Solved

5603

Posted on 2006-06-14
3
1,739 Views
Last Modified: 2012-06-27
Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      5603
Date:            14/06/2006
Time:            11:47:24
User:            NT AUTHORITY\SYSTEM
Computer:      CARE3SERVER1
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property.  This provider will be run using the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.  Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.  

Beyond my capabilities! No info from MS.
Thanks

0
Comment
Question by:nickyburnell
  • 2
3 Comments
 
LVL 74

Accepted Solution

by:
Jeffrey Kane - TechSoEasy earned 250 total points
Comment Utility
aww, c'mon nicky, it's not beyond your capabilities... :-)

http://support.microsoft.com/kb/915148

Understand that a WARNING is just that... it's doesn't necessarily mean you have to do anything.  But you might want to if you don't like the security level of having the LocalSystem account doing these things... if you ask me, just let it go.

Jeff
TechSoEasy
0
 

Author Comment

by:nickyburnell
Comment Utility
Well I'm getting there I suppose. It's nice to have a clean event log but I see it isn't a reality! I had seen that article but took it as, "After SP1", sort of meaning directly after, not always after.
Thanks loads
Nick
0
 
LVL 74

Expert Comment

by:Jeffrey Kane - TechSoEasy
Comment Utility
It's easy to have a clean event log.  Turn off the server.  :-)

No events means nothing is happening!

Jeff
TechSoEasy
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

Written by Glen Knight (demazter) as part of a series of how-to articles. Introduction One of the biggest consumers of disk space with Small Business Server 2008(SBS) is Windows Server Update Services, more affectionately known as WSUS. For t…
The SBS 2011 release date (RTM) is supposed to be around Christmas, 2011.  This article is a compilation of my notes -- things I have learned first hand.  The items are in a rather random order, but I think this list covers most of what is new and d…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
This video shows how to remove a single email address from the Outlook 2010 Auto Suggestion memory. NOTE: For Outlook 2016 and 2013 perform the exact same steps. Open a new email: Click the New email button in Outlook. Start typing the address: …

771 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now