| Event Id | 5603 |
| Source | WinMgmt |
| Description | A provider Rsop Planning Mode Provider has been registered in the WMI namespace root\RSOP but did not specify the HostingModel property. |
| Event Information | Following Information from Newsgroup may help: This provider will be run using the LocalSystem account. This account is privileged and the provider may cause a security violation if it does not correctly impersonate user requests. Cause: This may occur because of security. Ensure that provider has been reviewed for security behavior and update the HostingModel property of the provider registration to an account with the least privileges possible for the required functionality. Workaround: its the security privileges not being set properly in WMI Management.To do this ,Follow this instruction Go to Start>Run, type wmimgmt.msc, right click "WMI Control (Local)", select Properties. Go to the security tab, expand "Root" and select RSOP. Click Security and set permissions as needed. |
| Reference Links |
Catch threats immediately
We work side-by-side with you to rapidly detect cyberthreats
and thwart attacks before they cause damage.