RE: Perflib errors in event logs after SP2 installation



Hi Mlai,

Thanks for posting in our newsgroup.

From your description, I know that after you installed the SBS 2003 R2,
after logon the server prompted with ¡°The system cannot start as currently
configured. Using a previous configuration instead¡± but works fine. If I
am off-base, please don¡¯t hesitate to let me know.

Please check if the same massage will occur when you logon next time. If
the server works fine, please take it easy.

For the Event ID 5603, this event occurs because the Windows Management
infrastructure notifies users that any provider that runs under the Local
System account is a potential security risk. Because the Resultant Set of
Policy (RSoP) provider runs under the Local System account, this event is
expected.

The same Event ID will be produced after you apply Windows Server 2003 SP1
or Windows XP 2. That¡¯s expected behavior and please keep on monitoring
the server to see if the event will appear continually.

For the Event ID 2003, Event ID 1016, Event ID 47, please just keep on
monitoring the server to see all the components work fine. If they reappear
and the server has problem, please let me know. If they appear just this
time, please take easy to ignore it.

Hope above information help.

If you need further assistance, please don¡¯t hesitate to let me know.


Best regards,

Robert Li(MSFT)

Microsoft CSS Online Newsgroup Support

Get Secure! - www.microsoft.com/security

=====================================================

This newsgroup only focuses on SBS technical issues. If you have issues
regarding other Microsoft products, you'd better post in the corresponding
newsgroups so that they can be resolved in an efficient and timely manner.
You can locate the newsgroup here:
http://www.microsoft.com/communities/newsgroups/en-us/default.aspx

When opening a new thread via the web interface, we recommend you check the
"Notify me of replies" box to receive e-mail notifications when there are
any updates in your thread. When responding to posts via your newsreader,
please "Reply to Group" so that others may learn and benefit from your
issue.

Microsoft engineers can only focus on one issue per thread. Although we
provide other information for your reference, we recommend you post
different incidents in different threads to keep the thread clean. In doing
so, it will ensure your issues are resolved in a timely manner.

For urgent issues, you may want to contact Microsoft CSS directly. Please
check http://support.microsoft.com for regional support phone numbers.

Any input or comments in this thread are highly appreciated.

