Event Viewer after SP3

[powerwalk]

After installing SP3 on my three computers, two desktops, 2002 XP Home and

2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event Viewers show under

the heading Application, the Warnings I’ve listed below. After checking the

Event ID site, I found there is no Event 5603. Are these items a potential

problem.



Also, a month ago after an critical update, I've been getting a Service

Control Manager Error, Event 7000, The adfs service failed to start due to

the following error:

The system cannot find the file specified. This under the heading

System, and on all three computers.



Other than the above no other problem has surfaced after this update. Any

input would be appreciated.



Event 5603

Source WinMgmt



A provider, Rsop Planning Mode Provider, has been registered in the WMI

namespace, root\RSOP, but did not specify the HostingModel property. This

provider will be run using the LocalSystem account. This account is

privileged and the provider may cause a security violation if it does not

correctly impersonate user requests. Ensure that provider has been reviewed

for security behavior and update the HostingModel property of the provider

registration to an account with the least privileges possible for the

required functionality.





Event 63

Source WinMgmt



A provider, HiPerfCooker_v1, has been registered in the WMI namespace,

Root\WMI, to use the LocalSystem account. This account is privileged and the

provider may cause a security violation if it does not correctly impersonate

user requests.

 

[Doug W.]

Seems to me I had something like that after I installed SP3 ages

ago but can't remember what it was all about. Anyway, if you get

no answers here, just google it and see what it says. I believe

that is what I did and I have had no problem since.



I know that is not much help but what the hay, I'm old.

===



"powerwalk" wrote in

message

news:F57B31FF-C870-4BDF-ACD8-56C78C943AEB@microsoft.com...

> After installing SP3 on my three computers, two desktops, 2002

> XP Home and

> 2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event

> Viewers show under

> the heading Application, the Warnings I’ve listed below.

> After checking the

> Event ID site, I found there is no Event 5603. Are these

> items a potential

> problem.

>

> Also, a month ago after an critical update, I've been getting

> a Service

> Control Manager Error, Event 7000, The adfs service failed to

> start due to

> the following error:

> The system cannot find the file specified. This under the

> heading

> System, and on all three computers.

>

> Other than the above no other problem has surfaced after this

> update. Any

> input would be appreciated.

>

> Event 5603

> Source WinMgmt

>

> A provider, Rsop Planning Mode Provider, has been registered

> in the WMI

> namespace, root\RSOP, but did not specify the HostingModel

> property. This

> provider will be run using the LocalSystem account. This

> account is

> privileged and the provider may cause a security violation if

> it does not

> correctly impersonate user requests. Ensure that provider has

> been reviewed

> for security behavior and update the HostingModel property of

> the provider

> registration to an account with the least privileges possible

> for the

> required functionality.

>

>

> Event 63

> Source WinMgmt

>

> A provider, HiPerfCooker_v1, has been registered in the WMI

> namespace,

> Root\WMI, to use the LocalSystem account. This account is

> privileged and the

> provider may cause a security violation if it does not

> correctly impersonate

> user requests.

>

>

>

 

[glee]

"powerwalk" wrote in message

news:F57B31FF-C870-4BDF-ACD8-56C78C943AEB@microsoft.com...

> After installing SP3 on my three computers, two desktops, 2002 XP Home

> and

> 2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event Viewers show

> under

> the heading Application, the Warnings I’ve listed below. After

> checking the

> Event ID site, I found there is no Event 5603. Are these items a

> potential

> problem.

>

> Also, a month ago after an critical update, I've been getting a

> Service

> Control Manager Error, Event 7000, The adfs service failed to start

> due to

> the following error:

> The system cannot find the file specified. This under the heading

> System, and on all three computers.

>

> Other than the above no other problem has surfaced after this update.

> Any

> input would be appreciated.

>

> Event 5603

> Source WinMgmt

>

> A provider, Rsop Planning Mode Provider, has been registered in the

> WMI

> namespace, root\RSOP, but did not specify the HostingModel property.

> This

> provider will be run using the LocalSystem account. This account is

> privileged and the provider may cause a security violation if it does

> not

> correctly impersonate user requests. Ensure that provider has been

> reviewed

> for security behavior and update the HostingModel property of the

> provider

> registration to an account with the least privileges possible for the

> required functionality.

>

>

> Event 63

> Source WinMgmt

>

> A provider, HiPerfCooker_v1, has been registered in the WMI namespace,

> Root\WMI, to use the LocalSystem account. This account is privileged

> and the

> provider may cause a security violation if it does not correctly

> impersonate

> user requests.





Event ID: 5603 occurs when you install Windows Server 2003 Service Pack

1, Windows XP Service Pack 2, or Windows XP Service Pack 3

http://support.microsoft.com/kb/915148



HiPerfCooker...What does this warning mean?

http://forum.soft32.com/win3/warning-ftopict36064.html



The adfs error is due to having a reference in the Registry for this

service, but you do not have (or need) the service. The event entry is

nothing to worry about, and neither are the other two above.



The adfs error can be removed by going to this key in the Registry:

HKLM\SYSTEM\CurrentControlSet\Services

and deleting the sub-key named adfs



--

Glen Ventura, MS MVP Oct. 2002 - Sept. 2009

A+

http://dts-l.net/

 

[PA Bear [MS MVP]]

What Glee said.



Why did it take nearly 2 years to get SP3 installed?



What anti-virus application or security suite is installed on the computers

and is your subscription current? What anti-spyware applications (other

than Defender)? What third-party firewall (if any)? Were any of these

applications running in the background when you installed SP3?



Has a(another) Norton or McAfee application ever been installed on the

computers (e.g., a free-trial version that came preinstalled when you bought

it)?

