Pgina 1 de 15
Ms
Siguiente blog
:erth9s I+ Experts
CLINT BOESSEN [MVP] MONDAY, NOVEMBER 30, 2009
machines on the network returned an error sa!in" Invalid Class 0x80041010. When I ran a wmi #uer!
clint.5oessen6avant"ardetechnolo"ies.c om.au
'acilit! 4 WMI
25 01 2014
Pgina 2 de 15
Microsoft Infrastructure En"ineer MG:$ MC0E$ MC0.$ MC+0$ MC: MCI+:( Enterprise Messa"in" .dministrator MCI+:( Enterprise Messa"in" .dministrator <010 MCI+:( 0erver .dministrator MCI+:( Enterprise .dministrator +0( 0C3M My TechNet Posts Join My RSS Feed
VI EW M Y C OMP L ETE P RO FI LE
When performin" these #ueries a"ainst the server the followin" event lo"s were "enerated under the .pplication lo"s(
AWARDS
Event +!pe( Error Event 0ource( WinM"mt Event Cate"or!( ,one Event I1( 10 1ate( 1&1<&<00= +ime( =(>?(4@ .M /ser( ,&. Computer( ./01C01 1escription( Event filter with #uer! )select A from M0MC.EventBMemor!Error where Ct!pe 4 @<<1>>@<<@D and C7o"+oEventlo" EF 0D)
25 01 2014
Pgina 3 de 15
could not 5e CreDactivated in namespace )&&.&root&WMI) 5ecause of error 0x80041010. Events ma! not 5e delivered throu"h
LABELS
.ctive 1irector!C=@D .1 710 & .1.MC11D .pplications C@8D 8ackup ExecC?D Citrix C<D Exchan"e <000&<00@CHHD Exchan"e <00?&<010C<@<D Exchan"e <01@C<>D '> 8I*-I:C1D 'orefront C8D ardware C<0D II': & MII0 & I7M & 'IMC<D 7inux C11D Miscellaneous :ostsC<D ,etworkin" C<4D 3C0&7!nc C1D 3ffice @H>C8D 3utlook C@?D 0CCM C8D 0C3M C@D 0criptin" C41D 0ecurit! C>D 0I7 C1>D +erminal 0ervicesC11D +rend MicroC?D GirtualiJation C>D
Event +!pe( Error Event 0ource( WinM"mt Event Cate"or!( ,one Event I1( 10 1ate( 1&1<&<00= +ime( =(>?(4@ .M /ser( ,&. Computer( ./01C01 1escription( Event filter with #uer! )select A from M0MC.EventB0M8I30Error where Ct!pe 4 @<<1>>@<>@D and C7o"+oEventlo" EF 0D) could not 5e CreDactivated in namespace )&&.&root&WMI) 5ecause of error 0x80041010. Events ma! not 5e delivered throu"h this filter until the pro5lem is corrected. Event +!pe( Error Event 0ource( WinM"mt Event Cate"or!( ,one Event I1( 10 1ate( 1&1<&<00= +ime( =(>?(4@ .M /ser( ,&. Computer( ./01C01 1escription( Event filter with #uer! )select A from M0MC.EventB:CI8usError where Ct!pe 4 <14?81141HD and C7o"+oEventlo" EF 0D) could not 5e CreDactivated in namespace )&&.&root&WMI) 5ecause of error 0x80041010. Events ma! not 5e delivered throu"h this filter until the pro5lem is corrected.
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 4 de 15
Giruses C1D We5sense C1D Windows Client *eneralC?=D Windows 0erver *eneralC1?HD
Event +!pe( Error Event 0ource( WinM"mt Event Cate"or!( ,one Event I1( 10 1ate( 1&1<&<00= +ime( =(>?(4@ .M
BLOG ARCHIVE
/ser( ,&. Computer( ./01C01 1escription( Event filter with #uer! )select A from M0MC.EventBC:/Error where Ct!pe 4 <14?811@=<D and C7o"+oEventlo" EF 0D) could not 5e CreDactivated in namespace )&&.&root&WMI) 5ecause of error 0x80041010. Events ma! not 5e delivered throu"h this filter until the pro5lem is corrected.
