Re: A provider, Offprov, has been registered?

From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 12/31/02


From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu>
Date: Tue, 31 Dec 2002 08:32:51 -0700

As long as you are comfortable with having MS Office (at
least in part) installed, then this is no big issue.

What you are seeing is an informative message from the
WMI system to let you know that some, potentially non-MS
and/or potentially dangerous (to security or privacy) code
has registered to be run within WMI with elevated privs.

In this case it is fine - but that does not mean it always is fine.

--
Roger Abell
MS MVP (Security, Windows), MCDBA,  MCSE both
Associate Expert - Windows XP ExpertZone
http://www.microsoft.com/windowsxp/expertzone
"Antonio" <tjq_99@hotmail.com> wrote in message
news:015d01c2b0be$d8d1fb30$8ef82ecf@TK2MSFTNGXA04...
> Hello and Happy New Year to all!
>
> I am using winxp home version, have builtin firewall in
> operation, Plus another software based firewall checkit.
> What does this warning  message mean from event viewer in
> admin for applications. Any help is greatly appreciated.
>
> 'A provider, OffProv, has been registered in the WMI
> namespace, Root\MSAPPS, to use the LocalSystem account.
> This account is privileged and the provider may cause a
> security violation if it does not correctly impersonate
> user requests.'
>
> Is it anything to be concerned about?  I hope not.  Thanks
> and stay away from pina colada's they catch up with you!!
>
> Tony


Relevant Pages

  • Re: Scary message in Event Viewer
    ... This is an informational message, from the WMI system, ... as a provider with WMI. ... to use the LocalSystem account. ... > Going to the link provided brought up a page saying Microsoft had no ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Warning WinMgmt 63
    ... > "A provider, HiPerfCooker_v1, has been registered in the ... > WMI namespace, Root\WMI, to use the LocalSystem account. ... > user requests." ... > "A provider, WMIProv, has been registered in the WMI ...
    (microsoft.public.windowsxp.security_admin)
  • Shared use of system account
    ... A provider, OffProv10, has been registered in the WMI ... namespace, Root\MSAPPS10, to use the LocalSystem account. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: SMS client Security related message
    ... I've seen related issues and believe this is a known WMI issue. ... Cross posting to the windowsxp.wmi newsgroup to see if anyone there ... to use the LocalSystem account. ... > and the provider may cuase a security violation if it does not correctly ...
    (microsoft.public.sms.admin)
  • Re: SMS client Security related message
    ... I've seen related issues and believe this is a known WMI issue. ... Cross posting to the windowsxp.wmi newsgroup to see if anyone there ... to use the LocalSystem account. ... > and the provider may cuase a security violation if it does not correctly ...
    (microsoft.public.windowsxp.wmi)