WinMgmt error in Event log

Posted on 2006-03-29
Last Modified: 2008-01-09
I started to get this error in my event log about a week ago, and can't come up with anything on how to fix this. Running SBS2003. Not sure if there's any link, but this error started appearing the day after I upgraded the antivirus software on the server from SAV 9.0 to SAV10.0.2, along with SMSMSE

Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      63
Date:            2006-03-29
Time:            21:23:49
User:            NT AUTHORITY\SYSTEM
Computer:      SBS01
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, to use the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Is this something I should worry about and try to fix, or just leave it there ?

Question by:ndidomenico
    LVL 18

    Accepted Solution

    1. Event ID 63 occurs when you run the Microsoft System Information program
    from Office 2003;en-us;891642
    2. Ionut Marin
    As per Microsoft: "Health Monitor registers several Windows Management Instrumentation (WMI) providers to run under the local system account to access the information that the providers supply. Because providers that run under the local system account pose a greater risk if they are compromised, Microsoft Windows 2003 generates warnings when these providers are registered". See M820460 to find out for what providers this event is generated.

    Adrian Grigorof
    From a newsgroup post: "Typically occuring when a Service Pack is applied, these messages are completely normal. This happens when the Windows Management Instrumentation (WMI) Provider is doing it's business."  

    Author Comment

    Should I just ignore this message ?

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    This may not be a text book method to resolve VSS backup issues but it seemed to have worked on few of the Windows 2003 servers we had issues while performing a Volume Shadow Copy backup. If you have issues while performing a shadow copy backup usin…
    Setting up a Microsoft WSUS update system is free relatively speaking if you have hard disk space and processor capacity.   However, WSUS can be a blessing and a curse. For example, there is nothing worse than approving updates and they just have…
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Polish reports in Access so they look terrific. Take yourself to another level. Equations, Back Color, Alternate Back Color. Write easy VBA Code. Tighten space to use less pages. Launch report from a menu, considering criteria only when it is filled…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now