Hi

Have a monitored server thats writing the operations manager event log with a lot of  Event id 21405.

The process started at 13:06:43 failed to create System.PropertyBagData, no errors detected in the output.  The process exited with 3221225794

Command executed: "C:\Windows\system32\cscript.exe" /nologo "Microsoft.Windows.Server.OperatingSystem.PercentMemoryUsed.vbs" 4183. 8388084

Working Directory: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 8\2356\

One or more workflows were affected by this. 

Workflow name: Microsoft.Windows.Server.6.2.OperatingSystem.PercentMemoryUsed.Collection

Instance name: Microsoft Windows Server 2012 Standard

Instance ID: {ECE4513D-1D03-B50A-966D-828577FACA87}

Management group: Scom

------------------------------------

The process started at 13:06:27 failed to create System.PropertyBagData, no errors detected in the output.  The process exited with 3221225794

Command executed: "C:\Windows\system32\cscript.exe" /nologo "SCOMpercentageCPUTimeCounter.vbs" xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx false 3

Working Directory: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 8\506\

One or more workflows were affected by this. 

Workflow name: Microsoft.SystemCenter.HealthService.SCOMpercentageCPUTimeCollection

Instance name: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Instance ID: {7832F56E-9013-3869-95AB-5C171BAC8874}

Management group: Scom

-----------------------------------------------------------------------------------------------

The process started at 13:06:24 failed to create System.Discovery.Data, no errors detected in the output.  The process exited with 3221225794

Command executed: "C:\Windows\system32\cscript.exe" /nologo "DiscoverWindowsComputerProperties.js" 0 {114E4510-2789-ECC5-AC91-1F7DB6C49998} {60BA1B49-2236-8EF7-5DE1-21861C1AB816} xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Working Directory: C:\Program Files\Microsoft Monitoring Agent\Agent\Health Service State\Monitoring Host Temporary Files 9\4333\

One or more workflows were affected by this. 

Workflow name: Microsoft.SystemCenter.DiscoverWindowsComputerProperties

Instance name: xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx

Instance ID: {60BA1B49-2236-8EF7-5DE1-21861C1AB816}

Management group: Scom

Have checked the Antivirus, no problem.

So what to do next ?

When you say you have checked the antivirus, what do you mean exactly?

Make sure that you have made antivirus exclusions for all agents: http://support.microsoft.com/kb/975931

Hi,

The issue may be caused by no Permission been set to the location in registry :
CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32\(Default))

By default it has to be : SYSTEM (READ ACCESS)

Administrators(Localsystem\administrators) (READ ACCESS)

Users (Localsystem\users) (READ ACCESS)

TrustedInstaller (Full control ACCESS)

Please also go through the below links for more details:

Operations manager Agent fails to execute VB scripts - Logs event ID 21405

http://social.technet.microsoft.com/wiki/contents/articles/14053.operations-manager-agent-fails-to-execute-vb-scripts-logs-event-id-21405.aspx

http://blogs.technet.com/b/mihai/archive/2012/06/15/om-agent-fails-to-execute-scripts-warning-event-21405.aspxRegards,

Yan Li

where is the location of the CLSID\{B54F3741-5B07-11CF-A4B0-00AA004A55E8}\InprocServer32\(Default))