FsrmSettingClass.EnableScreeningAudit Property
Retrieves or sets a value that determines whether FSRM keeps audit records of the file screen violations.
Namespace: Microsoft.Storage
Assembly: srmlib (in srmlib.dll)
Syntax
public virtual bool EnableScreeningAudit { get; set; }
public:
property bool EnableScreeningAudit {
virtual bool get();
virtual void set(bool value);
}
abstract EnableScreeningAudit : bool with get, set
override EnableScreeningAudit : bool with get, set
Public Overridable Property EnableScreeningAudit As Boolean
Property Value
Type: System.Boolean
Set to true to maintain audit records for file screen events; otherwise, false. The default is false.
Implements
IFsrmSetting.EnableScreeningAudit
Remarks
The records are included in a File Screen Audit report. An audit record contains the following items:
Folder path
Id
Blocked file group name
File screen mode
Time stamp of when the violation occurred
The name of the process image that generated the prohibited IO, if available
The SID of the user principal that issued the prohibited IO, if available
The full path of the prohibited file
The server name
If this property is false and a report specifies the FsrmReportType_FileScreenAudit report type, the report will succeed but will not contain any audit information (or will contain audits that were done before auditing was disabled).
See Also
FsrmSettingClass Class
Microsoft.Storage Namespace
Return to top