Tuesday, March 25, 2014

WMI event 10 on Windows 2008 R2

Windows 2008 R2 will generate a WMI error event 10 on start up. This is a known issue, and while you can run a Microsoft provided script to keep from seeing the error in the event log, it can simply be safely ignored.

Log Name:      Application
Source:        Microsoft-Windows-WMI
Date:          3/25/2014 4:49:35 AM
Event ID:      10
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      DC3.hq.donohoe
Description:
Event filter with query "SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 99" could not be reactivated in namespace "//./root/CIMV2" because of error 0x80041003. Events cannot be delivered through this filter until the problem is corrected.

VSS event 8193 after installing DHCP on Windows 2008 R2

So it turns out that DHCP changes the permissions on the VSS registry key for some reason, and after installing it you'll get the following VSS error in the event log:

Log Name:      Application
Source:        VSS
Date:          3/25/2014 4:35:05 AM
Event ID:      8193
Task Category: None
Level:         Error
Keywords:      Classic
User:          N/A
Computer:      DC3.hq.donohoe
Description:
Volume Shadow Copy Service error: Unexpected error calling routine RegOpenKeyExW(-2147483646,SYSTEM\CurrentControlSet\Services\VSS\Diag,...).  hr = 0x80070005, Access is denied.

The fix is pretty easy. Open Regedt32, go to 
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\VSS and give Network Service full access permissions to it.

Monday, March 10, 2014

Deleting user in AD

Sometimes when we try to delete a user in AD it'll give us the message:

Object <name> contains other objects. Are you sure you want to delete object "name" and all of the objects it contains?

This is usually caused by a mobile phone which is syncing with the account. To fix this we go to the user's mailbox in Exchange 2010 EMC, right click the mailbox and manage mobile devices. Then we delete every partnership listed. Once that's done we can delete the user with the annoying message.