File Screening Minifilter Driver Integrity
Applies To: Windows Server 2008
For file screening enforcement to work, the file screening minifilter driver must be working properly, and it must be correctly attached to the volume. If the file screening minifilter driver is experiencing problems or is not correctly attached to the volume, users will be able to save unauthorized files.
Events
| Event ID | Source | Message |
|---|---|---|
datascrn |
The screening minifilter driver failed to load. Error status: 0x%2 File screen enforcement and management will be unavailable on the system. To reload the minifilter use the filter manager command line tool. If the problem persists, try restarting your system. | |
datascrn |
The screening minifilter driver was unloaded outside the context of a system shutdown. Most likely this occurred as a result of a manual driver shutdown (not recommended) or as part of a screening minifilter driver upgrade. While the driver is unloaded file screening enforcement and management will be unavailable on the system. If still unloaded, reload the minifilter using the filter manager command line tool as soon as possible. | |
datascrn |
The screening minifilter driver was detached from volume "%2 (%3)". Most likely this occurred as a result of a manual minifilter detachment (not recommended) or as part of screening configuration or volume backup/restore. While the minifilter is detached file screens will not be enforced and file screening configuration cannot be changed. Attempt to reattach the minifilter by using the filter manager command line tool or by dismounting and remounting the volume as soon as possible. | |
datascrn |
The screening minifilter driver failed to attach to volume "%2 (%4)" because of an unexpected error. Error status: 0x%3 While the minifilter is detached screening enforcement and management will be unavailable on the volume. Attempt to reattach the minifilter by using the filter manager command line tool or by dismounting and remounting the volume as soon as possible. If the operation fails, try restarting the system. | |
datascrn |
The screening minifilter driver was successfully attached to volume "%2 (%4)" but has not received file screen and file group definitions from the File Server Resource Manager service within %3 minutes. File screens will not be enforced on the volume and notifications will not be raised when blocked files are detected. Verify that the File Server Resource Manager service is running. | |
datascrn |
The screening minifilter driver was successfully attached to volume "%2 (%3)" and has received file screen and file group definitions from the File Server Resource Manager service after a longer than expected delay. File screens will now be enforced on the volume and notifications will be raised when blocked files are detected. The delay is most likely a result of the machine experiencing heavy load. | |
datascrn |
The screening minifilter driver was successfully attached to volume "%2 (%3)" and has received file screen and file group definitions from the File Server Resource Manager service. File screens will now be enforced on the volume and notifications will be raised when blocked files are detected. |