Share via

IFsrmSetting.EnableScreeningAudit Property

  • Article

 

Retrieves or sets a value that determines whether FSRM keeps audit records of the file screen violations.

Namespace:   Microsoft.Storage
Assembly:  srmlib (in srmlib.dll)

Syntax

bool EnableScreeningAudit { get; set; }

property bool EnableScreeningAudit {
    bool get();
    void set(bool value);
}

abstract EnableScreeningAudit : bool with get, set

Property EnableScreeningAudit As Boolean

Property Value

Type: System.Boolean

A Boolean that is set to VARIANT_TRUE to maintain audit records for file screen events; otherwise, VARIANT_FALSE. The default is VARIANT_FALSE.

Remarks

The records are included in a File Screen Audit report. An audit record contains the following items:

  1. Folder path

  2. Id

  3. Blocked file group name

  4. File screen mode

  5. Time stamp of when the violation occurred

  6. The name of the process image that generated the prohibited IO, if available

  7. The SID of the user principal that issued the prohibited IO, if available

  8. The full path of the prohibited file

  9. The server name

If this property is false and a report specifies the FsrmReportType_FileScreenAudit report type, the report will succeed but will not contain any audit information (or will contain audits that were done before auditing was disabled).

For an example, see IFsrmSetting.

See Also

FsrmSetting
IFsrmSetting Interface
Microsoft.Storage Namespace

Return to top