asked on

5603

Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      5603
Date:            14/06/2006
Time:            11:47:24
User:            NT AUTHORITY\SYSTEM
Computer:      CARE3SERVER1
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

Beyond my capabilities! No info from MS.
Thanks

ASKER CERTIFIED SOLUTION

Jeffrey Kane - TechSoEasy

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

nickyburnell

ASKER

Well I'm getting there I suppose. It's nice to have a clean event log but I see it isn't a reality! I had seen that article but took it as, "After SP1", sort of meaning directly after, not always after.
Thanks loads
Nick

Jeffrey Kane - TechSoEasy

It's easy to have a clean event log. Turn off the server. :-)

No events means nothing is happening!

Jeff
TechSoEasy