Share via

FsrmSettingClass.EnableScreeningAudit Property

  • Article

 

Retrieves or sets a value that determines whether FSRM keeps audit records of the file screen violations.

Namespace:   Microsoft.Storage
Assembly:  srmlib (in srmlib.dll)

Syntax

public virtual bool EnableScreeningAudit { get; set; }

public:
property bool EnableScreeningAudit {
    virtual bool get();
    virtual void set(bool value);
}

abstract EnableScreeningAudit : bool with get, set
override EnableScreeningAudit : bool with get, set

Public Overridable Property EnableScreeningAudit As Boolean

Property Value

Type: System.Boolean

Set to true to maintain audit records for file screen events; otherwise, false. The default is false.

Implements

IFsrmSetting.EnableScreeningAudit

Remarks

The records are included in a File Screen Audit report. An audit record contains the following items:

  1. Folder path

  2. Id

  3. Blocked file group name

  4. File screen mode

  5. Time stamp of when the violation occurred

  6. The name of the process image that generated the prohibited IO, if available

  7. The SID of the user principal that issued the prohibited IO, if available

  8. The full path of the prohibited file

  9. The server name

If this property is false and a report specifies the FsrmReportType_FileScreenAudit report type, the report will succeed but will not contain any audit information (or will contain audits that were done before auditing was disabled).

See Also

FsrmSettingClass Class
Microsoft.Storage Namespace

Return to top