EventID 63

  • Thread starter Thread starter NT Authoritysystem
  • Start date Start date
N

NT Authoritysystem

The Windows xp sp1 is a member in Windows NT 4.0 sp6
environment.
In the event viewer application log, everyday morning
5:00:22am, it gets 5-6 same warning messages in the same
time.
EventID 63
Source: winmgmt
User: NT Authority\system
A provider, sms_cimp has been registered in the WMI
namespace,
root\cimv2\sms, to use the Local System account. This
account is privileged and the provider may cause a
security violation if it does not correctly impersonate
user requests.

The other one
EventID 63
Source: winmgmt
User: NT Authority\system
A provider, sms_cimpv2 has been registered in the WMI
namespace,
root\cimv2\sms, to use the Local System account. This
account is privileged and the provider may cause a
security violation if it does not correctly impersonate
user requests.

Could you suggest how to get rid of this warning message?

Thank you
 
When you say get rid of them, do you mean just ensure they don't show up??
Or What. Did you read the link which is shown in MMC when looking at the
Warning event. If details what the event is for and why it is shown.

Regards

Mike Bright MCP, MSP

e:[email protected]
 
Hi, Mike,

Thank you for starting your suggestion.

My question is what action (add SMSclisvrAcct& account to
WMI?)do I need to take to correct the Warning message or
ignore this message?

Please advise,

Regards,
 
They are simply Audit messages (as opposed to warnings) as such. Are you
connected to a domain or network??? Because these messages relate to SMS.

Regards

Mike Bright MCP, MSP

e:[email protected]
 
Hi, Mike,

The Windows XP machine (member of a domain) is connected
to a domain.
What do I need to do? Do I need add smsclisvrAcct&
account ( Local machine account)to WMI?

Thanks,

Regards,
 
Back
Top