Solved

5603

Posted on 2006-06-14
3
1,798 Views
Last Modified: 2012-06-27
Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      5603
Date:            14/06/2006
Time:            11:47:24
User:            NT AUTHORITY\SYSTEM
Computer:      CARE3SERVER1
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property.  This provider will be run using the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.  Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.  

Beyond my capabilities! No info from MS.
Thanks

0
Comment
Question by:nickyburnell
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 250 total points
ID: 16903420
aww, c'mon nicky, it's not beyond your capabilities... :-)

http://support.microsoft.com/kb/915148

Understand that a WARNING is just that... it's doesn't necessarily mean you have to do anything.  But you might want to if you don't like the security level of having the LocalSystem account doing these things... if you ask me, just let it go.

Jeff
TechSoEasy
0
 

Author Comment

by:nickyburnell
ID: 16903514
Well I'm getting there I suppose. It's nice to have a clean event log but I see it isn't a reality! I had seen that article but took it as, "After SP1", sort of meaning directly after, not always after.
Thanks loads
Nick
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 16903565
It's easy to have a clean event log.  Turn off the server.  :-)

No events means nothing is happening!

Jeff
TechSoEasy
0

Featured Post

Announcing the Most Valuable Experts of 2016

MVEs are more concerned with the satisfaction of those they help than with the considerable points they can earn. They are the types of people you feel privileged to call colleagues. Join us in honoring this amazing group of Experts.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
You may have discovered the 'Compatibility View Settings' workaround for making your SBS 2008 Remote Web Workplace 'connect to a computer' section stops 'working around' after a Windows 10 client upgrade.  That can be fixed so it 'works around' agai…
The Email Laundry PDF encryption service allows companies to send confidential encrypted  emails to anybody. The PDF document can also contain attachments that are embedded in the encrypted PDF. The password is randomly generated by The Email Laundr…
Suggested Courses

710 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question