Call us at 1.469.925.0508
Event ID 10 in Event Viewer | Windows 7 | Server 2008

Event ID 10 in Event Viewer | Windows 7 | Server 2008

In Windows 7 SP1 and Server 2008 R2 SP1 you may see the following error in the event viewer:

Log Name – Application
Source – WMI
EventID – 10
Level – Error
User – N/A
OpCode – Info
Task Cat – None
Keywords – Classic

Details – Event filter with query “SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “Win32_Processor” AND TargetInstance.LoadPercentage > 99″ could not be reactivated in namespace “//./root/CIMV2” because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

We’ve noticed this problem on every 32 bit Windows 7 system we’ve installed since Service Pack 1 was first introduced.

The Cause of the Error

According to Microsoft this error originated in the  Windows 7 SP1 DVD/ISO creation process.  An issue in the creation process caused a WMI registration to remain in the DVD/ISO. Since the registration is designed to work only during the DVD/ISO creation process, it fails to run on a live system and causes these events.

Microsoft states that:  These events are not indicative of any issue in the system and can be safely ignored.

Resolution

If you want to stop these events from being generated in the Event viewer Microsoft has an article on their site that contains detailed steps on how to create a script that will fix this issue.  They had a Microsoft Fix It (50688) that you could download and run that would resolve the issue automatically, but they have removed the Fix It.  You can still resolve this issue following these steps:

1) In Notepad create a new document named Workaround.txt

2) Copy the following script into notepad:

strComputer = “.”

Set objWMIService = GetObject(“winmgmts:” _
& “{impersonationLevel=impersonate}!\\” _
& strComputer & “\root\subscription”)

Set obj1 = objWMIService.ExecQuery(“select * from __eventfilter where name=’BVTFilter’ and query=’SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA “”Win32_Processor”” AND TargetInstance.LoadPercentage > 99′”)

For Each obj1elem in obj1

set obj2set = obj1elem.Associators_(“__FilterToConsumerBinding”)

set obj3set = obj1elem.References_(“__FilterToConsumerBinding”)

For each obj2 in obj2set

WScript.echo “Deleting the object”

WScript.echo obj2.GetObjectText_

obj2.Delete_

next

For each obj3 in obj3set

WScript.echo “Deleting the object”

WScript.echo obj3.GetObjectText_

obj3.Delete_

next

WScript.echo “Deleting the object”

WScript.echo obj1elem.GetObjectText_

obj1elem.Delete_

Next

3) Save the text as Workaround.vbs

4) Close Notepad

5) Open an elevated command prompt

a. Click on start

b. Click on Programs

c. Right-Click on Command Prompt

d. Choose run as administrator

6) Change Directory to the one containing workaround.vbs: ( Example CD c:\users\%username%

7) Run cscript workaround.vbs

After running the script the Event ID 10 errors related to this event should stop occurring. This does not remove any of the existing entries in the Event log, they would need to be manually cleared out of the application event log.

You can see this Microsoft article here: https://support.microsoft.com/en-us/kb/2545227

Related Posts