Event ID: 5603

Event Type: Warning
Event Source: Winmgmt
Event Type: None
Event ID: 5603
Date: 2009-2-26
Event: 13:24:58
User: nt authority \ System
COMPUTER: IBMX3650-SRV1
Description:
ProvideProgramRsop planning mode provider has been registered in the WMI namespace Root \ rsop, but the hostingmodel attribute is not specified. This provider runs with the LocalSystem account. This account is granted privileges, so this provider may cause security conflicts if user requests are not properly simulated. Check this provider to ensure security, and update the hostingmodel property registered by the provider to an account with the lowest privilege to execute the necessary functions.

For more information, see Help and Support Center in http://go.microsoft.com/fwlink/events.asp.

----------------------------------------------------------------

Solution:

Set "Resultant Set of Policy Provider" (Service name RSoPProv) as a network user (such as nt authority \ NetworkService ).