Event ID 6 — File Screening Metadata Integrity
Applies To: Windows Server 2008 R2
.jpg)
To enforce file screening, the file screening minifilter driver uses configuration information that is stored in a metadata file. If there is a problem with this metadata file, the file screening minifilter driver cannot attach to the volume, and users might be able to save unauthorized files.
Event Details
| Product: | Windows Operating System |
| ID: | 6 |
| Source: | datascrn |
| Version: | 6.1 |
| Symbolic Name: | DATA_SCREEN_MSG_CORRUPT_METADATA |
| Message: | The screening minifilter driver failed to attach to volume "%2 (%3)" because the minifilter metadata on the volume is corrupt. While the minifilter is detached file screening enforcement and management will be unavailable on the volume. Attempt to restore the screening configuration metadata for this volume from backup. |
Resolve
Restore the file screening minifilter metadata from backup
Use your backup application to restore the information in the System Volume Information folder of each volume that is managed by File Server Resource Manager (FSRM). If you are unable to restore the volume configuration from a recent backup, or if restoring the volume configuration does not solve the problem, then the file screening configuration files that are stored in the System Volume Information folder of the volumes managed by File Server Resource Manager need to be deleted and created again.
Caution: Deleting the file screening configuration files that are stored in the System Volume Information folder of the volumes managed by File Server Resource Manager is a complex troubleshooting procedure that could jeopardize the integrity of other important configuration files stored in these folders. For this reason, this troubleshooting task requires assistance from Microsoft Customer Support Services (CSS). For information about how to contact CSS, see https://go.microsoft.com/fwlink/?LinkId=89446.
Verify
To verify that the metadata used by the file screening minifilter driver is correct, you must verify that the file screening minifilter driver is attached to the volume.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To verify that the file screening minifilter driver is attached to the volume:
- Open an elevated command prompt. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type fltmc instances and press ENTER. The file screening minifilter driver is attached to the volume if there is a Datascrn instance listed for the volume.