=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
<From: "mlai" <mlai@xxxxxxxxxxxxxxxx>
<Subject: Perflib errors in event logs after SP2 installation
<Date: Fri, 16 Mar 2007 00:23:07 +0800
<Lines: 86
<Message-ID: <63BDE3CF-BF4F-4B4D-981C-50F7447E1FFF@xxxxxxxxxxxxx>
<MIME-Version: 1.0
<Content-Type: text/plain;
< format=flowed;
< charset="iso-8859-1";
< reply-type=original
<Content-Transfer-Encoding: 7bit
<X-Priority: 3
<X-MSMail-Priority: Normal
<X-Newsreader: Microsoft Windows Mail 6.0.6000.16386
<X-MimeOLE: Produced By Microsoft MimeOLE V6.0.6000.16386
<X-MS-CommunityGroup-MessageCategory: {E4FCE0A9-75B4-4168-BFF9-16C22D8747EC}
<X-MS-CommunityGroup-PostID: {63BDE3CF-BF4F-4B4D-981C-50F7447E1FFF}
<Newsgroups: microsoft.public.windows.server.sbs
<Path: TK2MSFTNGHUB02.phx.gbl
<Xref: TK2MSFTNGHUB02.phx.gbl microsoft.public.windows.server.sbs:23103
<NNTP-Posting-Host: TK2MSFTNGHUB02.phx.gbl 127.0.0.1
<X-Tomcat-NG: microsoft.public.windows.server.sbs
<
<Seems the gurus gave this sp2 a go ahead for the sbs2003 so I went ahead
and
<updated my fully patched SBS2003 standard SP1 with the sp2.
<
<The installation went smoothly. But the problems came after the restart.
<When logging on locally at the console, the server responded with "The
<system cannot start as currently configured. Using a previous
configuration
<instead". But I logged on and everything seems fine.
<
<Next check the event logs, nothing much in the system log. However, in
the
<app logs, I see a lot of winmgmt and perflib warnings as below. What
should
<I do?
<
<Event ID 5603:
<A provider, Rsop Planning Mode Provider, has been registered in the WMI
<namespace, root\RSOP, but did not specify the HostingModel property. This
<provider will be run using the LocalSystem account. This account is
<privileged and the provider may cause a security violation if it does not
<correctly impersonate user requests. Ensure that provider has been
reviewed
<for security behavior and update the HostingModel property of the provider
<registration to an account with the least privileges possible for the
<required functionality.
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<A provider, PerfProv, has been registered in the WMI namespace,
<ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the
<HostingModel property. This provider will be run using the LocalSystem
<account. This account is privileged and the provider may cause a security
<violation if it does not correctly impersonate user requests. Ensure that
<provider has been reviewed for security behavior and update the
HostingModel
<property of the provider registration to an account with the least
<privileges possible for the required functionality.
<
<Perflib/Event ID 2003
<The configuration information of the performance library
<"C:\WINDOWS\system32\aspperf.dll" for the "ASP" service does not match the
<trusted performance library information stored in the registry. The
<functions in this library will not be treated as trusted.
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<Perflib/Event ID 1016
<The data buffer created for the "EXOLEDB" service in the "C:\Program
<Files\Exchsrvr\bin\exodbpc.dll" library is not aligned on an 8-byte
<boundary. This may cause problems for applications that are trying to read
<the performance data buffer. Contact the manufacturer of this library or
<service to have this problem corrected or to get a newer version of this
<library.
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<The data buffer created for the "IAS" service in the
<"C:\WINDOWS\System32\iasperf.dll" library is not aligned on an 8-byte
<boundary. This may cause problems for applications that are trying to read
<the performance data buffer. Contact the manufacturer of this library or
<service to have this problem corrected or to get a newer version of this
<library.
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<WinMgmt/Event ID 47
<WMI ADAP was unable to retrieve data from the PerfLib subkey:
<SYSTEM\CurrentControlSet\Services\Autocat\Performance\Library, error code:
<0x80041009
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<WMI ADAP was unable to retrieve data from the PerfLib subkey:
<SYSTEM\CurrentControlSet\Services\MSSEARCH\Performance\Library, error
code:
<0x80041009
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<WMI ADAP was unable to retrieve data from the PerfLib subkey:
<SYSTEM\CurrentControlSet\Services\MSSGatherer\Performance\Library, error
<code: 0x80041009
<
<For more information, see Help and Support Center at
<http://go.microsoft.com/fwlink/events.asp.
<
<

.



Relevant Pages

  • Re: Cannot start services
    ... | Computer: COUNTYG ... see Help and Support Center at ... | A provider, PerfProv, has been registered in the WMI namespace, ... | will be run using the LocalSystem account. ...
    (microsoft.public.windows.server.general)
  • Re: Perflib errors in event logs after SP2 installation
    ... the server does seem to be working fine. ... System account is a potential security risk. ... Policy provider runs under the Local System account, ... Microsoft CSS Online Newsgroup Support ...
    (microsoft.public.windows.server.sbs)
  • Re: Multiple Authentication Providers in One Site?
    ... If you use web application zones, you could have one provider (domain ... accounts) on an internal zone and then use the AspNetSql membership and ... your customer login with anonymous account and with few permission like ... Microsoft Online Community Support ...
    (microsoft.public.sharepoint.windowsservices)
  • Re: Error Event Logs after SP1 install
    ... Credentials for Dynamic DNS registrations may be ... see Help and Support Center at ... This provider will be run using the ... This account is privileged and the provider may ...
    (microsoft.public.windows.server.sbs)
  • Re: Renaming AD User Accounts using the WinNT Provider
    ... Rename the AD Username and Pre-Windows 2000 username with new ... Disable the account once it has been renamed. ... The distinguishedName of the object uniquely identifies the object, ... The first problem with your question is that the WinNT provider is blind to ...
    (microsoft.public.scripting.vbscript)