WSHA Client Remediation

Applies To: Windows Server 2008

Remediation refers to the act or process of correcting a client configuration or software state that is not compliant with network health requirements. If Network Access Protection (NAP) policies are configured for automatic remediation, the Windows Security Health Agent (WSHA) will attempt to modify the client configuration to bring it into compliance with network health requirements.

For the WSHA, remediation of a client computer configuration depends on health requirements specified by the Windows Security Health Validator (WSHV) and the access of client computers to resources required to update and maintain their configuration to meet requirements of the WSHV.

Events

Event ID Source Message

1000

Microsoft-Windows-SystemHealthAgent

The Microsoft Security System Health Agent detected a change in the status of %1

1009

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent completed a download of security updates.

1010

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent failed to complete a download of security updates.
Failure Code: %1

1011

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent completed an install of security updates.

1012

Microsoft-Windows-SystemHealthAgent

The Windows Security Health Agent failed to complete an install of security updates.
Failure Code: %1

1013

Microsoft-Windows-SystemHealthAgent

Automatic remediation for firewall succeeded. Windows Firewall was turned on successfully.

1014

Microsoft-Windows-SystemHealthAgent

Automatic remediation for firewall failed. Windows could not turn on Windows Firewall.
Failure Code: %1

1015

Microsoft-Windows-SystemHealthAgent

Automatic remediation for Automatic Updates succeeded. Automatic Updates was turned on successfully.

1016

Microsoft-Windows-SystemHealthAgent

Automatic remediation for Automatic Updates failed. Windows could not turn on Automatic Updates.
Failure Code: %1

1017

Microsoft-Windows-SystemHealthAgent

Automatic remediation for Windows Security Center service succeeded. Windows Security Center service was turned on successfully.

1018

Microsoft-Windows-SystemHealthAgent

Automatic remediation for Windows Security Center service failed. Windows could not turn on Windows Security Center service.
Failure Code: %1

1019

Microsoft-Windows-SystemHealthAgent

Automatic remediation for antispyware succeeded. Windows defender was turned on successfully.

1020

Microsoft-Windows-SystemHealthAgent

Automatic remediation for antispyware failed. Windows could not turn on Windows Defender.
Failure Code: %1

1021

Microsoft-Windows-SystemHealthAgent

Automatic remediation for antispyware signatures succeeded. Windows Defender signatures were updated successfully.

1022

Microsoft-Windows-SystemHealthAgent

Automatic remediation for antispyware signatures failed. Windows could not update signatures for Windows Defender.
Failure Code: %1

Windows Security Health Agent (WSHA)

NAP Infrastructure