Share via

Event ID 10 - Microsoft-Windows-WMI - Event filter with query "%2" could not be reactivated in namespace "%1" because of error %3.

  • Article

Event filter with query "%2" could not be reactivated in namespace "%1" because of error %3. Events cannot be delivered through this filter until the problem is corrected.

Events Details

Applies to:

Windows Vista, Windows 7 SP1, Windows Server 2008

Version:

6.0,6.1,6.2

Source:

Microsoft-Windows-WMI

Event ID:

10

 

Support for Windows Vista has ended

This cause applies if you are still running Windows Vista (which support ended for as of July 12, 2011).

To resolve this error, do the following:

  • To continue receiving security updates for Windows, upgrade to Windows 7 or update Windows Vista with Service Pack 2 (SP2).  If you are still having issues with seeing this error after updating Windows Vista to SP2, you can try the steps suggested in the Resolution section of the following KB article at support.microsoft.com/.../950375

    New! If you receive this  error after you install Windows 7 Service Pack 1 (SP1) or Windows Server 2008 R2 Service Pack 1 (SP1) using integrated media, you can use the automated "FixIt" at KB 245227.

    As  KB 245227 explains, this problem was caused "in the Windows 7 SP1 DVD/ISO creation process. There was an issue in the creation process that caused a WMI registration to remain in the DVD/ISO. Since the registration is designed to work only during the DVD/ISO creation process, it fails to run on a live system and causes these events. These events are not indicative of any issue in the system and can be safely ignored. If however you want to prevent these events from getting generated and want to remove this specific WMI registration manually, please follow the steps mentioned in this article for running the workaround script."

    WMI supports a query language called the WMI Query Language (WQL). WQL is a subset of structured query language (SQL) that is used by most relational database management systems. An event filter query is a WQL query that is used when processing WMI events.

  • Update permanent event subscriptions:

    To correct the query, examine the event registration by using the WMI Event Registration tool included with CIM Studio and updating the permanent subscriptions for the listed provider and query. If the permanent subscription was created by a MOF file included with an installed product, you must contact the application vendor to correct the faulty registration.

To verify this error is resolved, do the following:

  • Send events through the Event Provider that satisfies the Event Filter query in question and to verify that they were delivered successfully.

Resources

For more information about this error or event, see the following resources: