Event ID 7 — File Screening Minifilter Driver Integrity

Updated: January 27, 2011

Applies To: Windows Server 2008

red

For file screening enforcement to work, the file screening minifilter driver must be working properly, and it must be correctly attached to the volume. If the file screening minifilter driver is experiencing problems or is not correctly attached to the volume, users will be able to save unauthorized files.

Event Details

Product: Windows Operating System
ID: 7
Source: datascrn
Version: 6.0
Symbolic Name: DATA_SCREEN_MSG_ATTACH_FAILED
Message: The screening minifilter driver failed to attach to volume "%2 (%4)" because of an unexpected error. Error status: 0x%3 While the minifilter is detached screening enforcement and management will be unavailable on the volume. Attempt to reattach the minifilter by using the filter manager command line tool or by dismounting and remounting the volume as soon as possible. If the operation fails, try restarting the system.

Resolve

Reattach the file screening minifilter driver

You have to manually reattach the file screening minifilter driver to the volume.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To reattach the file screening minifilter driver to the volume:

  1. Open an elevated command prompt. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type fltmc attach datascrn volume:, where volume is the drive letter of the volume, and then press ENTER. For example:

    fltmc attach datascrn c:

Verify

To verify that the file screening minifilter driver is working properly, you must verify that it is attached to the volume.

To perform this procedure, you must have membership in Administrators, or you must have been delegated the appropriate authority.

To verify that the file screening minifilter driver is attached to the volume:

  1. Open an elevated command prompt. Click Start, point to All Programs, click Accessories, right-click Command Prompt, and then click Run as administrator.
  2. Type fltmc instances and press ENTER. The file screening minifilter driver is attached to the volume if there is a Datascrn instance listed for the volume.

Related Management Information

File Screening Minifilter Driver Integrity

File Services

Community Additions

ADD
Show: