Fix: WMI Provider Host (WmiPrvSE.exe) High CPU Usage On Windows 10

WMI Provider Host (WmiPrvSE) is a Windows Host Management Process used by developers for monitoring purposes.

This behavior is usually seen in a production environment. After upgrading from Windows 7 to 10, many users have noticed a spike in CPU usage, which makes the system lag, get hot, and slow down. My personal guess is that the issue is caused by unusual behavior of this service, not following the patterns it is supposed to.

To fix this issue, we will run some basic commands on the command prompt and restart the Windows Management Instrumentation Service.

Restarting the Windows Management Instrumentation Service

Hold the Windows key on your keyboard and press R. In the Run dialog, type services.msc

servicesrun

From the services console, locate the Windows Management Instrumentation Service. What I usually do is click on any of the services and then press the W key to get to the services that start with the letter W. Then, do a quick scan to locate the one I want.

WmiPrvSE

Now choose “Restart” to restart the service. You can also stop the service from here if you want, but it is not recommended. So let it run, and we’ll fix the high CPU usage issue with this process.

Restart Other Associated Services

Once this is done, hover your mouse over to the bottom left corner, onto the Start Button, and do a (Right-Click) on it. A contextual menu will open; choose Command Prompt (Admin) from here.

WmiPrvSE1

In the command prompt window that opens up, type the following commands one by one; after each command, press the Enter key.

net stop iphlpsvc
net stop wscsvc
net stop Winmgmt
net start Winmgmt
net start wscsvc
net start iphlpsvc

2015-10-26_040001

Once done, reboot your PC and check. This should allow the process to drop significantly and the CPU to return to its normal use. If not, proceed to the next method below.

Perform a Clean Boot to Identify a Faulty Application

It is possible that a certain application might be causing the high CPU usage by WMI Provider Host. Therefore, in this step, we will perform a clean boot and isolate the application that is causing the excessive usage. In a clean boot, only the services vital to the boot process are loaded, and extra services and applications are disabled. To perform a clean boot:

  1. Log in to the computer with an Administrator account.
  2. Press “Windows” + “R” to open up the “RUN” prompt.
    Opening Run Prompt
  3. Type in “msconfig” and press “Enter“.
    Running MSCONFIG
  4. Click on the “Services” option and uncheck the “Hide all Microsoft Services” button.
    Clicking on the “Services” tab and Unchecking the “Hide all Microsoft Services” option
  5. Click on the “Disable All” option and then on “OK“.
    Clicking on the “Disable All” option
  6. Click on the “Startup” tab and click on the “Open Task Manager” option.
    Clicking on the “Open Task Manager” option
  7. Click on the “Startup” button in the task manager.
  8. Click on any application in the list that has “Enabled” written next to it and select the “Disable” option.
    Clicking on the “Startup” tab and selecting an application listed there
  9. Repeat this process for all applications in the list and restart your computer.
  10. Now your computer has been booted in the “Clean Boot” state.
  11. Check to see if the issue goes away.
  12. If the high CPU usage is no longer encountered, it means that a third-party application or service was causing it.
  13. Start by enabling one service at a time in the same manner and stop when the high CPU usage comes back.
  14. Reinstall the service/application whose enabling causes the high usage to return, or keep it disabled.

Locate the Process Using Event Viewer and Uninstall It

Open the Event Viewer. If you are using Windows 7 or earlier, search for Event Viewer in the Start Menu and open it. If you are using Windows 8/8.1 or 10, simply press the Windows Logo key + X to open the WinX Menu and then click on Event Viewer in the WinX Menu.

wmi provider host - 1

Click on View in the toolbar at the top of the Event Viewer window and enable the Show Analytic and Debug Logs option.

wmi provider host - 2

In the left pane of the window, navigate to Applications and Services Logs > Microsoft > Windows > WMI-Activity.

wmi provider host - 3

Double-click on WMI-Activity to expand its contents, and click on Operational in the list of its contents to open the WMI Provider Host’s operational logs.

Look for any errors, and when you find one, click on it to display its specifications at the bottom of the window.

Under the General tab of the specifications of the error you clicked on, look for the term ClientProcessId. When you find it, note or remember the number(s) – 1079, for example – that follow it.

wmi provider host - 4

Close the Event Viewer and open the Task Manager. Hold the Windows Key and press R. In the Run dialog, type taskmgr and click OK. Navigate to the Services tab and look for the service that has the same Process ID (PID) as the number(s) that followed the ClientProcessID term.

2015-12-11_120924

The service that has the corresponding Process ID is the culprit, so once you find it, immediately disable it and then go to Control Panel > Programs & Features and uninstall the program that the culprit service was associated with. Once the program has been uninstalled, WMI Provider Host should go back to using an extremely minimal amount of CPU.

Set the WMI Service to Demand

If your WMI service is constantly using high CPU, it’s possible that some of your programs, such as Discord, are using the process. Follow this step to stop it from happening:

  1. Search for Command Prompt and click “Run as administrator”.
  2. Once the Command Prompt is opened, you will have to type the following command:
    sc config Wmi start= demand
  3. Now, restart your computer and check to see if the issue persists.

