RE: Event 63 Warning



"Edna" wrote:

WXP Pro SP3, Office 2007, One User, DSL ISP Provider, P4 CPU 3.6, 2.00 GB Ram
Desktop Wireless Network to a Laptop.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 11-Dec-08
Time: 6:27:38 AM
User: NT AUTHORITY\SYSTEM
Computer: SHARK
Description:
A provider, OffProv12, has been registered in the WMI namespace,
Root\MSAPPS12, to use the LocalSystem account. This account is privileged
and the provider may cause a security violation if it does not correctly
impersonate user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

From what little I've found refers to a Server. I'm not on a Server but I
recall installing a large program in error, QML Server, something like
that, from MS Update site but it's long ago been uninstalled. Maybe there's
a missed entry.
I posted this morning to Office but no suggestions recvd. This board
usually has someone that can help.

This happen if a security updates been applied and the WMI is up and running
to alert you or create a log about other services running and their
activities.

Event ID 63 — WMI Provider Hosting
http://technet.microsoft.com/en-us/library/cc775090.aspx

It will be helpful if you created another account and test by using it and
see if the error/warrning will be logged in the evnt log.
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151

But for now you can ignore this warnning as long as the service legit and
you what it is!
BTW about the server, most application to get uupdate or update its database
it has a virtual server prog that will connect through it to do its thingy <G>

HTH,
nass
---
http://www.nasstec.co.uk

.

Relevant Pages

  • Re: Perflib errors in event logs after SP2 installation
    ... the server does seem to be working fine. ... System account is a potential security risk. ... Policy provider runs under the Local System account, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • RE: Event 63 Warning
    ... to use the LocalSystem account. ... From what little I've found refers to a Server. ... This happen if a security updates been applied and the WMI is up and running ... This happen if a security updates been applied and the WMI ...
    (microsoft.public.windowsxp.general)
  • Re: Cannot start services
    ... The solution in my case....once I got the server back in the domain I copied ... see Help and Support Center at ... | A provider, PerfProv, has been registered in the WMI namespace, ... | will be run using the LocalSystem account. ...
    (microsoft.public.windows.server.general)
  • repeated failure of store - securty hack?
    ... I have a problem with a sbs 2003 server runnig fine since commissioning ... This problem is likely due to faulty hardware. ... This provider will be run using the LocalSystem ... This account is privileged and the provider may cause a security ...
    (microsoft.public.windows.server.sbs)
  • RE: SBS Slows down and stops
    ... This provider will be run using the LocalSystem ... This account is privileged and the provider may cause a security ... SBS Server 2003 with all updates from the Service Pack 1 document, ...
    (microsoft.public.windows.server.sbs)
Loading