File and folder ownership (Windows)

Module: File Attributes

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports a problem if the current file or folder owner does not match the owner specified in the template.

The following table lists the error messages for the check.

Table: Error messages for File and folder ownership

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMT_FILEAT_OWNER_MMAT

Category: Policy Compliance

  • Windows 2000 (105531)

  • Windows 2003 (205531)

  • Windows 2008 (248531)

  • Windows Vista (228531)

  • Windows XP (200531)

Title: Different file ownership

Description:The file owner does not match the template. If the owner is authorized, update the template. If the owner is not authorized, correct the file owner, then run the Changed file (signature) check.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: true

Information Field Format: [%s]

String ID: ESMT_FOLDERAT_OWNER_MMAT

Category: Policy Compliance

  • Windows 2000 (105554)

  • Windows 2003 (205554)

  • Windows 2008 (248554)

  • Windows Vista (228554)

  • Windows XP (200554)

Title: Different folder ownership

Description:The folder owner does not match the template. If the owner is authorized, update the template. If the owner is not authorized, correct the folder owner.

Severity: yellow-1

Correctable: true

Snapshot Updatable: false

Template Updatable: true

Information Field Format: [%s]

String ID: ESMT_FILEAT_OWNER_NOT_FOUND

Category: Policy Compliance

  • Windows 2000 (105552)

  • Windows 2003 (205552)

  • Windows 2008 (248552)

  • Windows Vista (228552)

  • Windows XP (200552)

Title: Specified owner not found

Description:The file's owner does not match the owner that is specified in the File template and the owner that is specified in the template does not exist. If the current owner is authorized, manually update the template. If the current owner is not authorized, restore the owner's user account and file ownership, then run the Changed file (signature) check.

Severity: yellow-1

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: ESMT_EVENT_LOG_INFO

Category: Policy Compliance

  • Windows 2000 (105559)

  • Windows 2003 (205559)

  • Windows 2008 (248559)

  • Windows Vista (228559)

  • Windows XP (200559)

Title: File or folder Event Log Entry

Description:An entry in the Security Audit Event Log occurred for this file or folder.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]