Skip to content
Trending
Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface Simplify Windows Devices to Run Only the Required Applications using Intune Enhance macOS Compliance with Custom Security and Compliance Checks to Improve Device Security using Microsoft Intune Manage Samsung Galaxy Firmware Versions to Improve Security and Compliance using Microsoft Intune MS Intune Adds Windows Registry Data Collection to Device Inventory for Single Values All Key Values and Subkeys Updated Windows Device Sync Experience Enhances Per-Device Troubleshooting Configure Windows Sandbox vGPU Policy using Intune for Better Graphics Performance or Reduced Attack Surface
How to Enable WMI Tracing in Windows Server 2008 Windows Devices

How to Enable WMI Tracing in Windows Server 2008 Windows Devices

Written By Anoop C Nair
Last Updated August 6, 2024
Posted In Windows
SHARE

How to Enable WMI Tracing in Windows Server 2008 Windows Devices. Do you know how to enable WMI tracing using Event Viewer? Here is a quick guide to enabling WMI tracing on Windows 7 and Windows 2008 R2 machines.

What is WMI? Windows Management Instrumentation (WMI) is the infrastructure for managing data and operations on Windows-based operating systems. Applications on your computer use WMI to send demands for data about your system configuration.

I’ve seen this topic discussed in the MMS session hosted by Jason and Kim (thanks to them for reminding me about it). There are more details about MMS videos.

However, my credits go to Microsoft CSS engineer Sudha N, because I initially heard about WMI tracing from her.

Patch My PC

How to Enable WMI Tracing in Windows Server 2008 Windows Devices

1.  Open Event Viewer, click on View, then select Show Analytic and Debug Logs

How to Enable WMI Tracing in Windows Server 2008 Windows Devices - Fig.1
How to Enable WMI Tracing in Windows Server 2008 Windows Devices – Fig.1

2. Expand the Applications and Services Logs section and then the Microsoft \ Windows sections

How to Enable WMI Tracing in Windows Server 2008 Windows Devices - Fig.2
How to Enable WMI Tracing in Windows Server 2008 Windows Devices – Fig.2

3.  Expand Windows and find the WMI-Activity folder. Expand the WMI-Activity folder and Select Trace. Click on ” Enable Log ” on the Action Menu (right side).

How to Enable WMI Tracing in Windows Server 2008 Windows Devices - Fig.3
How to Enable WMI Tracing in Windows Server 2008 Windows Devices – Fig.3

4. From the Action Menu, Select Disable Log to stop WMI tracing.

5. You could see all WMI-related details by enabling WMI tracing; this would greatly help troubleshoot WMI issues.

ProviderInfo for GroupOperationId = 232708; Operation = Provider::ExecQuery – select QueryID, Name, Expression, Comments from  SMS_Query where TargetClassName = “SMS_StatusMessage”; ProviderName = ExtnProv; ProviderGuid = {625B7220-94D1-11d0-BD9F-00A0C909FDD7}; Path = D:\Program Files\Microsoft Configuration Manager\bin\x64\extnprov.dll

GroupOperationId = 232814; OperationId = 232817; Operation = Start IWbemServices::ExecQuery – references of {__Win32Provider.Name=”ExtnProv”}; ClientMachine = Local; User = ConfigMgr\Anoop.Nair; ClientProcessId = 0; NamespaceName = \\.\root\sms\site_IP0

How to Enable WMI Tracing in Windows Server 2008 Windows Devices - Fig.4
How to Enable WMI Tracing in Windows Server 2008 Windows Devices – Fig.4

How do I get WMI logs? Where are WMI logs?

Resources

We are on WhatsApp now. To get the latest step-by-step guides, news, and updates, Join our Channel. Click here – HTMD WhatsApp

Author

Anoop C Nair is Microsoft MVP! He is a Device Management Admin with more than 20 years of experience (calculation done in 2021) in IT. He is a Blogger, Speaker, and Local User Group HTMD Community leader. His primary focus is Device Management technologies like SCCM 2012, Current Branch, and Intune. He writes about ConfigMgr, Windows 11, Windows 10, Azure AD, Microsoft Intune, Windows 365, AVD, etc.

Written by

Anoop C Nair is Workplace Technology solution architect with 25+ years of experience in global enterprise organizations such as JP Morgan, Capgemini, etc. Microsoft Certified Trainer. Microsoft MVP from 2015 onwards for consecutive 11+ years! He also conducts Intune and modern workplace tech training for enterprise organizations. He is Blogger, Speaker, and Founder of HTMD Community and HTMD Conference. His main focus is on Device Management technologies like Intune, Windows, Cloud PC. He writes about technologies like Intune, SCCM, Windows, Cloud PC, Windows, Entra, Microsoft Security.

Discussion

Join the discussion

Your email address will not be published. Required fields are marked *

Related guides

Intune

Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws

Key Takeaways Windows 11 KB5101650 KB5099414 July 2026 Patch and 3 Zero Day Vulnerabilities and 570 Flaws! In the July 2026 Patch, Microsoft introduced new features designed to improve the overall Windows experience. The update adds enhancements to Windows Update for more flexible update management and introduces Point-in-Time Restore, providing an additional recovery option for […]

AC Anoop C Nair 9 min read
Intune

BitLocker Prompt Issue After June Patch KB5094126 Secure Boot UEFI 2023 Certificate Update

Key Takeaways BitLocker Prompt Issue After June Patch KB5094126 Secure Boot UEFI 2023 Certificate Update! After deploying the June 2026 Windows update (KB5094126), some HP EliteDesk 800 G6 devices began prompting for the BitLocker recovery key after every reboot. Based on our investigation, the Secure Boot UEFI 2023 certificate update does not appear to be […]

AC Anoop C Nair 5 min read
Microsoft Defender for Endpoint

Microsoft Defender for Endpoint EDR Updates are now Separate from Monthly Windows Security Updates for Faster Protection

Key Takeaways In this post, we are discussing how Microsoft Defender for Endpoint EDR Updates Will Be Delivered Through Microsoft Update. Microsoft has introduced a new update model for Microsoft Defender for Endpoint Detection and Response (EDR) security updates. Previously, these updates were included with the monthly Windows security updates. This change enables Microsoft to […]

AC Anoop C Nair 5 min read