Event ID 63 may be logged in the Application log after you install Windows Server 2008

Event ID 63 may be logged in the Application log after you install Windows Server 2008

Article ID : 952574
Last Review : May 12, 2008
Revision : 1.0

SYMPTOMS

After you install Windows Server 2008, an event ID 63 that resembles the following event may be logged in the Application log:

Log Name: Application
Source: WMI
Date:Date
Time:Time
Event ID: 63
Level: Warning
Description:
A provider, WmiPerfClass, has been registered in the Windows Management Instrumentation namespace root cimv2 to use the Local System account.

This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests.

Back to the top

CAUSE

This issue occurs because the Windows Management Instrumentation (WMI) provider host process runs under the privileged Local System account. Because the WmiPerfClass provider is a trusted source, you can safely ignore this event.

Back to the top

STATUS

This behavior is by design.

Back to the top


APPLIES TO
• Windows Server 2008 Datacenter without Hyper-V
• Windows Server 2008 Enterprise without Hyper-V
• Windows Server 2008 for Itanium-Based Systems
• Windows Server 2008 Standard without Hyper-V
• Windows Server 2008 Datacenter
• Windows Server 2008 Enterprise
• Windows Server 2008 Standard
• Windows Web Server 2008

Back to the top

Keywords: 
kbexpertiseinter kbtshoot kbprb KB952574

Back to the top

 

Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
Microsoft Corporation. All rights reserved. Terms of Use | Trademarks


You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

Leave a Reply

*
To prove that you're not a bot, enter this code
Anti-Spam Image