Changed files (ownership) (Windows)

Module: File Watch

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports ownership changes that affect files and subfolders within the folders that are watched.

The following table lists the error messages for the check.

Table: Error messages for Changed files (ownership)

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_DIFF_OWN

Category: Policy Compliance

  • Windows 2000 (45933)

  • Windows 2003 (215333)

  • Windows 2008 (215833)

  • Windows Vista (215533)

  • Windows XP (49133)

Title: File ownership modified

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_GREEN

Category: Policy Compliance

  • Windows 2000 (45950)

  • Windows 2003 (215350)

  • Windows 2008 (215850)

  • Windows Vista (215550)

  • Windows XP (49150)

Title: File ownership modified (Green level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_YELLOW

Category: Policy Compliance

  • Windows 2000 (45951)

  • Windows 2003 (215351)

  • Windows 2008 (215851)

  • Windows Vista (215551)

  • Windows XP (49151)

Title: File ownership modified (Yellow level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_DIFF_OWN_RED

Category: Policy Compliance

  • Windows 2000 (45952)

  • Windows 2003 (215352)

  • Windows 2008 (215852)

  • Windows Vista (215552)

  • Windows XP (49152)

Title: File ownership modified (Red level)

Description:The file's ownership changed after the last snapshot update. If the change is authorized, update the snapshot. If it is not authorized, restore ownership to the previous owner.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]