WMI leak on Windows Server 2012 R2

There is a WMI leak on  windows server 2012 r2 DCs which renders them not so usable, generating SCOM agent scripts to fail. Multiple scripts are affected by this for example:
AD CPU Overload Script Based Test Failed to complete: The script AD LSASS CPU failed to retrieve the raw performance data for the lsass process via WMI.
The error returned was: Object required (0x1A8)

SCOMPercentageCPUTimeCounter.vbs(111,9) (null): No more threads can be created by the system.

AD Replication Monitoring: encountered a runtime error. Failed to convert to UTC time.
The error returned was: 'No more threads can be created in the system' (0x800700A4)'


HRESULT: 0x80041006

Details: Out of memory


The error returned was: 'Object required' (0x1A8)

The leak is fixed in the latest UR for Windows Server 2012 R2 May which can be found here: http://support.microsoft.com/kb/2955164

Comments (4)

  1. Ed (DareDevil57) says:


  2. Minakovic says:

    I applied this patch and the other one you need in order to apply it –> 2919355, but only solved half of my DCs problems, still having the same issue on many DC after patching… Happy happy joy joy

    I hate having to patch servers because monitoring is causing problems.
    Thank you Microsoft.

  3. Mike F1 says:

    Same problem as Minakovic, WMI still appears to be unhappy after the latest round of updates. At least SCOM appears to be unhappy with it, I am still checking the servers to see if there is an actual problem there or not.