In a post dated, November 13, 2011 Mark Carter wrote a guest blog entitled "Use Powershell to quickly find Installed Software".
I am really interested in his statement "I would not recommend querying Win32_Product in your production environment" Can I ask why he states this?
The reason I ask is I just happen to have this occuring with our System Center Virtual Machine Manager server. It runs the powershell Read-SCVMHostCluster command against our (Production) HyperV Cluster servers every 30 minutes.
I have done a trace of WMI queries on the target server and get the following..
CorrelationId = {E15A371C-8A45-0002-CB37-5AE1458AD101}; GroupOperationId = 4929; OperationId = 8717199; Operation = Start IWbemServices::ExecQuery - root\cimv2 : select * from Win32_Productwhere Caption = 'Microsoft System Center Virtual Machine Manager DHCP Server (x64)' and Vendor = 'Microsoft Corporation'; ClientMachine = SERVER; User = DOMAIN\service_account_run_as; ClientProcessId = 1804; NamespaceName = \\.\root\cimv2ProviderInfo
ProviderInfo for GroupOperationId = 4929; Operation = Provider::ExecQuery - MSIProv : select* from Win32_Product where (Caption = "Microsoft System Center Virtual Machine Manager DHCP Server (x64)" AND Vendor = "Microsoft Corporation"); HostID = 3192; ProviderName = MSIProv; ProviderGuid = {BE0A9830-2B8B-11d1-A949-0060181EBBAD}; Path = %systemroot%\system32\wbem\msiprov.dll
I am a little concerned as it is our production servers we are talking about, however since this is a Mircosoft product (SCVMM) doing this every 30 min, I am interested to know if I should inform MS (Vendor) about it and make a necessary change somewhere or just ignore it.
thanks for your time
Alex