Error event ID 5605 caused by WMI is recorded in application log

Email It to Me Print this Page
Symptoms Error event ID 5605 is recorded in the application log when audit data is collected on the target servers without agents installed.
Cause This problem occurs because audit data is collected without agents.
The event occurs as:
  • an error for the servers with Windows Vista/ Windows Server 2008 installed;
  • a warning for the servers with Windows Server 2008 R2/ Windows 7 installed.
Resolution For instructions on how to resolve the issue, refer to the following Microsoft Knowledge Base article: Warning Event ID 5605 is Logged in Application Log when querying MSCluster namespace via WMI.
(*) Netwrix Auditor replaces former Change Reporter products
Was this information helpful?