Re: SMS client Security related message

Tech-Archive recommends: Repair Windows Errors & Optimize Windows Performance

From: Luke Packard [MSFT] (lukep_at_online.microsoft.com)
Date: 12/08/04 

Date: Wed, 8 Dec 2004 14:25:36 -0800

I've seen related issues and believe this is a known WMI issue. Pretty sure
its just a generic warning about the risks of running stuff under local
system. Cross posting to the windowsxp.wmi newsgroup to see if anyone there
knows anything more. 

-- 
Luke Packard [MSFT]
SMS 2003 Technical FAQ:
http://www.microsoft.com/technet/prodtechnol/sms/sms2003/techfaq/default.mspx
This posting is provided "AS IS" with no warranties, and confers no rights.
"Marlon Brown" <marlon_brown@hotmail.com> wrote in message 
news:O6QOMIJ2EHA.2196@TK2MSFTNGP14.phx.gbl...
>I have the following message in the eventvwr of several XP client machines.
> I couldn't find previous posts on this.
>
> Does the message below indicates any problem ?
>
> Event ID:63
> Source:WinMgmt
> Category:None
> User:NT Authority\SYSTEM
>
> Description:
> A provider, SMS_CIMLD, has been registered in the WMI namespace,
> root\cimv2\SMS, to use the LocalSystem account. This account is privileged
> and the provider may cuase a security violation if it does not correctly
> impersonate user requests.
>
>

Relevant Pages

  • Re: Scary message in Event Viewer
    ... This is an informational message, from the WMI system, ... as a provider with WMI. ... to use the LocalSystem account. ... > Going to the link provided brought up a page saying Microsoft had no ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SMS client Security related message
    ... I've seen related issues and believe this is a known WMI issue. ... Cross posting to the windowsxp.wmi newsgroup to see if anyone there ... to use the LocalSystem account. ... > and the provider may cuase a security violation if it does not correctly ...
    (microsoft.public.sms.admin)
  • Re: Warning WinMgmt 63
    ... > "A provider, HiPerfCooker_v1, has been registered in the ... > WMI namespace, Root\WMI, to use the LocalSystem account. ... > user requests." ... > "A provider, WMIProv, has been registered in the WMI ...
    (microsoft.public.windowsxp.security_admin)
  • Re: A provider, Offprov, has been registered?
    ... WMI system to let you know that some, ... > 'A provider, OffProv, has been registered in the WMI ... > namespace, Root\MSAPPS, to use the LocalSystem account. ...
    (microsoft.public.windowsxp.security_admin)
  • Shared use of system account
    ... A provider, OffProv10, has been registered in the WMI ... namespace, Root\MSAPPS10, to use the LocalSystem account. ...
    (microsoft.public.windowsxp.security_admin)