Entitlement folders and shares (Windows)

Module: File System Entitlement

Supported Platforms: Windows 2000, Windows 2003, Windows 2008

This option lets you enable and disable the File System Entitlement templates that will be used by this module. Available templates will be listed in the Enabled and Disabled lists. The template files are used to specify folder and share paths, as well as details such as the type of permissions to be reported.

The following table lists the error messages for the check.

Table: Error messages for Entitlement folders and shares

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: FE_FOLDER_PERMS

Category: ESM Error

  • Windows 2000 (109853)

  • Windows 2003 (209853)

  • Windows 2008 (252853)

Title: Folder effective permissions

Description:The specified user has the listed effective permissions for the folder. These permissions are those available to the user when the folder is accessed locally, and do not take into account any share permissions. If the user inherits these permissions, then the inheritance trail to the group granting the permissions is also displayed.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_SHARE_PERMS

Category: ESM Error

  • Windows 2000 (109854)

  • Windows 2003 (209854)

  • Windows 2008 (252854)

Title: Share effective permissions

Description:The specified user has the listed effective permissions for the share. These permissions do not take into account any local permission the user may have to folders on the share. If the user inherits these permissions, then the inheritance trail to the group granting the permissions is also displayed.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_TOTAL_PERMS

Category: ESM Error

  • Windows 2000 (109855)

  • Windows 2003 (209855)

  • Windows 2008 (252855)

Title: Total effective permissions

Description:The specified user has the listed total effective permissions for the folder. These permissions are those available to the user when the folder is accessed through the reported share. If the user inherits these permissions, then the inheritance trail to the group granting the permissions is also displayed.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_MACHINE_PERMS

Category: ESM Error

  • Windows 2000 (109856)

  • Windows 2003 (209856)

  • Windows 2008 (252856)

Title: Machine permissions

Description:The specified user has the listed machine permissions on the machine being scanned. If the user inherits these permissions, then the inheritance trail to the group granting the permissions is also displayed.

Severity: green-0

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_SHARE_DENIED

Category: ESM Error

  • Windows 2000 (109858)

  • Windows 2003 (209858)

  • Windows 2008 (252858)

Title: Access denied to share

Description:The ESM agent does not have access to the share reported in the name field.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_NOTEMPLATES

Category: ESM Error

  • Windows 2000 (109859)

  • Windows 2003 (209859)

  • Windows 2008 (252859)

Title: No template files specified

Description:The File System Entitlement module was run without any template files. No entitlement checks were performed. Check your policy to ensure that at least one template file is enabled for this agent's operating system and rerun the module.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_MACHINE_DENIED

Category: ESM Error

  • Windows 2000 (109860)

  • Windows 2003 (209860)

  • Windows 2008 (252860)

Title: Access denied to machine privileges

Description:The ESM agent does not have access to read machine privilege information for the privilege reported in the name field.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_SHARE_NOT_FOUND

Category: ESM Error

  • Windows 2000 (109862)

  • Windows 2003 (209862)

  • Windows 2008 (252862)

Title: Specified share not found

Description:The ESM agent does not have access to the share reported in the name field.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]

String ID: FE_FILE_NOT_FOUND

Category: ESM Error

  • Windows 2000 (109863)

  • Windows 2003 (209863)

  • Windows 2008 (252863)

Title: Specified file/folder not found

Description:Specified file/folder doesn't exist on agent.

Severity: red-4

Correctable: false

Snapshot Updatable: false

Template Updatable: false

Information Field Format: [%s]