--

~Robear Dyer (PA Bear)

MS MVP-IE, Mail, Security, Windows Client - since 2002





powerwalk wrote:

> After installing SP3 on my three computers, two desktops, 2002 XP Home and

> 2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event Viewers show

> under

> the heading Application, the Warnings I’ve listed below. After checking

> the

> Event ID site, I found there is no Event 5603. Are these items a

> potential

> problem.

>

> Also, a month ago after an critical update, I've been getting a Service

> Control Manager Error, Event 7000, The adfs service failed to start due to

> the following error:

> The system cannot find the file specified. This under the heading

> System, and on all three computers.

>

> Other than the above no other problem has surfaced after this update. Any

> input would be appreciated.

>

> Event 5603

> Source WinMgmt

>

> A provider, Rsop Planning Mode Provider, has been registered in the WMI

> namespace, root\RSOP, but did not specify the HostingModel property. This

> provider will be run using the LocalSystem account. This account is

> privileged and the provider may cause a security violation if it does not

> correctly impersonate user requests. Ensure that provider has been

> reviewed

> for security behavior and update the HostingModel property of the provider

> registration to an account with the least privileges possible for the

> required functionality.

>

>

> Event 63

> Source WinMgmt

>

> A provider, HiPerfCooker_v1, has been registered in the WMI namespace,

> Root\WMI, to use the LocalSystem account. This account is privileged and

> the provider may cause a security violation if it does not correctly

> impersonate user requests.

 

[powerwalk]

Thank you to all who answered.



Glen--thanks for your input. I will remove this key from the Registry



Also, thanks Doug.



Pa Bear--early in the release of this Service Pack there were a few

glitches--one of my computers had the AMD chip that was problematic, two of

the computers had Realtek audio drivers for which there was no update and

SP3 caused loss of sound for many, and some lost their networking.



So, in answer to your question: "Why did I wait two years?" I subscribe to

the adage, if it ain't broke, don't fix it. The April cutoff date for

additional critical updates from Microsoft forced me to attempt the

installation.





"powerwalk" wrote:



> After installing SP3 on my three computers, two desktops, 2002 XP Home and

> 2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event Viewers show under

> the heading Application, the Warnings I’ve listed below. After checking the

> Event ID site, I found there is no Event 5603. Are these items a potential

> problem.

>

> Also, a month ago after an critical update, I've been getting a Service

> Control Manager Error, Event 7000, The adfs service failed to start due to

> the following error:

> The system cannot find the file specified. This under the heading

> System, and on all three computers.

>

> Other than the above no other problem has surfaced after this update. Any

> input would be appreciated.

>

> Event 5603

> Source WinMgmt

>

> A provider, Rsop Planning Mode Provider, has been registered in the WMI

> namespace, root\RSOP, but did not specify the HostingModel property. This

> provider will be run using the LocalSystem account. This account is

> privileged and the provider may cause a security violation if it does not

> correctly impersonate user requests. Ensure that provider has been reviewed

> for security behavior and update the HostingModel property of the provider

> registration to an account with the least privileges possible for the

> required functionality.

>

>

> Event 63

> Source WinMgmt

>

> A provider, HiPerfCooker_v1, has been registered in the WMI namespace,

> Root\WMI, to use the LocalSystem account. This account is privileged and the

> provider may cause a security violation if it does not correctly impersonate

> user requests.

>

>

>

 

[PA Bear [MS MVP]]

Resolutions for both SP3 issues were available within a few weeks of the

release of SP3 and well before SP3 was released to Automatic Updates.



Furthermore, MS was offering no-charge support for SP3 installation and

post-installation issues from 14 April 2008 thru May 2009.



PS: The "cutoff date" for WinXP SP2 is 10 Jul-10. 13 Apr-10 is the "cutoff

date" for Vista Gold/RTM.





powerwalk wrote:



> Pa Bear--early in the release of this Service Pack there were a few

> glitches--one of my computers had the AMD chip that was problematic, two

> of

> the computers had Realtek audio drivers for which there was no update and

> SP3 caused loss of sound for many, and some lost their networking.

>

> So, in answer to your question: "Why did I wait two years?" I subscribe to

> the adage, if it ain't broke, don't fix it. The April cutoff date for

> additional critical updates from Microsoft forced me to attempt the

> installation.

>

> "powerwalk" wrote:

>> After installing SP3 on my three computers, two desktops, 2002 XP Home

>> and

>> 2007 XP Pro, and a 2008 laptop XP Pro, I notice the Event Viewers show

>> under the heading Application, the Warnings I’ve listed below. After

>> checking the Event ID site, I found there is no Event 5603. Are these

>> items a potential problem.

>>

>> Also, a month ago after an critical update, I've been getting a Service

>> Control Manager Error, Event 7000, The adfs service failed to start due

>> to

>> the following error:

>> The system cannot find the file specified. This under the heading

>> System, and on all three computers.

>>

>> Other than the above no other problem has surfaced after this update. Any

>> input would be appreciated.

>>

>> Event 5603

>> Source WinMgmt

>>

>> A provider, Rsop Planning Mode Provider, has been registered in the WMI

>> namespace, root\RSOP, but did not specify the HostingModel property.

>> This

>> provider will be run using the LocalSystem account. This account is

>> privileged and the provider may cause a security violation if it does not

>> correctly impersonate user requests. Ensure that provider has been

>> reviewed for security behavior and update the HostingModel property of

>> the

>> provider registration to an account with the least privileges possible

>> for

>> the required functionality.

>>

>>

>> Event 63

>> Source WinMgmt

>>

>> A provider, HiPerfCooker_v1, has been registered in the WMI namespace,

>> Root\WMI, to use the LocalSystem account. This account is privileged and

>> the provider may cause a security violation if it does not correctly

>> impersonate user requests.