WMI Not found: Error: Server 2003

February 10, 2011 at 23:50:44
Specs: Server 2003 Std
Hey guys,

This is my first post here. I am having problems with WMI filtering in group policies. The previous sys admin did not leave any documentation that i could refer to.

I am on a Server 2003 DC. I implemented some password policy but it is not taking effect on the clients end. When i do gpresult, it says

The following GPO's were not applied because they were filtered out
Default Domain Policy -- Filtering: Denied (WMI filter)-- Error: not found

We have over 7 AD servers. I have logged into each and every one and i did not notice any WMI filters. I heard that recently a DC was decommissioned. I am not sure how the process was carried out.

So, bottom line, i am stuck. No matter what policy i enforce in the top level domain, it gets filtered and i can't find out the WMI policy and delete it.

What would be the efficient way to get this resolved?

PLEASE HELP!

Ree


See More: WMI Not found: Error: Server 2003

Report •

#1
February 11, 2011 at 12:20:51
My guess is that it has something to do with how you have your OUs setup. Can you send us your complete gpresult. Just run the following....

gpresult /r > mygp.txt

then open the mygp.txt and copy the text. Thanks.

P.S. you might want to redact your domain name just for security.


Report •

#2
February 13, 2011 at 17:01:23
Hey man,

Sorry about the late response. I have pasted the results below. I also found this article on MS Support "http://support.microsoft.com/kb/953663". Really appreciate your help.

Microsoft (R) Windows (R) XP Operating System Group Policy Result tool v2.0
Copyright (C) Microsoft Corp. 1981-2001

Created On 2/14/2011 at 8:48:18 AM


RSOP results for Company\staging01 on PC101 : Logging Mode
------------------------------------------------------------

OS Type: Microsoft Windows XP Professional
OS Configuration: Member Workstation
OS Version: 5.1.2600
Domain Name: THISDOMAIN
Domain Type: Windows 2000
Site Name: Default-First-Site-Name
Roaming Profile:
Local Profile: C:\Documents and Settings\helpdesk01
Connected over a slow link?: No


COMPUTER SETTINGS
------------------
CN=PC101,OU=THISLOCATION,OU=Company-COMPUTERS,DC=THISDOMAIN,DC=local
Last time Group Policy was applied: 2/14/2011 at 8:03:17 AM
Group Policy was applied from: DC02.THISDOMAIN.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Local Group Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Default Domain Policy
Filtering: Denied (WMI Filter)
ERROR: Not found.
The computer is a part of the following security groups:
--------------------------------------------------------
BUILTIN\Administrators
Everyone
BUILTIN\Users
NT AUTHORITY\NETWORK
NT AUTHORITY\Authenticated Users
PC101$
Domain Computers


USER SETTINGS
--------------
CN=STAGING01,CN=Users,DC=THISDOMAIN,DC=local
Last time Group Policy was applied: 2/14/2011 at 8:04:17 AM
Group Policy was applied from: DC04.THISDOMAIN.local
Group Policy slow link threshold: 500 kbps

Applied Group Policy Objects
-----------------------------
Local Group Policy

The following GPOs were not applied because they were filtered out
-------------------------------------------------------------------
Default Domain Policy
Filtering: Denied (WMI Filter)
ERROR: Not found.
The user is a part of the following security groups:
----------------------------------------------------
Domain Users
Everyone
BUILTIN\Administrators
BUILTIN\Power Users
BUILTIN\Users
NT AUTHORITY\INTERACTIVE
NT AUTHORITY\Authenticated Users
LOCAL
computer reset
ISD
Acc Reset
Domain Admins
Domain TELUsers
INTERNET USERS


Report •

#3
February 14, 2011 at 08:00:47
Ok, I am assuming you are making the changes in the Default GPO and not the OU GPOs. It looks like the Default GPO has a WMI filter applied to it. The filter could be filtering on type of OS or system specs that make it so that the Default GPO does not apply to machines meeting the criteria in the WMI filter.

Open your GPO Editor and click once on the Default GPO. Do not edit it. Look in the right screen of the Snap In and at the bottom it should show which WMI filter is being applied. Take note of it then on the Domain Tree on the left pane, scroll down to the WMI filters and open the one that is being applied to your default GPO. Select the SQL command in the filter and paste it in the forum so we can see what the filter is filtering on.

As a rule I don't use WMI filters on the Default GPO because that is where I want to put in settings that apply to all systems regardless of location and system specs. I prefer to make OU GPOs for specific systems and locations.

Being as your predecessor set it up this way, you may want to either make a new GPO or apply your changes in one of the OU GPOs.


Report •

Related Solutions

#4
February 14, 2011 at 15:48:04
Hey man,

I have looked at the GPO (without right clicking it), it doesn't show any WMI filtering. That's actually the first thing i looked at. So, somehow, WMI filtering exists but i can't see it in GPMC.

Thanks,
R


Report •

#5
February 14, 2011 at 22:56:21
Since i wasn't able to locate the WMI filters, i downloaded WMI tools. Here's a screenshot of WMI CIM Studio. I did find a hotfix for Event ID 1104 (http://support.microsoft.com/kb/953663) but i can't apply it just yet since it needs a restart. Let me know what you think.

http://www.freeimagehosting.net/ima...


Report •

#6
February 15, 2011 at 06:52:45
I have never used the WMI CIM before. It looks like a tool used to generate the SQL commands for your WMI filters. If you don't see any WMI filters under the WMI Filter Node on the tree in the GPMC then you don't have any.

The message seemed to point to one named Denied. I don't know how to help you. Maybe some else can take a stab at this.

P.S. This may or may not help...

http://support.microsoft.com/kb/555253


Report •

Ask Question