| Event Id | 30 |
| Source | WinMgmt |
| Description | A WMI/WBEM client executed an asynchronous operation and failed to return from its implementation of IWbemObjectSink. For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp. |
| Event Information | Health Monitor actions are not fired. The tree below Health Monitor contains nothing under Actions, and it also does not show the synchronized and non-synchronized monitors. You see the following in the application event log. Cause: The problem occurs when WMI cannot use DCOM correctly because the System and Interactive accounts are being removed from the access control entries of the Default Access Permissions section of Dcomcnfg.exe. This behavior may occur when a user on the server specifically adds user accounts to the list (for example, the user may add the IWAM account). Adding user accounts removes the implicit entries for the System and Interactive accounts. Resolution: To resolve this problem: Log on to the server with an account that has administrative credentials. Click Start, and then click Run. Type dcomcnfg.exe, and then click OK. Click the Default Security tab, click Default Access Permissions, and then click Add. In the List Names From drop-down box, select the local computer. In the Type of Access list, make sure Allow Access is selected. In the Names box, select Interactive, and then click Add. In the Names box, select System, and then click Add. Click OK. Verify that the System and Interactive users are now added, and that they have Allow Access permission. Click OK two times. Open the Application Center 2000 Microsoft Management Console (MMC). Verify that the synchronized and non-synchronized monitors are present. |
| Reference Links | Health Monitor Actions and Monitors Not Available |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.