Ran the complete cmds, however:
e. Run the following command to manually recompile all of the default WMI .mof files and .mfl files
cd %windir%\system32\wbem for /f %s in ('dir /b *.mof *.mfl') do mofcomp %s
returned "File not found".
I repeated the full process and no change.
Below is a raw copy of latest event viewer, First 5 "Warning" then next entry, scores of "Error".
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Acer
Description:
A provider, dsccore, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.452232000Z" />
<EventRecordID>20520</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="
http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>dsccore</Provider>
<Namespace>root\Microsoft\Windows\DesiredStateConfiguration</Namespace>
</data_0x8000003F>
</UserData>
</Event>
..........................
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 63
Task Category: None
Level: Warning
Keywords:
User: SYSTEM
Computer: Acer
Description:
A provider, dsccore, has been registered in the Windows Management Instrumentation namespace root\Microsoft\Windows\DesiredStateConfiguration to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>63</EventID>
<Version>2</Version>
<Level>3</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.452232000Z" />
<EventRecordID>20520</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="
http://manifests.microsoft.com/win/2006/windows/WMI">
<Provider>dsccore</Provider>
<Namespace>root\Microsoft\Windows\DesiredStateConfiguration</Namespace>
</data_0x8000003F>
</UserData>
</Event> x5
########################################
Log Name: Application
Source: Microsoft-Windows-WMI
Date: 16/11/2018 22:36:51
Event ID: 4
Task Category: None
Level: Error
Keywords:
User: SYSTEM
Computer: Acer
Description:
Error 0x80041002 encountered when trying to load MOF C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL while recovering .MOF file marked with autorecover.
Event Xml:
<Event xmlns="
http://schemas.microsoft.com/win/2004/08/events/event">
<System>
<Provider Name="Microsoft-Windows-WMI" Guid="{1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}" />
<EventID>4</EventID>
<Version>2</Version>
<Level>2</Level>
<Task>0</Task>
<Opcode>0</Opcode>
<Keywords>0x8000000000000000</Keywords>
<TimeCreated SystemTime="2018-11-16T22:36:51.186591600Z" />
<EventRecordID>20515</EventRecordID>
<Correlation ActivityID="{D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}" />
<Execution ProcessID="888" ThreadID="896" />
<Channel>Application</Channel>
<Computer>Acer</Computer>
<Security UserID="S-1-5-18" />
</System>
<UserData>
<data_0x8000003F xmlns="
http://manifests.microsoft.com/win/2006/windows/WMI">
<Error>0x80041002</Error>
<MOF>C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL</MOF>
</data_0x8000003F>
</UserData>
</Event>
''''''''''''''''
+ System
- Provider
[ Name] Microsoft-Windows-WMI
[ Guid] {1EDEEE53-0AFE-4609-B846-D8C0B2075B1F}
EventID 4
Version 2
Level 2
Task 0
Opcode 0
Keywords 0x8000000000000000
- TimeCreated
[ SystemTime] 2018-11-16T22:36:51.186591600Z
EventRecordID 20515
- Correlation
[ ActivityID] {D7E9E239-7DFC-0006-53E2-E9D7FC7DD401}
- Execution
[ ProcessID] 888
[ ThreadID] 896
Channel Application
Computer Acer
- Security
[ UserID] S-1-5-18
- UserData
- data_0x8000003F
Error 0x80041002
MOF C:\WINDOWS\SYSTEM32\WBEM\EN-GB\FILETRACE.MFL
#################################################
onwards...
