Event ID 10

After you install Windows Vista Service Pack 1 (SP1), Windows Server 2008, Windows 7 or Windows Server 2008 R2, the following WMI error is logged in the Application log:

Figure 1: Event ID 10

Cause

This problem occurs if the WMI filter is accessed without sufficient permission.

Resolution

To resolve this problem, run a script to stop the Event ID 10 messages. To run this script, follow these steps:

1.     In a text editor, such as Notepad, create a new text document named Test.vbs.

2.     Paste the following code into Test.vbs:

strComputer = "."

Set objWMIService = GetObject("winmgmts:" _

& "{impersonationLevel=impersonate}!\\" _

& strComputer & "\root\subscription")

Set obj1 = objWMIService.Get("__EventFilter.Name='BVTFilter'")

set obj2set = obj1.Associators_("__FilterToConsumerBinding")

set obj3set = obj1.References_("__FilterToConsumerBinding")

For each obj2 in obj2set

                WScript.echo "Deleting the object"

                WScript.echo obj2.GetObjectText_

                obj2.Delete_

next

For each obj3 in obj3set

                WScript.echo "Deleting the object"

                WScript.echo obj3.GetObjectText_

                obj3.Delete_

next

WScript.echo "Deleting the object"

WScript.echo obj1.GetObjectText_

obj1.Delete_

3.     After you run this script, the Event ID 10 messages stop appearing in the Application log. However, you have to manually clear any previous Event ID 10 messages.

Remark:            Make sure that you only delete the appropriate Event ID 10 messages. There may be other pertinent Event ID 10 messages that you do not want to delete.



Reference: http://support.microsoft.com/kb/950375

This posting is provided “AS IS” with no warranties, and confers no rights!