WinMgt Error #5603



"A provider, OffProv10, has been registered in the WMI namespace,
Root\MSAPPS10, but did not specify the HostingModel property. This provider
will be run using the LocalSystem account. This account is privileged and
the provider may cause a security violation if it does not correctly
impersonate user requests. Ensure that provider has been reviewed for
security behavior and update the HostingModel property of the provider
registration to an account with the least privileges possible for the
required functionality."

Can anyone tell me what the above error message means? It appeared after I
tried a repair on my XP Office-Pro.

This might be a second problem. I am not sure. For some reason I have lost
the Microsoft Document Imaging file save and only have .tif save which
associates the file with MDI. I am unable to open the .tif with Photo Editor
or any other program that readily opens .tif. I can however scan a new file
selecting .tif my scanner program and readily opens as it should. I
attempted to correct the file association of .tif by using the Photo Editor
icon but it will not hold. The icon reverts back to the icon for Document
Imaging (which will not open a .tif file).

I hope I have posed my questions correctly. Thank you so much.

Dell 8200 with 2-80G HD (C = programs the second drive D&E).
Pentium 4-1.8 ghtz
Memory 1.5GB RAM.
OS = XP Pro up-to-date w/all available updates
XP PRO Office 2002 up-to-date w/all available updates

Wesley Vogel

Microsoft Office XP is 2002 is 10. Microsoft Office 2003 is 11. Microsoft
Office 2000 is 9.

OFFPRV10.EXE = Office Data Provider for WBEM
C:\Program Files\Common Files\Microsoft Shared\MSInfo\OFFPRV10.EXE

OFFPRV10.DLL = Office Data Provider Proxy/Stub
C:\Program Files\Common Files\Microsoft Shared\MSInfo\OFFPRV10.DLL

Event ID: 5603 occurs when you install Windows Server 2003 Service Pack 1 or
Windows XP Service Pack 2

Event Source: WinMgmt
Event ID: 5603
Ionut Marin (Last update 5/30/2005):
From a newsgroup post: "I was getting the same error too. The problem is
related to the security privileges not being set properly in WMI Management.
Go to Start -> Run, type wmimgmt.msc, right click "WMI Control (Local)", and
select Properties. Go to the Security tab; expand "Root”, and select RSOP.
Click Security and set the permissions as needed".

Hope this helps. Let us know.

MS-MVP Windows Shell/User



So sorry I am ignorant. I do what this poster says and get through the
Security tab and all permissions EXCEPT Special Permissions is checked. I do
not know what Special Permissions is and really do not understand what I am
attempting to do. Clicking on the Advanced tab it takes me to the
imformation regarding Special Permissions. I do not know what to do at this
point. The whitepaper 915148 says this is a result of loading Server 2003 or
Windows SP2. I did not load either and my OS is XP-PRO (SP2). It is an OEM
version but it came with SP2. There was no upgrade to my knowledge. What do
I need to understand? I am so confused.

Also, within the Security/Advanced tab area as described in the fix
"inherited from" the system administrator says "not inherited" which is the
same with the Administrator account I want to fix. I have had multiple
issues and multiple contacts with MS. One tech had me delete the
Administrator. Immediately after I posted my situation I realized I was
wrong regarding when this problem occurred. I really do not know when it
began and cannot trace back to it. Since my initial problem that is waaaay
too lenghty to get into I am a hawk on my event viewer but learning how to
deal with any isues.

Thank you so much for helping this ignorant 60 year old.

In any case, when I cancel (I did not make any change)

Wesley Vogel

Ignore Event ID 5603, it's a warning. I do not think that the MS Office
team was on the same page as the XP security team.

1. Event 5603
Based on my research, this is a by-design behavior. The reasoning behind
the warning is that the operating system informs the administrators that a
WMI provider runs under the LocalSystem context. This is the reason why we
see this warning anytime the WMI service starts up.

Actually, this does not indicate a system error. We can safely ignore the
event. Please do not worry.
Jenny Wu
Microsoft CSS Online Newsgroup Support

Hope this helps. Let us know.

MS-MVP Windows Shell/User


Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments. After that, you can post your question and our members will help you out.

Ask a Question