WMI Warnings in EventVwr

myITforum.com Community Forum

Home Forums Blogs Live Support chat Search Articles Wiki FAQ Email Lists Register Login My Profile Inbox Address Book My Subscription My Forums

Photo Gallery Member List Search Calendars FAQ Ticket List Log Out

All Forums RSS Feed Subscription:

WMI Warnings in EventVwr

View related threads: (in this forum | in all forums)

Logged in as: Guest

Printable Version

All Forums >> [Management Products] >> System Center Products >> System Center Configuration Manager >> WMI Warnings in EventVwr

Page: [1]

Message

<< Older Topic Newer Topic >>

WMI Warnings in EventVwr - 9/18/2008 4:41:29 AM

vrovira

Posts: 11
Score: 0
Joined: 3/10/2006
Status: offline

Hello,

we are deploying SCCM SP1 client to Windows XP SP2 computers with the LocalSystem account (by default in SCCM) . After the client is installed, every time a computer is restarted or comes from an hibernation status, there are 2 entry's in the Event Viewer referenced to WMI:

Warning 63: A provider XXX, has been registered in the WMI namespace , root\cimv2\sms, to use the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Warning 5603: A provider XXX, has been registered in the WMI namespace root\wmi, but did not specify the HostingModel property. This provider will run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensuire that the provider has been reviewed for security behaviour and update the HostingModel Property of the provider registration account with the least privileges possible for the required functionality.

I know those warning messages are "normal" because they're created for auditing purposes by SCCM, but is there any method or solution to avoid those messages to appear in the Event Viewer?

Thanks in advance,
Vince