Event ID 11 — File Screening Minifilter Driver Integrity
Applies To: Windows Server 2008
.jpg)
For file screening enforcement to work, the file screening minifilter driver must be working properly, and it must be correctly attached to the volume. If the file screening minifilter driver is experiencing problems or is not correctly attached to the volume, users will be able to save unauthorized files.
Event Details
| Product: | Windows Operating System |
| ID: | 11 |
| Source: | datascrn |
| Version: | 6.0 |
| Symbolic Name: | DATA_SCREEN_MSG_SERVICE_CONFIG_MISSING |
| Message: | The screening minifilter driver was successfully attached to volume "%2 (%4)" but has not received file screen and file group definitions from the File Server Resource Manager service within %3 minutes. File screens will not be enforced on the volume and notifications will not be raised when blocked files are detected. Verify that the File Server Resource Manager service is running. |
Resolve
Restart the File Server Resource Manager service
You have to manually restart the File Server Resource Manager service.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To restart the File Server Resource Manager service:
- Open an elevated command prompt. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type net start srmsvc, and then press ENTER.
Verify
To verify that the file screening minifilter driver is working properly, you must verify that it is attached to the volume.
To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.
To verify that the file screening minifilter driver is attached to the volume:
- Open an elevated command prompt. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
- Type fltmc instances and press ENTER. The file screening minifilter driver is attached to the volume if there is a Datascrn instance listed for the volume.