Small Business Susan

Event 5603 in your event logs?

Got an Event 5603? 


Event Type: Warning
Event Source: WinMgmt
Event Category: None
Event ID: 5603
Date:  3/26/2007
Time:  10:14:01 AM
User:  NT AUTHORITY\SYSTEM
Computer: DOMAIN
Description:
A provider, PerfProv, has been registered in the WMI namespace, ROOT\CIMV2\MicrosoftHealthMonitor\PerfMon, but did not specify the HostingModel property.  This provider will be run using the LocalSystem account.  This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.  Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.  


For more information, see Help and Support Center at http://go.microsoft.com/fwlink/events.asp.

Review this:


EventID.Net:
http://www.eventid.net/display.asp?eventid=5603&eventno=4431&source=WinMgmt&phase=1

Sounds like this:


Event ID: 5603 occurs when you install Windows Server 2003 Service Pack 1 or Windows XP Service Pack 2:
http://support.microsoft.com/default.aspx?scid=kb;en-us;915148