Tons of WMI errors on Vmware Servers

1

Wonder if this is happening to anyone else. We are getting tons of WMI errors on our servers due to a WMI query that keep running:

Id = {00000000-0000-0000-0000-000000000000}; ClientMachine = RDSSVR; User = NT AUTHORITY\SYSTEM; ClientProcessId = 5432; Component = Unknown; Operation = Start IWbemServices::ExecQuery - root\WMI : SELECT * FROM MSStorageDriver_FailurePredictStatus; ResultCode = 0x8004100C; PossibleCause = Unknown

Process ID 5432 = SycnroLive.Agent.Runner.exe

What appears to be happening is that Sycnro is running that query but the answer isn’t correct or isn’t coming back in time. The error appears on our vmware virtual servers (Windows Server 2016)
And the wmi request seems to happen every 5 seconds or so which I think may be causing my high WMI cpu usage error that I keep seeing on these servers.

Not sure if the fix needs to be on the Syncro side or something I can adjust on the server and some google searches didn’t find much on a similar issue I am in no way a WMI expert. I also saw no way to disable this check on the Syncro side either.

Any ideas would be appreciated.

2

Have you opened a ticket with support? If not I would definitely do that so they can have a look.

3

Yeah I opened a ticket as well, just figured I’d get some community input since I have a guess this may be a complicated one.

4

Here’s a batch file to try and repair WMI:

Echo  Rebuilding WMI.....Please wait.
net stop sharedaccess
net stop winmgmt /y
cd C:\WINDOWS\system32\wbem
del /Q Repository
c:
cd c:\windows\system32\wbem
rd /S /Q repository
regsvr32 /s %systemroot%\system32\scecli.dll
regsvr32 /s %systemroot%\system32\userenv.dll
mofcomp cimwin32.mof
mofcomp cimwin32.mfl
mofcomp rsop.mof
mofcomp rsop.mfl
for /f %%s in ('dir /b /s *.dll') do regsvr32 /s %%s
for /f %%s in ('dir /b *.mof') do mofcomp %%s
for /f %%s in ('dir /b *.mfl') do mofcomp %%s
mofcomp exwmi.mof
mofcomp -n:root\cimv2\applications\exchange wbemcons.mof
mofcomp -n:root\cimv2\applications\exchange smtpcons.mof
mofcomp exmgmt.mof
net stop winmgmt
net start winmgmt
gpupdate /force
5

Yeah I tried a WMI repair, no help.

I did uninstall Syncro from EHARDS06 using the script, and so far WMI usage is a fraction of what it was, going to see how it does without it tomorrow AM and then see if a reinstall after that helps. But the key issue appears to be Syncro related.

6

I imagine any RMM or monitoring tool would be the same. Most likely Windows is broken/corrupt somehow. chkdsk/sfc/dism it and/or reinstall over the top.