Security options (Windows)

Module: Active Directory

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports a problem if a security setting is not set to the value specified in the template. Enable the check by selecting one or more templates.

The following table lists the error messages for the check.

Table: Error messages for Security options

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESM_SECURITY_OPTION_VIOLATION_G

Category: Policy Compliance

  • Windows 2000 (108144)

  • Windows 2003 (208144)

  • Windows 2008 (251144)

  • Windows Vista (231144)

  • Windows XP (203144)

Title: Security option setting violates policy

Description:The values defined for this security option are out of compliance with the values expected by the explicit policy. The security option needs to be changed on the system or the policy specification needs to be changed in the template.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SECURITY_OPTION_VIOLATION_Y

Category: Policy Compliance

  • Windows 2000 (108145)

  • Windows 2003 (208145)

  • Windows 2008 (251145)

  • Windows Vista (231145)

  • Windows XP (203145)

Title: Security option setting violates policy

Description:The values defined for this security option are out of compliance with the values expected by the explicit policy. The security option needs to be changed on the system or the policy specification needs to be changed in the template.

Severity: yellow-2

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SECURITY_OPTION_VIOLATION_R

Category: Policy Compliance

  • Windows 2000 (108146)

  • Windows 2003 (208146)

  • Windows 2008 (251146)

  • Windows Vista (231146)

  • Windows XP (203146)

Title: Security option setting violates policy

Description:The values defined for this security option are out of compliance with the values expected by the explicit policy. The security option needs to be changed on the system or the policy specification needs to be changed in the template.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESM_SEC_OPT_TEMPLATE_MISSING

Category: Policy Compliance

  • Windows 2000 (108147)

  • Windows 2003 (208147)

  • Windows 2008 (251147)

  • Windows Vista (231147)

  • Windows XP (203147)

Title: No Security Option template files were specified

Description:The "Security Options" check was run without any template files selected. No security checks were performed. Check your policy to ensure that at least one template file is enabled for the agent's operating system.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]