<014 C14D <01@ C=<D <01< C?@D <011 C1@<D <010 C14HD <00= C1?=D 1ecem5er C10D ,ovem5er C<4D WMI Error Invalid Class 0x80041010 fix +est Exchan"e Connectivit! Convertin" .ctive 1irector! Inte"er8 values 2ecoverin" Windows Encr!pted 1ata for E'0 and 8itl... >.1.0 >00-9'irewall Error9 Email 1ossier - . "reat wa! to test email addresse... 0M+: 0ite 7inks in .ctive 1irector! - When +o /se
Event +!pe( Error Event 0ource( WinM"mt Event Cate"or!( ,one Event I1( 10 1ate( 1&1<&<00= +ime( =(>?(4@ .M /ser( ,&. Computer( ./01C01 1escription( Event filter with #uer! )select A from M0MC.EventB:latform0pecificError where Ct!pe 4 @<<1>>@<>>D and C7o"+oEventlo" EF 0D) could not 5e CreDactivated in namespace )&&.&root&WMI) 5ecause of error 0x80041010. Events ma! not 5e delivered throu"h this filter until the pro5lem is corrected.
I installed WMI+ools on 5oth a server that was workin" correctl! and a server that was not workin". 1ownload WMI+ools from here(
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 5 de 15
Microsoft 2ecommends 0.+. for Exchan"e <010 Windows <008 Gersions ardware 0upport Citrix 21: 7o"on Error /se 3ld 2un .s Windows ? and Windows Gista Connect to :rinter Error Windows Gista and Windows... Microsoft Connection Mana"er .dministration Nit CC... Exchan"e <010 Enterprise Edition 0pam /pdates Exchan"e Gersion 8ased 2outin" :erform an 3ffline M80. 0can Event I1 @01= - M2x0m5 0ervice /navaila5le when accessin" 3W. Exchan"e <00? &exchan"e ,ot 2edirectin" .ccount 3perators - . 'ast Wa! to 1ele"ate Control... M:I3 and Windows 0erver <008 .ccess-5ased Enumeration ow to insert a check5ox in Word <010
http(&&www.microsoft.com&downloads&details.aspxKfamil!id4H4@0'8>@-11<0-4818-8CC>'<.81C@E1@14Ldispla!lan"4en In the WMI CIM 0tudio I saw that on one server the CIMB:roductsMWin@<B:roduct WMI class existed on one server$ 5ut not on the other. 0erver that fails with the WMI error 0x80041010(
.fter some more research I found out that this Win@<B:roduct class o5;ect "ets added in when the Mana"ement and Monitorin" +ools --F WMI Windows Installer :rovider is installed.
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 6 de 15
4ind5 6rror on 7buntu 8ctober 9:;< 2eptember 9!=< August 9#< >uly 9!(< >une 9&:< May 9:&< April 9::< March 9:$< Add this component and it will resolve the problem:
In my case I want to to use the WMI Windows Installer Provider to perform a software inventory of my network. I cannot do this if this component isn't installed on every computer through out my domain. It is installed by default on vista !""# and windows $ by default but not windows %P or !""&. 'o do this first we must place the i&#( folder from a Windows !""& )* on a network share as WMI
BLOGROLL
Windows Installer Provider re+uires a few files from it. ,e-t we are going to have to create a custom .reg file to change the place where our computers look for i&#( directory for windows component files. 'his data is located under: ./0M12oftware1Microsoft1Windows1)urrent3ersion12etup
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 7 de 15
Bou .ad Me At 6.08 0ead Collow or Move Peter Aevill's ))I6 Aants 'rent 0loyd's 4log 'he 2ystem )enter 'eam 4log 2teve Doodman's 'ech 4log 6igh'w8ne 9#!:< 6mail Migrations 4log 'he two main values we need to change is )*Install to be " as we are not installing from a )* and 2ourcePath. Whatever you put as 2ourcePath the add and remove windows components utility will add 1i&#( to the end of it. I shared my i&#( directory out as @i&#(@ so to navigate to it I need to type 11ausdc":1i&#(. 'his means for my 2oucePath I enter it as 11ausdc":.
HIRE ME
'he default value for 2ourcePath is *: ,e-t we need to e-port the changes to a .reg file. Aight click on 2etup and click 6-port. Make sure the e-port range is set to 2elected branch and not all.
AVANTGARDE TECHNOLOGIES
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 8 de 15
8nce e-ported open up the .reg file in notepad. 'here are many registry directory keys under the 2etup folder that would have been e-ported along with our data. 'hese are not re+uired and need to be removed. Please click the below image to enlarge. 6verything south of the red s+uare should be removed. Also please remove 4oot*ir encase we actually do have a server that doesn't have ):1 as its boot partitionE
)opy the registry file you have crated to a network share. In my environment I Fust used the netlogon directory in which I created a folder wmichange 11domain1netlogon1wmichange.
