I'm not sure of the security implications of disabling the service, however
you might like to look at just disabling the logging component of WMI (if
enabled) as a workaround. I have seen performance issues related to very
verbose logging done by WMI.

http://msdn.microsoft.com/library/default.asp?url=/library/en-us/wmisdk/
wmi/
logging_wmi_activity.asp

Regards,
Mark

-----Original Message-----
From: listbounce (at) securityfocus (dot) com [email concealed] [mailto:listbounce (at) securityfocus (dot) com [email concealed]] On
Behalf Of Murda Mcloud
Sent: Monday, 9 October 2006 8:25 AM
To: focus-ms (at) securityfocus (dot) com [email concealed]
Subject: security implications of disabling WMI service

Hi, we have a user with a laptop whose machine has had performance issues
which we've tracked down to the WMI service. As a temporary fix I have
turned off the service and now everything works fine. It seems to be that
something when starting up is using WMI and slowing things down.

Does anyone know of a definitive list of MS security related
applications/functions that use WMI?
I know that scripts etc won't run.

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

------------------------------------------------------------------------
---
------------------------------------------------------------------------
---

[ reply ]