Re: problem sending event log errors

ok, thank you for pointing me in the right direction, Gerry.

sonsie

"Gerry Cornell" wrote:

> Sonsie
>
> I would seek help in this newsgroup:
> microsoft.public.inetserver.iis
>
> I have no experience with this type of error.
>
> --
>
> Hope this helps.
>
> Gerry
> ~~~~
> FCA
> Stourport, England
>
> Enquire, plan and execute
> ~~~~~~~~~~~~~~~~~~~
>
>
>
> "sonsie" <nancyarnold(removethis)@hotmail.com> wrote in message
> news:24D078C8-E0EB-4B08-A4A6-88057F74A188@xxxxxxxxxxxxxxxx
> > Thank you Gerry - here are the warning/error events. I've put any notes
> > I've
> > written in double brackets.
> >
> > APPLICATION EVENT LOG
> >
> > Event Type: Warning
> > Event Source: WinMgmt
> > Event Category: None
> > Event ID: 63
> > Date: 1/15/2006
> > Time: 6:20:04 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: XXX-XXXXX-XXX
> > Description:
> > A provider, HiPerfCooker_v1, has been registered in the WMI namespace,
> > Root\WMI, to use the LocalSystem account. This account is privileged and
> > the
> > provider may cause a security violation if it does not correctly
> > impersonate
> > user requests.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > Event Type: Warning [[this one x2 on 1/18, x2 on 1/19]]
> > Event Source: WinMgmt
> > Event Category: None
> > Event ID: 5603
> > Date: 1/18/2006
> > Time: 2:26:15 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: XXX-XXXXX-XXX
> > Description:
> > A provider, OffProv10, has been registered in the WMI namespace,
> > Root\MSAPPS10, but did not specify the HostingModel property. This
> > provider
> > will be run using the LocalSystem account. This account is privileged and
> > the provider may cause a security violation if it does not correctly
> > impersonate user requests. Ensure that provider has been reviewed for
> > security behavior and update the HostingModel property of the provider
> > registration to an account with the least privileges possible for the
> > required functionality.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > Event Type: Warning
> > Event Source: ASP.NET 1.1.4322.0
> > Event Category: Setup
> > Event ID: 1020
> > Date: 1/19/2006
> > Time: 4:44:58 AM
> > User: N/A
> > Computer: XXX-XXXXX-XXX
> > Description:
> > Updates to the IIS metabase were aborted because IIS is either not
> > installed
> > or is disabled on this machine. To configure ASP.NET to run in IIS, please
> > install or enable IIS and re-register ASP.NET using aspnet_regiis.exe /i.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > Event Type: Warning
> > Event Source: WinMgmt
> > Event Category: None
> > Event ID: 62
> > Date: 1/19/2006
> > Time: 4:46:36 AM
> > User: N/A
> > Computer: XXX-XXXXX-XXX
> > Description:
> > WMI ADAP was unable to process the .NET CLR Data performance library since
> > one of the data blobs reported to have classes but had zero size
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > Event Type: Warning
> > Event Source: WinMgmt
> > Event Category: None
> > Event ID: 62
> > Date: 1/19/2006
> > Time: 4:46:36 AM
> > User: N/A
> > Computer: XXX-XXXXX-XXX
> > Description:
> > WMI ADAP was unable to process the .NET CLR Networking performance library
> > since one of the data blobs reported to have classes but had zero size
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > SECURITY EVENT LOG - [[several repeated warnings since 1/16]]
> >
> > Event Type: Failure Audit
> > Event Source: Security
> > Event Category: Policy Change
> > Event ID: 615
> > Date: 1/18/2006
> > Time: 1:06:04 PM
> > User: NT AUTHORITY\NETWORK SERVICE
> > Computer: XXX-XXXXX-XXX
> > Description:
> > IPSec Services: IPSec Services failed to get the complete list of network
> > interfaces on the machine. This can be a potential security hazard to the
> > machine since some of the network interfaces may not get the protection as
> > desired by the applied IPSec filters. Please run IPSec monitor snap-in to
> > further diagnose the problem.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > SYSTEM EVENT LOG
> >
> > Event Type: Error [[I don't recall being in safe mode]]
> > Event Source: DCOM
> > Event Category: None
> > Event ID: 10005
> > Date: 1/16/2006
> > Time: 12:48:11 PM
> > User: NT AUTHORITY\SYSTEM
> > Computer: XXX-XXXXX-XXX
> > Description:
> > DCOM got error "This service cannot be started in Safe Mode " attempting
> > to
> > start the service EventSystem with arguments "" in order to run the
> > server:
> > {1BE1F766-5536-11D1-B726-00C04FB926AF}
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > Event Type: Warning [[several of these in past few days]]
> > Event Source: Tcpip
> > Event Category: None
> > Event ID: 4226
> > Date: 1/17/2006
> > Time: 11:59:35 PM
> > User: N/A
> > Computer: XXX-XXXXX-XXX
> > Description:
> > TCP/IP has reached the security limit imposed on the number of concurrent
> > TCP connect attempts.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> > Data:
> > 0000: 00 00 00 00 01 00 54 00 ......T.
> > 0008: 00 00 00 00 82 10 00 80 ....‚..€
> > 0010: 01 00 00 00 00 00 00 00 ........
> > 0018: 00 00 00 00 00 00 00 00 ........
> > 0020: 00 00 00 00 00 00 00 00 ........
> >
> >
> > Event Type: Error - several of these, the latest being 1/20
> > Event Source: DCOM
> > Event Category: None
> > Event ID: 10010
> > Date: 1/18/2006
> > Time: 5:27:53 PM
> > User: XXX-XXXXX-XXX\nancy
> > Computer: XXX-XXXXX-XXX
> > Description:
> > The server {F3A614DC-ABE0-11D2-A441-00C04F795683} did not register with
> > DCOM
> > within the required timeout.
> >
> > For more information, see Help and Support Center at
> > http://go.microsoft.com/fwlink/events.asp.
> >
> >
> > These have also been 10-15 'information' events in the past 4-5 days which
> > I
> > haven't seen before.
> >
> > Thank you for any help you can give me.
> >
> > sonsie
>
>
>
.

Relevant Pages

  • Re: Event Viewer Entries - Feedback Please
    ... Logon Failure: ... see Help and Support Center at ... > Event Source: Security ...
    (microsoft.public.windowsxp.general)
  • Re: problem sending event log errors
    ... > Event Type: Warning ... > Event Source: WinMgmt ... > A provider, HiPerfCooker_v1, has been registered in the WMI namespace, ... see Help and Support Center at ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Event Viewer Entries - Feedback Please
    ... Logon Failure: ... see Help and Support Center at ... > Event Source: Security ...
    (microsoft.public.windowsxp.help_and_support)
  • Re: Event Viewer Entries - Feedback Please
    ... Logon Failure: ... see Help and Support Center at ... > Event Source: Security ...
    (microsoft.public.windowsxp.network_web)
  • Re: problem sending event log errors
    ... A provider, HiPerfCooker_v1, has been registered in the WMI namespace, ... to use the LocalSystem account. ... provider may cause a security violation if it does not correctly impersonate ... see Help and Support Center at ...
    (microsoft.public.windowsxp.help_and_support)