Is there any Script for Rebuilding WMI

Question

Is there any Script for Rebuilding WMI

checkingrandom 226

Hello Microsoft Community,

I hope this message finds you well.

I am currently facing issues with the Windows Management Instrumentation (WMI) on my systems and need to rebuild it to restore its functionality.

Could anyone kindly provide or point me towards a reliable script for rebuilding WMI in Windows? Detailed instructions or best practices related to this process would also be greatly appreciated.

Thank you in advance for your assistance!

2 answers

Your answer

Answer 1

Anonymous

Hi,

You can run the following commands in an elevated command prompt. It recompiles all the built-in WMI provider MOF files and re-register the WMI provider DLLs.

Stop the WMI service and set it to disabled:

   sc config winmgmt start= disabled
   net stop winmgmt /y

Navigate to the WBEM folder:
```
   %systemdrive%
```

Re-register the WMI providers:

   for /f %s in ('dir /b *.dll') do regsvr32 /s %s

Set the WMI service back to Auto and start the service:

   sc config winmgmt start= Auto
   net start winmgmt

Recompile the MOF files:

   dir /b *.mof *.mfl | findstr /v /i uninstall > moflist.txt & for /F %s in (moflist.txt) do mofcomp %s

Please note that this sets the WMI repository back to its initial state when the operating system was installed. WMI will lose all the information that was gathered over time about the system itself, applications, services, and other entities around it.

Best Regards,

Ian Xue

If the Answer is helpful, please click "Accept Answer" and upvote it.

checkingrandom 226

@Nikit Patiyawala @Anonymous

Based on the steps you shared, I have created a script that can be run on every machine, eliminating the need to perform each step manually. Could you please verify it for any vulnerabilities? Any suggestions for improvements would be greatly appreciated.

$principal = New-Object Security.Principal.WindowsPrincipal([Security.Principal.WindowsIdentity]::GetCurrent())
if ($principal.IsInRole([Security.Principal.WindowsBuiltInRole]::Administrator)) {
    $wmi_Status = winmgmt /verifyrepository
    if ($wmi_Status -ne "WMI Repository is consistent") {
		Write-Output $wmi_Status
        # Stopping the service
        Try {
            Stop-Service -Name 'winmgmt' -Force -ErrorAction 'Stop'
        } catch {
            Write-Host "An error occurred while trying to stop the WMI service"
            Write-Host -NoNewLine 'Press any key to continue...'
            $null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
            break
        }

        Start-Process -FilePath "C:\Windows\System32\wbem\winmgmt.exe" -ArgumentList "/clearadap" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\winmgmt.exe" -ArgumentList "/kill" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\winmgmt.exe" -ArgumentList "/unregserver" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\winmgmt.exe" -ArgumentList "/regserver" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\winmgmt.exe" -ArgumentList "/resyncperf" -Wait

        Remove-Item -Path "$env:SystemRoot\System32\wbem\AutoRecover" -Recurse -Force
        Remove-Item -Path "$env:SystemRoot\System32\wbem\Repository" -Recurse -Force

        $TotalDLL = Get-ChildItem -Path "$env:SystemRoot\System32\wbem" -Include *.dll -Recurse
        foreach ($dll in $TotalDLL) {
            $dllname = $dll.FullName
            Start-Process -FilePath "$env:SystemRoot\System32\regsvr32.exe" -ArgumentList "-s $dllname" -Wait
        }

        $TotalMOF = Get-ChildItem -Path "$env:SystemRoot\System32\wbem" -Include *.mof, *.mfl -Recurse
        foreach ($mof in $TotalMOF) {
            $mofname = $mof.FullName
            Start-Process -FilePath "$env:SystemRoot\System32\wbem\mofcomp.exe" -ArgumentList "$mofname" -Wait
        }

        Start-Process -FilePath "C:\Windows\System32\wbem\WmiApSrv.exe" -ArgumentList "/Regsvr32" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\WmiPrvSE.exe" -ArgumentList "/Regsvr32" -Wait
        Start-Process -FilePath "C:\Windows\System32\wbem\WMIADAP.exe" -ArgumentList "/Regsvr32" -Wait

        Start-Service -Name 'winmgmt'

        Write-Host "WMI service restarted. Verifying WMI functionality..."
        Try {
            $osInfo = Get-WmiObject -Namespace "root\cimv2" -Class Win32_OperatingSystem
            Write-Host "WMI is working correctly. Sample data fetched:"
            Write-Host "OS Name: $($osInfo.Caption)"
            Write-Host "Version: $($osInfo.Version)"
            Write-Host "Build Number: $($osInfo.BuildNumber)"
        } catch {
            Write-Host "Failed to fetch data from WMI. There might still be an issue."
        }

        Write-Host -NoNewLine 'Press any key to continue...'
        $null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
    } else {
        Write-Host "WMI Repository is consistent"
		Try {
            $osInfo = Get-WmiObject -Namespace "root\cimv2" -Class Win32_OperatingSystem
            Write-Host "WMI is working correctly. Sample data fetched:"
            Write-Host "OS Name: $($osInfo.Caption)"
            Write-Host "Version: $($osInfo.Version)"
        } catch {
            Write-Host "Failed to fetch data from WMI. There might still be an issue."
        }
        Write-Host -NoNewLine 'Press any key to continue...'
        $null = $Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown')
    }
} else {
    Start-Process -FilePath "powershell" -ArgumentList "$('-File ""')$(Get-Location)$('\')$($MyInvocation.MyCommand.Name)$('""')" -Verb runAs
}

Answer 2

Hi

Please try the below steps.

Verify the WMI Repository

Run the following command to check the consistency of the WMI repository:
```
   winmgmt /verifyrepository
```
If the repository is consistent, you will see a message indicating so. If not, proceed to the next step. Salvage the WMI Repository Run the following command to attempt to salvage the repository:
```
   winmgmt /salvagerepository
```
Verify the repository again using the winmgmt /verifyrepository command. If it is still inconsistent, proceed to the next step.
```
 **Reset the WMI Repository**
```
Run the following command to reset the repository:
```
   winmgmt /resetrepository
```

Share via

Is there any Script for Rebuilding WMI

2 answers

Your answer