Hello Basile!
Welcome to the Microsoft Q&A forum. It’s a pleasure to assist you today.
Problem Analysis
After an in-place upgrade from Windows Server 2016 to Windows Server 2025, Server Manager displays: “Online – Failed to retrieve data,” and the Event Log records WMI-Activity errors (ID 5858):
Operation = Start IWbemServices::ExecNotificationQuery Namespace = ROOT\CIMV2 Query = SELECT * FROM Win32_Process:StartTrace WHERE ProcessName = 'wsmpvhost.exe' CodeResult = 0x80041032 CausePossible = Unknown
The command winmgmt /verifyrepository indicates the WMI repository is consistent, so the issue is likely related to WMI provider registration or permissions, not repository corruption.
Root Cause
- The WMI provider for Server Manager may not be properly registered after the upgrade.
Event Log channel metadata or permissions may be missing or corrupted.
Error Codes
2147944027 → Access denied or missing resources
- 0x80041032 → WMI query execution failure
Recommended Fix
1. Rebuild Event Log Metadata Run:
wevtutil.exe el | foreach { wevtutil.exe gl $_ }
This lists all logs and attempts to load metadata. Identify broken providers.
2. Re-register Affected Providers
For services such as DNS, AD DS, or Server Manager:
wevtutil.exe im <path-to-manifest>.man
The .man files are located in the service’s installation directory.
3. Check Missing or Corrupt Log Files
Navigate to:
C:\Windows\System32\winevt\Logs
Delete corrupted .evtx files and restart the service to regenerate logs.
4. Repair System Files
Run:
sfc /scannow DISM /Online /Cleanup-Image /RestoreHealth These commands fix system file corruption affecting WMI and event providers.
If you find this information helpful, please accept the answer so your experience can benefit the community.
Best wishes!