An application or service that receives event log information by using a WMI interface stops responding in Windows Server 2008 or in Windows Vista
Consider the following scenario:
- You run an application or service on a computer that is running Windows Server 2008 or Windows Vista.
- The application or service subscribes to some specific events in the Event Log service.
- The application or services uses a Windows Management Instrumentation (WMI) interface to receive the event notifications.
In this scenario, the application randomly stops responding. After the issue occurs, users do not receive event log-related information from the WMI interface.
For more information on this issue, including potential causes, workarounds, and resolutions, see: Microsoft KB Article KB2391536.