Removed files (Windows)

Module: File Watch

Supported Platforms: Windows 2000, Windows 2003, Windows 2008, Windows Vista, Windows XP

This check reports files and subfolders that were removed from the watched folders after the last snapshot update.

The following table lists the error messages for the check.

Table: Error messages for Removed files

Message String ID and Category

Platform and Message Numeric ID

Message Title and Description

Additional Information

String ID: ESMM_REMOVED

Category: Policy Compliance

  • Windows 2000 (45932)

  • Windows 2003 (215332)

  • Windows 2008 (215832)

  • Windows Vista (215532)

  • Windows XP (49132)

Title: File or folder removed

Description:The file or folder was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or folder from a backup.

Severity: yellow-1

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_GREEN

Category: Policy Compliance

  • Windows 2000 (45947)

  • Windows 2003 (215347)

  • Windows 2008 (215847)

  • Windows Vista (215547)

  • Windows XP (49147)

Title: File or folder removed (Green level)

Description:The file or folder was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or folder from a backup.

Severity: green-0

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_YELLOW

Category: Policy Compliance

  • Windows 2000 (45948)

  • Windows 2003 (215348)

  • Windows 2008 (215848)

  • Windows Vista (215548)

  • Windows XP (49148)

Title: File or folder removed (Yellow level)

Description:The file or folder was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or folder from a backup.

Severity: yellow-2

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]

String ID: ESMM_REMOVED_RED

Category: Policy Compliance

  • Windows 2000 (45949)

  • Windows 2003 (215349)

  • Windows 2008 (215849)

  • Windows Vista (215549)

  • Windows XP (49149)

Title: File or folder removed (Red level)

Description:The file or folder was removed after the last snapshot update. If the removal is authorized, update the snapshot. If it is not authorized, restore the file or folder from a backup.

Severity: red-4

Correctable: false

Snapshot Updatable: true

Template Updatable: false

Information Field Format: [%s]