WMI leak on Windows Server 2012 R2

  • Article

There is a WMI leak on  windows server 2012 r2 DCs which renders them not so usable, generating SCOM agent scripts to fail. Multiple scripts are affected by this for example:
AD CPU Overload Script Based Test Failed to complete: The script AD LSASS CPU failed to retrieve the raw performance data for the lsass process via WMI.
The error returned was: Object required (0x1A8)

SCOMPercentageCPUTimeCounter.vbs(111,9) (null): No more threads can be created by the system.

AD Replication Monitoring: encountered a runtime error. Failed to convert to UTC time.
The error returned was: 'No more threads can be created in the system' (0x800700A4)'

or

HRESULT: 0x80041006

Details: Out of memory

Or

The error returned was: 'Object required' (0x1A8)

The leak is fixed in the latest UR for Windows Server 2012 R2 May which can be found here: https://support.microsoft.com/kb/2955164