Microsoft-Windows-WMI-Activity EventID 5858 ResultCode 0x80041032

No evolution with this patch.

Evento 2545 "Microsoft-Windows-DeviceManagement-Enterprise-Diagnostics-Provider":bankhead:

JPSilva said:

Hello to the whole community.


I noticed that Process ID binds to PID's such as Nvidia services and also certain HP programs.

Chrome itself has already registered with this error (checking the task manager).

The computer receiving these errors has been working perfectly.

But I would like to know if this error is ignoble, is by default or is more mysterious.

Taking some solace (not a lot!) in knowing this is affecting many folks, and the impact is low, although a little disconcerting when this error is firing regularly (if was for me)

I wasted lots of time trying to remove BitLocker - I've disabled it using every method mentioned, but was still regularly getting event 24687 - I've even disabled the log in eventvwr (and the channel in eventlogchannelsview)

but nowhere as near as often as event 5858 which was occurring a few times each minute.

For the event log the PIDs cited matched Xtu3service (Intel Overclocking) and waasmediasvc

The WindowsUpdate service was the first thing I started to manage, then after it continued to report it was downloading then failing to install things it already had, or had newer versions of, I tried resets, and hiding updates, but none worked.

I found the shutup tool, and used that, then got carried away and opted in for many of the option to disable anti-piracy features in windows...

In Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\WaaSMedicSvc I noticed the LaunchProtected entry. Looking online it mentions SERVICE_LAUNCH_PROTECTED_NONE (0)
so I set this, restarted, then used services.msc to change the startup type of WaaSMedicSvc to Disabled, then restarted.

This appears to be fixed, currently - I didn't touch the other service mentioned by others (a "windows orchestra" service)
and didn't mess with permissions or ownership, and although I'm still seeing some recent 5858 entries (now for dosvc - Delivery Optimisation) the original waasmedicasvc event error is not reported, and the store continues to be usable.

... Looking at DoSvc there are no dependencies in services 👍🏻

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\DoSvc has LaunchProtected=2 so I

1. did a backup of reg
2. changed LaunchProtected to 0
3. restarting... (posting now as I can't see a save draft option)

TBC...