Hello , I have a very interesting situation , all my clients were working but suddenly all of sms agent host services stopped. I checked smsexec.log and there are ; Failed to open to WMI namespace '\\.\root\ccm' (80070005) CCMDoCertificateMaintenance() failed (0x80070005). Failed to open to WMI namespace '\\.\root\CCM\Events' (80070005) CCMDoCertificateMaintenance() raised CCM_ServiceHost_CertificateOperationsFailure status event. Loading service settings. Failed to open to WMI namespace '\\.\root\ccm\Policy\Machine' (80070005) Error loading service settings. Code 0x80070005 Phase 0 initialization failed (0x80070005). Service initialization failed (0x80070005). Shutting down CCMEXEC... UninitCommandExec failed (0x800401fb). And i have added the NETWORK SERVICE account to LOCAL ADMINISTRATORS group of client , then everything is fine !!! I've 6000 clients and i dont want to add NETWORK SERVICE account to LOCAL ADMINISTRATORS group. Any suggestions ?

someone has modified the WMI permissions, you need to figure out what changeds has been made.Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund

someone has modified the WMI permissions, you need to figure out what changeds has been made. Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund How ? I ve checked gpo's but nothing found :)

Hello - Any new antivirus virus policy?Anoop C Nair

Hello - Any new antivirus virus policy? Anoop C Nair No.

This is clearly an Access Denied error. Why "Network Service"? That's the question. What account is the SMS Agent host running under? The only way (that I can see) for adding "Network Service" to the local admins group that would fix this issue is if the service account for SMS Agent host has been changed to Network Service. This of course is unsupported.Jason | http://myitforum.com/cs2/blogs/jsandys | http://blogs.catapultsystems.com/jsandys/default.aspx | Twitter @JasonSandys

SMS Agent host works with Local system account. I tried to export from a working clients wmimgmt security settings from registry , then import to problematic client. So it works ! I do not need to add network service account to admins. This will be problem ! I dont know how changed the security settings of wmi but i am working on it.

SMS Agent host works with Local system account. I tried to export from a working clients wmimgmt security settings from registry , then import to problematic client. So it works ! I do not need to add network service account to admins. This will be problem ! I dont know how changed the security settings of wmi but i am working on it. Actual source of problem found ! A system admin changed WMI service in a gpo to automatic with default securtiy settings. I changed to NOT DEFINED state and everything seem ok .

someone has modified the WMI permissions, you need to figure out what changeds has been made. Kent Agerlund | My blogs: http://blog.coretech.dk/author/kea/ and http://scug.dk/ | Twitter @Agerlund | Linkedin: /kentagerlund You were certainly Right :) Thanks Kent.