The wmiprvse.exe process creates a memory leak on a computer that is running Windows Server 2008 if you remotely monitor this process by using the WMI interface on a computer that is running Windows Server 2003 or Windows XP
Consider the following scenario:
- You monitor remotely a computer that is running Windows Server 2008 or Windows Vista from a computer that is running Windows Server 2003 or Windows XP.
- You use the WMI interface to monitor performance and to monitor remotely (the “perfmon /wmi” command).
- You open the Add counters dialog box on the computer that monitors remotely. In the Add counters dialog box, you continuously scroll up and down through the items in the Performance Objects list.
In this scenario, the memory usage of one wmiprvse.exe process keeps increasing. After some time, you cannot monitor remotely, and the data collection stops.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB970520.