DFS-R: Encrypted File Detection Monitor

  • ID:  Microsoft.Windows.FileServer.DFSR.EncryptedFileMonitor
  • Description:  This object monitors replication and creates a Warning alert if any files encrypted by using the Encrypting File System (EFS) are found in a replicated folder. DFS Replication doesn’t replicate files encrypted by EFS.
  • Target:  Replicated Folder
  • Enabled:  Yes

Operational States

Name State Description
FirstEventRaised Warning  
SecondEventRaised Success  

Alert Details

Monitor State Message Priority Severity Auto Resolution
FirstEventRaised (Warning) DFS-R: EFS-Encrypted File Found in a Replicated Folder Medium Warning Yes

Run As Profiles

Name
Default

Monitor Knowledgebase

Summary

This object monitors replication and creates a Warning alert if any files encrypted by using the Encrypting File System (EFS) are found in a replicated folder. It does so by looking for the presence of DFS Replication Event 4402. DFS Replication doesn’t replicate files encrypted by EFS.

Causes

An unhealthy state of this monitor indicates that DFS Replication found a file encrypted by EFS in a replicated folder. This can occur if a user used EFS to encrypt a file stored in a replicated folder.

Resolutions

Decrypt or remove the file

To replicate the file, decrypt it by using the Cipher /d <filename> command where <filename> is the path to the encrypted file. After the file is decrypted, it will replicate normally.

If the file should remain encrypted, move it out of the replicated folder, or decrypt it and then encrypt it by using a non-Microsoft encryption program that doesn’t set the FILE_ATTRIBUTE_ENCRYPTED attribute on the file.

External References
This monitor does not contain any external references.

See Also for Windows Server File & iSCSI Services Management Pack


Downloads for Windows Server File & iSCSI Services Management Pack

AZURE OPTIMIZATION ASSESSMENT GET STARTED
MIGRATION TO AZURE GET STARTED
SYSTEM CENTER MIGRATION TO AZURE GET STARTED
MIGRATION TO AZURE FOR SQL AND WINDOWS 2008 GET STARTED