Event ID: 5603 occurs when you install Windows Server 2003 Service Pack 1, Windows XP Service Pack 2, or Windows XP Service Pack 3

Article translations Article translations
Article ID: 915148 - View products that this article applies to.
Expand all | Collapse all

INTRODUCTION

After you install Windows Server 2003 Service Pack 1, Windows XP Service Pack 2, or Windows XP Service Pack 3, the following Windows Management Warning event may be logged in the Application event log:

Event Type: Warning
Event Source: WinMgmt
Event ID: 5603
User: NT AUTHORITY\SYSTEM
Description:
A provider, Rsop Planning Mode Provider, has been registered in the WMI namespace, root\RSOP, but did not specify the HostingModel property. This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality.

MORE INFORMATION

This event occurs because the Windows Management infrastructure notifies users that any provider that runs under the Local System account is a potential security risk. Because the Resultant Set of Policy (RSoP) provider runs under the Local System account, this event is expected.

RSoP data is used only for monitoring and diagnostic purposes. No known security implications exist when the RSoP provider runs under the Local System account.

Properties

Article ID: 915148 - Last Review: June 16, 2008 - Revision: 2.0
APPLIES TO
  • Microsoft Windows Server 2003 Service Pack 1
  • Microsoft Windows XP Service Pack 2
  • Microsoft Windows XP Service Pack 3
Keywords: 
kbhowto kbinfo KB915148

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com