Database Administrators Stack Exchange is a question and answer site for database professionals who wish to improve their database skills and learn from others in the community. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Every 5 minutes I have a couple of failed login attempts from a Biztalk server to the SQL server.

Login failed for user 'DOMAIN\SERVER01$'. Reason: Token-based server access validation failed with an infrastructure error. Check for previous errors

I traced the failed logins to back to a service on the Biztalk server. The failed PIDs were pointing to a wmiprvse.exe that was using a LOCAL SERVICE.

I know I could either grant the Biztalk server access to the SQL server or I could change that service to run with a different account BUT I'd like to know what is using the WMI service before doing this.

How can you tell what is using the WMI service?

share|improve this question
Check the application event log for errors on the Biztalk server? – Jon Seigel Aug 20 '12 at 17:33
After more digging in the Ops Manager Log, it turns out it was some Biztalk discovery tool. Still looking for a way to find out how to troubleshoot the WMI service though. – SqlSandwiches Aug 20 '12 at 20:03

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.