Event ID - 1104

Event Id1104
SourceMicrosoft-Windows-GroupPolicy
DescriptionWindows was unable to read the Windows Management Instrumentation (WMI) filter information associated with the Group Policy object (GPO) %8.This may be caused by a deleted WMI Filter defined in the domain that is still in use by GPOs. Group Policy settings for this GPO will not be enforced. Other GPOs may still apply. Windows will attempt to retrieve this information at the next policy cycle. This specific problem may be resolved by identifying all GPOs that reference the WMI filter and removing the references. Contact an administrator if this event recurs for several hours.
Event Information According to Microsoft :

Cause:

This event is logged when Windows was unable to read the Windows Management Instrumentation (WMI) filter information associated with the Group Policy object (GPO).

Resolution :

Correct a missing WMI filter

Possible resolutions include:
  1. Ensure the associated WMI filter exists in the domain by clicking the WMI Filters node in the Group Policy Management Console. If it does not exist, remove the link from the associated Group Policy object (GPO) by selecting None from the WMI filter list on the selected Group Policy object in the Group Policy Management Console. Or recreate the WMI filter and associate it with the selected GPO using the Group Policy Management Console.
  2. Use the WMIDiag utility to diagnose the problem further.
Verify :

Group Policy applies during computer startup and user logon. Afterward, Group Policy applies every 90 to 120 minutes. Events appearing in the event log may not reflect the most current state of Group Policy. Therefore, you should always refresh Group Policy to determine if Group Policy is working correctly.

To refresh Group Policy on a specific computer:
  1. Open the Start menu. Click All Programs and then click Accessories .
  2. Click Command Prompt .
  3. In the command prompt window, type gpupdate and then press ENTER.
  4. When the gpupdate command completes, open the Event Viewer.
Reference LinksEvent ID 1104 from Microsoft-Windows-GroupPolicy

Catch threats immediately

We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.

See what we caught

Did this information help you to resolve the problem?

Yes: My problem was resolved.
No: The information was not helpful / Partially helpful.
 Refresh