\registry\machine\system\currentcontrolset\services\WmiSamp
    Type = REG_DWORD 0x00000001
    Start = REG_DWORD 0x00000001
    Group = PnP Filter
    ErrorControl = REG_DWORD 0x00000001

\registry\machine\system\currentcontrolset\enum\root\*PNP0400\2_0_20_0_0_0
    UpperFilters = REG_MULTI_SZ "WmiSamp"