| Event Id | 9102 |
| Source | CDOEXM |
| Description | The MAD Monitoring thread was unable to read the state of cluster resources, error <error code>. |
| Event Information | According to Microsoft: Explanation : This event indicates that the monitoring thread of the System Attendant process (Mad.EXE) was unable to query WMI for the state of the Cluster Resources. Specifically, System Attendant could not query WMI for instances of the ExchangeClusterResource class (which is provided by the Exchange WMI Provider, EXWMI.DLL). If this event appears occasionally, it can be safely ignored. If it occurs every five minutes, then the causes need to be investigated. The causes can be varied, and the error code in the Description section will provide information. For example, in the Sample Event shown below, error 0x80010108 translates to RPC_E_DISCONNECTED, which means the remote call procedure (RPC) connection was lost, possibly due to a network interruption. This error can occur because of corruption in the WMI infrastructure, other transient problems with the WMI infrastructure, or network connectivity issues. See the error code in the Description section of the event to understand the underlying cause. User Action : Verify that WMI is installed correctly. Check network connectivity. Use WBEMTEST.EXE to verify if WMI is responding, if the Exchange name space still exists, if the appropriate class exists and if the Exchange WMI provider can enumerate instances of that class. Proceed based on the error code. |
| Reference Links | Event id 9102 from source CDOEXM |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.