If none of the methods above worked for you, it’s possible that there is a program conflicting with your WMI process. In that case, you will have to clean boot your computer.

ABOUT THE AUTHOR

Kamil Anwar


Kamil is a certified MCITP, CCNA (W), CCNA (S) and a former British Computer Society Member with over 9 years of experience Configuring, Deploying and Managing Switches, Firewalls and Domain Controllers also an old-school still active on FreeNode.

Comments

27
    KM
    Kevin John McDonald Oct 28, 2015

    I’m still getting high usage. This only started after Windows 10 was installed.

      KA
      K. Arrows Author Oct 28, 2015

      Is it the WMIPRVSE consuming the CPU? Hold Ctrl + Alt + DEL keys together to go to task manager; click the processes tab an then click processes once to list the processes. Try this: http://appuals.com/best-guide-how-to-clean-boot-windows-10/

    KM
    Kevin John McDonald Oct 28, 2015

    It is WMIPRVSE. I’ll try a clean boot

      KA
      K. Arrows Author Oct 28, 2015

      Okay. Please try and let me know.

    RI
    Richard Dec 6, 2015

    Did the above but sadly the WMI provider host is still running at 30 -40%. The laptop is an hp cq presario and it had the problem with windows 8 and I upgraded to 10 in the hope all would be cured. If you have any answers I’d love to hear them

      KA
      K. Arrows Author Dec 6, 2015

      From the services.msc menu, disable the service. Reboot and test.

    BU
    Bufonza Jan 26, 2016

    I’m reading multiple errors with multiple different clientprocessid’s. When I loooked up the first process id found under services there are multiple services sharing the same id #. Not sure about where to go from here.

      KA
      K. Arrows Author Jan 26, 2016

      I would suggest you submit a new question on equestions.net/ask so i can assist directly.

    DE
    delmus Apr 14, 2016

    absolutely a great fix. 2 bloat software packages (HP) creating the errors in WMI. disabling these two (one being HP wireless assistant) fixed the issue. CPU clocking at 12% as compared to 92%. Windows 10 is handling the wireless function on my HP Compaq just fine. Never found data on 2nd program, but it certainly hasn’t been missed.

    Reply
    EP
    El Gran Porculio Apr 28, 2016

    HPWMISVC.exe HP WMI Service

    CG
    Caleb Griffin Apr 30, 2016

    net stop iphlpsvc

    net stop wscsvc

    net stop Winmgmt

    net start Winmgmt

    net start wscsvc

    net start iphlpsvc

    Doing this helps until I reboot… I there something I can do? The second one doesn’t work.

      KA
      K. Arrows Author Apr 30, 2016

      Did you try locating the process and then uninstalling it?

        CG
        Caleb Griffin May 1, 2016

        I would see the Id but could not find it in services.

          KA
          K. Arrows Author May 1, 2016

          When you’re not seeing the ID is it still eating up cpu? Try the steps listed here: http://appuals.com/disable-telemetry-in-windows-10/

          CG
          Caleb Griffin May 2, 2016

          Didn’t help. I can see the error Id’s But cannot find their Id’s in Task manager.

          TE
          techdude May 30, 2016

          make a bat file and open it everytime you boot your pc
          or make an autoexec to open it manualy

    PW
    Paul Whitney May 18, 2016

    Hi Kevin, I’m having this problem too. I have follwed your excellent steps and found the culprit to be a HP Software Framework Service so I stopped the service and uninstalled the program however it then moved to another HP service so I removed that one. The PID of the offending process is now claiming to be that of one of the HP services that I have already removed. Any ideas?

      KA
      K. Arrows Author May 18, 2016

      Reboot PC and rename the process to something like process.name.old

    ΛΚ
    Λευτέρης Κυριάκου May 23, 2016

    error 1053 when i try to restart windows management and if i try again error 1061… any solutions pls???

      KA
      K. Arrows Author May 23, 2016

      Is this on Windows 10?

    UC
    Uchtepalik Feb 28, 2017

    when you try to stop wmi service it will warn about the dependent services. those are the potential culprits. in my case it was hp software framework. uninstalling it solved the problem

    Reply
      KA
      K. Arrows Author Mar 1, 2017

      thank you for letting me know.

    LU
    Luehatten Mar 18, 2017

    I have lots of error in the Operational list, but I can’t find anyone matching in the task bar

    IC
    Igor Carvalho Oct 10, 2017

    One of the errors I got was the LanmanServer. But I believe I’m not supposed to uninstall or stop that. Windows 10 here

    MI
    Mission Jul 15, 2018

    Should I wait for WMI to start acting up to do this? Because I did this while my computer wasn’t using much CPU, and I couldn’t find the PID it showed me.

      KA
      Kamil Anwar Aug 6, 2018

      Any updates on this?