December 1, 2009 3:05 PM
  • This solution here worked like charm:

    http://winwoes.blogspot.com/2008/12/wmic-product-returns-invalid-class.html

    Install the following Windows component under "Management and Monitoring Tools":

    WMI Windows Installer Provider.

    Again, credit goes to: http://winwoes.blogspot.com/2008/12/wmic-product-returns-invalid-class.html

     

     

     


    MCSA, CompTIA Security+
    Friday, October 28, 2011 10:35 AM