The Framework.log file grows larger than 64 KB when you use WMI on a Windows Server 2003 or Windows XP computer (836605)


The information in this article applies to:

  • Microsoft Windows Server 2003, Web Edition
  • Microsoft Windows Server 2003, Standard Edition
  • Microsoft Windows Server 2003, Enterprise Edition
  • Microsoft Windows Server 2003, Datacenter Edition
  • Microsoft Windows XP Professional
  • Microsoft Windows XP Home Edition
  • Microsoft Windows Management Instrumentation 1.5

SYMPTOMS

When you use Windows Management Instrumentation (WMI) and you configure it to log all events on your Microsoft Windows Server 2003-based computer or Microsoft Windows XP-based computer for quick analysis and troubleshooting of problems, the file size of both the Framework.log and the Framework.lo_ files may be greater than what you configured for them.

RESOLUTION

Windows Server 2003

To resolve this problem, set the permissions on the %systemroot%\system32\wbem\logs folder so that the Network Service account has the Delete permission.

To set the permissions on the %systemroot%\system32\ wbem\logs folder, follow these steps:
  1. Locate the %systemroot%\system32\wbem\logs folder, right-click on the folder, and then select Properties.
  2. On the Security tab, click the Advanced button.
  3. Select the NETWORK SERVICE account from the Permission entries list and click Edit.
  4. Locate the Delete permission and select the Allow checkbox.
  5. Click OK three times.

Windows XP

To resolve this problem, obtain the latest service pack for Windows XP. For additional information, click the following article number to view the article in the Microsoft Knowledge Base:

322389 How to obtain the latest Windows XP service pack

MORE INFORMATION

You can configure an error log for WMI through the registry:
  • The destination folder for all log files is set by this registry subkey:
    HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\LoggingDirectory
  • The maximum file size is set by the following registry subkey:
    HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Log File Max Size
The following registry subkey determines how the Windows Driver Model (WDM) provider will log errors:
HKEY_LOCAL_MACHINE\Software\Microsoft\WBEM\CIMOM\Logging

The logging entry uses the following values:
  • 0: Turns off logging.
  • 1: Logs errors only.
  • 2: Verbose logging.

The default value for the Log File Max Size entry is 64 kilobytes (KB). When a log file reaches this size, the log file will be backed up to Log_file_name.lo_, and a new log file starts collecting entries. The only exception to this is the Framework.log file. The Framework.log file continues to increase even after the file has exceeded the Log File Max Size setting.

STATUS

Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section. This problem was first corrected in Microsoft Windows XP Service Pack 2.
Modification Type:MajorLast Reviewed:12/22/2004
Keywords:ATdownload kbWinXPsp2fix kbpending kbWinXPpreSP2fix kbfix kbbug KB836605 kbAudITPRO
©2004 Microsoft Corporation. All rights reserved.