RE: Event 63 Warning

Tech-Archive recommends: Speed Up your PC by fixing your registry



"nass" wrote:



"Edna" wrote:

WXP Pro SP3, Office 2007, One User, DSL ISP Provider, P4 CPU 3.6, 2.00 GB Ram
Desktop Wireless Network to a Laptop.

Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 63
Date: 11-Dec-08
Time: 6:27:38 AM
User: NT AUTHORITY\SYSTEM
Computer: SHARK
Description:
A provider, OffProv12, has been registered in the WMI namespace,
Root\MSAPPS12, to use the LocalSystem account. This account is privileged
and the provider may cause a security violation if it does not correctly
impersonate user requests.

For more information, see Help and Support Center at
http://go.microsoft.com/fwlink/events.asp.

From what little I've found refers to a Server. I'm not on a Server but I
recall installing a large program in error, QML Server, something like
that, from MS Update site but it's long ago been uninstalled. Maybe there's
a missed entry.
I posted this morning to Office but no suggestions recvd. This board
usually has someone that can help.

This happen if a security updates been applied and the WMI is up and running
to alert you or create a log about other services running and their
activities.

Event ID 63 — WMI Provider Hosting
http://technet.microsoft.com/en-us/library/cc775090.aspx

It will be helpful if you created another account and test by using it and
see if the error/warrning will be logged in the evnt log.
How to Identify a Damaged User Profile and Create a New Profile
http://support.microsoft.com/kb/811151

But for now you can ignore this warnning as long as the service legit and
you what it is!
BTW about the server, most application to get uupdate or update its database
it has a virtual server prog that will connect through it to do its thingy <G>

HTH,
nass
---
http://www.nasstec.co.uk

Nass, You said: This happen if a security updates been applied and the WMI
is up and running
to alert you or create a log about other services running and their
activities.

I haven't applied any Updates to Office 2007 but I have a dozen or more
Event 63 Warnings since 25Nov08. The only program in Office I've even OPENED
is Word and I find the Toolbar excessive for my use having a Small Business.
So much so, I wish I'd stayed with Office 2003.

You said: "It will be helpful if you created another account and test by
using"
LOL Oh! You're soo FUNNY!!!

Thx Fellows! It's unfortunate my query took a lot of your time only to
conclude to do nothing although I'm now confident it's not a serious problem
that should be attended to. ... Edna




.

Relevant Pages

  • Re: Error 10061, 0x800ccc0e, bug?
    ... It's definitely the April Windows update!!!! ... Checked program files after restore and the updates are gone and OE is ... receive mail after changing account in windows. ... Mike, the error indicates that you are failing to connect to the server, ...
    (microsoft.public.windows.inetexplorer.ie6_outlookexpress)
  • Re: HTTP 401.3 error: Please help - Urgent.
    ... Is this really WHAT IS CAUSING AUTHENTICATION ... PROBLEMS in my server? ... > was that several critical windows updates were pushed by our network ... > Does this have anything to do with the IUSR_Machinename account? ...
    (microsoft.public.inetserver.iis)
  • RE: Event 63 Warning
    ... A provider, OffProv12, has been registered in the WMI namespace, ... to use the LocalSystem account. ... From what little I've found refers to a Server. ... This happen if a security updates been applied and the WMI is up and running ...
    (microsoft.public.windowsxp.general)
  • IIS Out of Process Pooled Applications Security
    ... Recently one of the following windows updates / hotfixes for my Windows 2000 ... Server, altered the security settings of my "IIS Out of Process Pooled ... The account that was displayed was the IWAM_machine account, ... Is there anything wrong in making the security for Out of Process Pooled ...
    (microsoft.public.inetserver.iis.security)
  • Re: Problem with automatic updates
    ... already started (wmi is set to restart the service if it stops) ... Check task manager and stop WMI if it is running, ... When we start the Automatic Updates service, ... Windows 2003 server SP1 integrated ...
    (microsoft.public.windows.server.security)