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina ( de 15
Bou could use pstools or a startup script to make this change on servers now by simply scripting: regedit Gs 11domain1netlogon1wmichange1installsource.reg .owever we are going to encompase this as part of our same script. ,e-t we need to make an unattended setup file much like we do when we are doing desktop or server deployment on large scales. )reate the file under the same directory as above. I called mine answer.t-t 11domain1netlogon1wmichange1answer.t-t In the answer file enter: H)omponentsI WbemM2I J 8n
'his is what is re+uired to install the Management and Monitoring 'ools KKL WMI Windows Installer Provider component. Bou can specify any components in add and remove windows components in an answer file. .ere are some good links for future reference: http:GGitk.samfundet.noGdokKfilerGmsK-pKsp!KdeploymentKrefGuMcomponents.htm http:GGforums.techarena.inGserverKscriptingG$&#=:".htm
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 10 de 15
'he command to kick off this unattended install is: sysocmgr.e-e Gi:NwindirN1inf1sysoc.inf Gu:11domain1netlogon1wmichange1answer.t-t 'his will go through and add the WMI Windows Installer Provider component for us.
'his should install the component without even prompting for any user interaction. It will pull the files of the network share as configured above. ,ow finally lets create a batch script under our 11domain1netlogon1wmichange1 directory called run.bat Put both commands in the bat file: regedit Gs 11domain1netlogon1wmichange1installsource.reg sysocmgr.e-e Gi:NwindirN1inf1sysoc.inf Gu:11domain1netlogon1wmichange1answer.t-t
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 11 de 15
Now you got two methods to use this, you can either run it remotely using PSExec or you can use startup scripts. Below I will only show how to use PSExec. PSexec is a program to remotely execute commands which is part of the PSTools pack... get it from http !!technet.microsoft.com!en"us!sysinternals!##$%&&'%.aspx PSExec has the capa#ility of running a command against e(ery computer in a domain, or a list of computers from a text file. )emem#er only *++, and -P dont ha(e ./I .indows Installer Pro(ider installed #y default, so we only want to do these. Below I will run the command against a single computer 01N2340+5 which did not ha(e the ./I .indows Installer Pro(ider installed. psexec 6601N2340+5 766domain6netlogon6wmichange6run.#at7 Below shows you the output of the command and how it carried out all the tasks
25 01 2014
Pgina 12 de 15
Error code + is good, it means there were no errors. Now I can perform software audits on 01N2340+5 using ./I where #efore I couldn8t9
PO STE D BY CL IN T B OES S EN A T11 :1 5 P M LA BEL S: W IN DO W S C LI EN T GE N ERA L, W IN DO WS S ER VER GEN E RA L
10 COMMENTS: Anonymous 4ecem#er 5, *++% at 5* +$ 1/ how does one ensure this is on when #uilding a ser(er *++$ #ox which uses 7Ser(er /anager7 with 7)oles7 and 7:eatures7 and not 71dd!)emo(e .indows 0omponents7; carcla )eply
Clint Boessen
25 01 2014
Pgina 13 de 15
=ista, *++$ and .indows > always has this ena#led. )eply
Miha 4ecem#er 5, *++% at > <& 1/ 0ould you post!explain the PowerShell script you8re using to audit the machines; )eply
Clint Boessen
Sure /iha, I posted a full guide on my script for you and how to use it http !!clint#oessen.#logspot.com!*++%!5*!software"in(entory"powershell"script.html )eply
Anonymous ?une *', *+55 at 5* '> P/ 2i ?ust wanted to know if you know of a way to use this to audit a portion of your 14 rather than the entire tree. )eply
Clint Boessen ?une *', *+55 at & '5 P/ So your trying to configure audit logging on a particular su# container within 1cti(e 4irectory; )eply
Anonymous ?uly **, *+55 at 55 +, P/ :.I " if the target ser(er for the .#em/SI install has /icrosoft S3@ Ser(er installed, the S3@ Ser(er, S3@ Ser(er 1gent, and /S4T0 ser(ices will shut down without notice.... )eply
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 14 de 15
Jayton Garnett Septem#er $, *+55 at * ', 1/ Thanks for detailing the instructions so well, I am remo(ing unnecessary software remotely and ./I0 is not installed on any of the -P workstations making it harder. 2owe(er I do get 81ccess 4enied8 when running from a #atch script Arunning only the * commands you ha(eB, #ut running them manually seems to #e working. I8ll figure it out, I8m sure. It is good people like you who make the community so great B )eply
Comment as:
Publish
Preview
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014
Pgina 15 de 15
2ome
Dlder Post
P E ) T2 8S I T E - P E) T S
"tt#:!!$lint%oessen&%logs#ot&$o'! 00(!11!)'i*error*invalid*$lass*0x80041010*fix&"t'l
5!01! 014