KBI 310135 Event ID 7035 and 7036-WMI Performance Adapter
Version
All
Date
22 Dec 2008
Summary
Customers may notice events appearing in the System Event Log on their monitored Windows Servers, referencing the “WMI Performance Adapter”.
Technical Background
Here are a few samples of the events that appear:
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7035
…
User: <DOMAIN>\<Argent Service Account>
Computer: 00-WEBSENSE01
Description:
The WMI Performance Adapter service was successfully sent a start control.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
…
User: N/A
Computer: 00-WEBSENSE01
Description:
The WMI Performance Adapter service entered the running state.
Event Type: Information
Event Source: Service Control Manager
Event Category: None
Event ID: 7036
…
User: N/A
Computer: 00-WEBSENSE01
Description:
The WMI Performance Adapter service entered the stopped state.
These messages are caused by the PDH.DLL file (Microsoft’s Perfmon API) and the issue can occur with ANY third-party product that makes use of this file.
Resolution
To prevent the PDH.DLL from having to restart the WMI Performance Adapter service each time, simply start the service and set its Startup Type to “Automatic”: