Event ID - 28

Event Id28
SourceMicrosoft-Windows-WMI
DescriptionError number %1 was returned in trying to initialize WMI Service. This could be due to a badly installed version of WMI, WMI repository upgrade failure, insufficient disk space or insufficient memory.
Event Information According to Microsoft :

Cause :

This event is logged when error number was returned in trying to initialize WMI Service.

Resolution :

Run the WMI Diagnosis Utility (WMIDiag)

The WMIDiag tool is a script that automates various troubleshooting steps that you can use to determine whether WMI is working correctly. It provides a comprehensive report about the state of the WMI infrastructure.

Download WMIDiag. The download is a self-extracting executable. Run the executable and, when prompted, specify a folder into which to extract the files. The result should be a folder named wmidiag with three files in it: WMIDiag.doc, WMIDiag.vbs, and WMIDiag.xls.

To run the WMIDiag tool:
  1. Open a command prompt window.
  2. Navigate to the wmidiag folder that was created when you ran Wmidiag.exe.
  3. Type cscript wmidiag.vbs .
Review the report created by WMIDiag and follow the suggested problem resolution steps.

Verify :

Restart the WMIDiag tool. If the problem is resolved, the tool should display the message, "SUCCESS: WMIDiag determined that WMI works CORRECTLY". If it does not report success, then it will describe the problems found and suggest steps to resolve them.
Reference LinksEvent ID 28 from Source Microsoft-Windows-WMI

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh