Main Forum > Tweaking.com Support & Help
Windows 7 and WMI revisited
Willy2:
- Make a backup of the registry.
- Use Eusing's Registry Defragment program to compact the registry files. As time goes by the registry gets more and more bloated.
http://www.eusing.com/free_registry_defrag/registry_defrag.htm
I assume that after this exporting those keys the files will have the same size.
- You must compare the visible content of that part of the registry (export it first) and the file "wmimgmt.reg" (open them with e.g. Notepad). If they are the same before you change that from "netsvc" to "winmgmt" then you can replace "winmgmt.reg" with your own version.
- If you install a new version of WR the all info will be overwritten. So, you need to keep a copy of all the appropriate files for the next version of WR.
- In the days of Windows XP everyone was running a 32 bit system. But as time went by more and more people started to use a 64 bit systems. It seems it was MS made a mistake here at this point. I am NOT convinced that Shane is able to provide a solution for this problem/mistake.
- The 2 repairs called "Repair WMI" and "Restore Important Services" both write the info from "Winmgmt.reg" into/to the registry.
plox:
Thanks Willy2.
I use Registrar Registry Manager (free version) for when working with the registry and it exported the HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt key (the one I changed) as one reg file including subkeys Parameters and Security.
It's the orininal Shane netsvc wmimgmt.reg file that is bigger than the winmgmt one I replaced it with after altering the path in the registry. A bit difficlut to tell as they are saved in hex format but the image path servicedll numbers and are different when opened in Notepad. No matter, I'll soon know next time I do a repair if it has worked. I can always run (I hope) the altered reg by itself in safe mode to merge it into the regitsry or manually change it if needs be,
It seems that conditional statements are not allowed in reg files but are in bat files.
The only solution I reckon would be to have two wmimgmt.reg files (wmimgmt.reg and wmimgmtx86.reg) and (if possible) a script that somehow gets the system type and then runs the appropriate reg file during the "Repair WMI" and "Restore Important Services" repairs or when completed to correct the problem/mistake.
It may be a bit too complicated to implement and since the trend is towards 64 bit systems (all new one I've looked at are) not considered worthwile.
Willy2:
- But WR doesn't write the entire content of that registry entry. It only writes a part of that key into the registry.
Willy2:
- Compare the registry content with the content of "Winmgmt.reg" !!!
plox:
--- Quote ---Willy2 wrote - Compare the registry content with the content of "Winmgmt.reg" !!!
--- End quote ---
Winmgmt.reg from Windows Repair Portable 4.5.5 - size 3.03KB
- these are the values it wrote to the registry after the WR and which disabled WMI, Security Centre etc.... by the k netsvcs value it inserted.
Windows Registry Editor Version 5.00 -
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt]
"DisplayName"="Windows Management Instrumentation"
"ImagePath"=hex(2):25,00,73,00,79,00,73,00,74,00,65,00,6d,00,72,00,6f,00,6f,00,\
74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,73,\
00,76,00,63,00,68,00,6f,00,73,00,74,00,2e,00,65,00,78,00,65,00,20,00,2d,00,\
6b,00,20,00,6e,00,65,00,74,00,73,00,76,00,63,00,73,00,00,00
"Description"="Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"ObjectName"="localSystem"
"ErrorControl"=dword:00000000
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):52,00,50,00,43,00,53,00,53,00,00,00,00,00
"ServiceSidType"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,02,00,00,00,14,00,00,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Parameters]
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceDll"=hex(2):25,00,53,00,79,00,73,00,74,00,65,00,6d,00,52,00,6f,00,6f,\
00,74,00,25,00,5c,00,73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,\
77,00,62,00,65,00,6d,00,5c,00,57,00,4d,00,49,00,73,00,76,00,63,00,2e,00,64,\
00,6c,00,6c,00,00,00
"ServiceMain"="ServiceMain"
-------
--- Quote ---Willy2 wrote - But WR doesn't write the entire content of that registry entry. It only writes a part of that key into the registry.
--- End quote ---
You may be right, the Security subkey must have been there already - size 1.98KB
Altered Winmgmt.reg from registry after I manually changed the image path from k netsvcs to k winmgmt, see the screenshot posted before :
REGEDIT4
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt]
"DisplayName"="Windows Management Instrumentation"
"ImagePath"=hex(2):25,73,79,73,74,65,6d,72,6f,6f,74,25,5c,73,79,73,74,65,6d,33,\
32,5c,73,76,63,68,6f,73,74,2e,65,78,65,20,2d,6b,20,77,69,6e,6d,67,6d,74,00
"Description"="Provides a common interface and object model to access management information about operating system, devices, applications and services. If this service is stopped, most Windows-based software will not function properly. If this service is disabled, any services that explicitly depend on it will fail to start."
"ObjectName"="localSystem"
"ErrorControl"=dword:00000000
"Start"=dword:00000002
"Type"=dword:00000020
"DependOnService"=hex(7):52,50,43,53,53,00,00
"ServiceSidType"=dword:00000001
"FailureActions"=hex:80,51,01,00,00,00,00,00,00,00,00,00,02,00,00,00,14,00,00,\
00,01,00,00,00,60,ea,00,00,01,00,00,00,60,ea,00,00
"DelayedAutoStart"=dword:00000000
"Group"=""
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Parameters]
"ServiceDllUnloadOnStop"=dword:00000001
"ServiceDll"=hex(2):25,53,79,73,74,65,6d,52,6f,6f,74,25,5c,73,79,73,74,65,6d,\
33,32,5c,77,62,65,6d,5c,57,4d,49,73,76,63,2e,64,6c,6c,00
"ServiceMain"="ServiceMain"
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\Winmgmt\Security]
"Security"=hex:01, & a whole set of numbers.
This ^^^^^^ is what is now the Winmgmt.reg in Windows Repair Portable 4.5.5 as I have replaced the original one with it.
Hope that makes sense to you.
Navigation
[0] Message Index
[*] Previous page
Go to full version