Solved

5603

Posted on 2006-06-14
3
1,781 Views
Last Modified: 2012-06-27
Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      5603
Date:            14/06/2006
Time:            11:47:24
User:            NT AUTHORITY\SYSTEM
Computer:      CARE3SERVER1
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property.  This provider will be run using the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.  Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.  

Beyond my capabilities! No info from MS.
Thanks

0
Comment
Question by:nickyburnell
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 250 total points
ID: 16903420
aww, c'mon nicky, it's not beyond your capabilities... :-)

http://support.microsoft.com/kb/915148

Understand that a WARNING is just that... it's doesn't necessarily mean you have to do anything.  But you might want to if you don't like the security level of having the LocalSystem account doing these things... if you ask me, just let it go.

Jeff
TechSoEasy
0
 

Author Comment

by:nickyburnell
ID: 16903514
Well I'm getting there I suppose. It's nice to have a clean event log but I see it isn't a reality! I had seen that article but took it as, "After SP1", sort of meaning directly after, not always after.
Thanks loads
Nick
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
ID: 16903565
It's easy to have a clean event log.  Turn off the server.  :-)

No events means nothing is happening!

Jeff
TechSoEasy
0

Featured Post

Free Tool: ZipGrep

ZipGrep is a utility that can list and search zip (.war, .ear, .jar, etc) archives for text patterns, without the need to extract the archive's contents.

One of a set of tools we're offering as a way to say thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

In the event you manage a Small Business Server 2003, and you are audited for PCI compliance, there are several changes you must make in order to pass the audit. I can take no credit for discovering any of these fixes or workarounds, but there is no…
Introduction At 19:33 (UST) on Tuesday 21st September the long awaited email arrived with the subject title of “ANNOUNCING THE AVAILABILITY OF WINDOWS SBS 7 PREVIEW”.  It was time to drop whatever I was doing and dedicate as much bandwidth as possi…
Nobody understands Phishing better than an anti-spam company. That’s why we are providing Phishing Awareness Training to our customers. According to a report by Verizon, only 3% of targeted users report malicious emails to management. With compan…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question