5603

Event Type:      Warning
Event Source:      WinMgmt
Event Category:      None
Event ID:      5603
Date:            14/06/2006
Time:            11:47:24
User:            NT AUTHORITY\SYSTEM
Computer:      CARE3SERVER1
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property.  This provider will be run using the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.  Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.  

Beyond my capabilities! No info from MS.
Thanks

nickyburnellAsked:
Who is Participating?
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
aww, c'mon nicky, it's not beyond your capabilities... :-)

http://support.microsoft.com/kb/915148

Understand that a WARNING is just that... it's doesn't necessarily mean you have to do anything.  But you might want to if you don't like the security level of having the LocalSystem account doing these things... if you ask me, just let it go.

Jeff
TechSoEasy
0
 
nickyburnellAuthor Commented:
Well I'm getting there I suppose. It's nice to have a clean event log but I see it isn't a reality! I had seen that article but took it as, "After SP1", sort of meaning directly after, not always after.
Thanks loads
Nick
0
 
Jeffrey Kane - TechSoEasyPrincipal ConsultantCommented:
It's easy to have a clean event log.  Turn off the server.  :-)

No events means nothing is happening!

Jeff
TechSoEasy
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.