NTDS WMI Counters missing after dcpromo

  • Last Post 11 September 2015
patrickg posted this 11 September 2015

So last week we were having some issues with a DC (2012R2) and ended up demoting it. After this was done a few hours later it was promoted again and everything looked clean. We started demoing a new systems monitoring product this week and all of the DCs are reporting cleanly with the product except the one that was demoted the week before. It seems as if a number of the NTDS WMI counters are missing. Has anyone else seen this behavior when re-promoting a former DC?  

petelee posted this 11 September 2015

I saw a similar issue and rebuilt the WMI namespace, see if this link helps:




One of the symptoms I saw was the security event logs stopped logging events.



Peter Lee