RE: Event Error SecurityCenter ID: 1802



"Abigail" wrote:

Stopping and Starting WMI was successful but did not correct the error.
I downloaded and run the WMI Diagnosis Utility and the following is the text
in the report (parts pertaining to the errors only) ::

####################
...92 20:38:01 (1) !! ERROR: The SYSTEM32 folder is NOT in the PATH.
...93 20:38:01 (1) !! ERROR: The WBEM folder is NOT in the PATH.
...94 20:38:01 (3) The PATH environment variable has a maximum length of
512 characters. Current PATH length is 18 characters.
...95 20:38:01 (4) Reading registry (REG_DWORD)
'HKCU\Software\Microsoft\Windows Script Host\Settings\Timeout'.
...96 20:38:01 (4) Reading registry (REG_DWORD)
'HKLM\SOFTWARE\Microsoft\Windows Script Host\Settings\Timeout'.

..446 20:38:29 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Invalid root in
registry key
"HKCR\CLSID\{D71EE747-F455-4804-9DF6-2ED81025F2C1}\InProcServer32\".
..447 20:38:29 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) :
'C:\WINNT\SYSTEM32\WBEM\FASTPROX.DLL' is not registered correctly, missing
'\CLSID\{D71EE747-F455-4804-9DF6-2ED81025F2C1}\InProcServer32'.

..451 20:38:29 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Invalid root in
registry key
"HKCR\CLSID\{ED51D12E-511F-4999-8DCD-C2BAC91BE86E}\InProcServer32\".
..452 20:38:29 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) :
'C:\WINNT\SYSTEM32\WBEM\FASTPROX.DLL' is not registered correctly, missing
'\CLSID\{ED51D12E-511F-4999-8DCD-C2BAC91BE86E}\InProcServer32'.

..580 20:38:29 (1) !! ERROR: (ReadRegistry) : 0x80070002 - Invalid root in
registry key
"HKCR\CLSID\{4C6055D8-84B9-4111-A7D3-6623894EEDB3}\InProcServer32\".
..581 20:38:29 (1) !! ERROR: (CheckWMIDCOMComponentRegistrations) :
'C:\WINNT\SYSTEM32\WBEM\WBEMPROX.DLL' is not registered correctly, missing
'\CLSID\{4C6055D8-84B9-4111-A7D3-6623894EEDB3}\InProcServer32'.

18280 20:44:38 (1) !! ERROR: Environment:
................................................................................................. 3 ITEM(S)!
18281 20:44:38 (1) !! ERROR: => The following path(s) is/are missing from
the PATH environment variable:
18282 20:44:38 (0) ** - C:\WINNT\SYSTEM32
18283 20:44:38 (0) ** - C:\WINNT\SYSTEM32\WBEM
18284 20:44:38 (0) ** Failing to have the listed path(s) in the
PATH environment variable
18285 20:44:38 (0) ** could prevent the system to work properly.
18286 20:44:38 (0) ** INFO: => 4 incorrect shutdown(s) detected on:
18287 20:44:38 (0) ** - Shutdown on 22 September 2008 00:03:18
(GMT+4).
18288 20:44:38 (0) ** - Shutdown on 24 September 2008 12:44:53
(GMT+4).
18289 20:44:38 (0) ** - Shutdown on 24 September 2008 12:49:36
(GMT+4).
18290 20:44:38 (0) ** - Shutdown on 26 September 2008 14:34:34
(GMT+4).

18388 20:44:38 (0) ** ERROR: WMIDiag detected issues that could prevent WMI
to work properly!. Check 'C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL
SETTINGS\TEMP\WMIDIAG-V2.0_XP___.CLI.RTM.32_HAL-9000_2008.10.01_20.37.20.LOG'
for details.
####################

Open a notepad and copy and paste the following and save on the desktop as
WMI.bat and then double click it to excute!
regsvr32 wbemprox.dll
regsvr32 Fastprox.dll
regsvr32 hnetcfg.dll
regsvr32 netcfgx.dll
regsvr32 netman.dll
regsvr32 atl.dll
regsvr32 netshell.dll


Make sure these services are started or restart them again:
Event Log << Auto
Windows Management Instrumentation << Auto (first RPC not the
second one set to Manuall)
Remote Procedure Call (RPC) << Auto
DCOM Server Process Launcher << Auto

Reboot your machine and wait for a while and see the timestamp to the event
logs, does it log the error again?
Setting The Default WMI Namespace Security:
http://community.spiceworks.com/education/projects/Setting_The_Default_WMI_Namespace_Security?query=WMI
Setting The Default DCOM Properties And Security:
http://community.spiceworks.com/education/projects/Setting_The_Default_DCOM_Properties_And_Security


Right click My Computer and select Properties. On the System Properties
click on Advanced tab then click on [ Environment Variables ] Button and
under System Variables make sure these settings correct:
Variable | Value
ComSpec %SystemRoot%\system32\cmd.exe

Path
C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem

PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP %SystemRoot%\TEMP
TMP %SystemRoot%\TEMP
windir %SystemRoot%

NOTE the above copied from the Edit Window, it will take the Path letter
C:\Windows\Temp for Exm..

Disabling Windows Script Host
http://www.microsoft.com/technet/scriptcenter/guide/sas_sbp_lhak.mspx?mfr=true

HTH,
nass
---
http://www.nasstec.co.uk



.

Relevant Pages

  • Re: Acrobat pdf files wont display
    ... That registry key from start run fixed it. ... Launch the latest version of Adobe Acrobat reader, ... "Steve N" wrote in message ...
    (microsoft.public.windows.inetexplorer.ie6.browser)
  • Re: dll problems
    ... I think it may be that you cannot open the registry key for your ... Wait and see what others suggest but it may be that somehow permissions to ... All of a sudden I cant run windows media player in my account ... the reverse happens in my account "regsvr32 ...
    (microsoft.public.windowsxp.general)
  • Re: Windows Update error and fix error
    ... Quote: Narayana Mahankali ... and hit ENTER ... Open regedit and navigate to the following registry key: ... regsvr32 vbscript.dll ...
    (microsoft.public.windowsupdate)
  • Re: Windows Update error and fix error
    ... Quote: Narayana Mahankali ... and hit ENTER ... Open regedit and navigate to the following registry key: ... regsvr32 vbscript.dll ...
    (microsoft.public.windowsupdate)