| DisplayName | ID | Target | Category | Enabled | Alert Generate |
| Application Incompatibility Rule | Microsoft.Windows.Client.Vista.Computer.ApplicationIncompatibility.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Corruption Failed Rule | Microsoft.Windows.Client.Vista.Computer.DiskCorruptionFailed.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Corruption File Skipped Rule | Microsoft.Windows.Client.Vista.Computer.DiskCorruptionFileSkipped.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Corruption Repair Failed Rule | Microsoft.Windows.Client.Vista.Computer.DiskCorruptionRepairFailed.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Corruption Repair Succeeded Need Reboot Rule | Microsoft.Windows.Client.Vista.Computer.DiskCorruptionRepairSucceededNeedReboot.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Corruption Repair Succeeded No Reboot Rule | Microsoft.Windows.Client.Vista.Computer.DiskCorruptionRepairSucceededNoReboot.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Disk Failure Rule | Microsoft.Windows.Client.Vista.Computer.DiskFailure.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Memory Exhaustion Rule | Microsoft.Windows.Client.Vista.Computer.MemoryExhaustion.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Memory Failure Detected Rule | Microsoft.Windows.Client.Vista.Computer.MemoryFailureFailureDetected.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Memory Failure Test Cancelled Rule | Microsoft.Windows.Client.Vista.Computer.MemoryFailureTestCancelled.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| Memory Failure Test Failed Rule | Microsoft.Windows.Client.Vista.Computer.MemoryFailureTestFailed.Rule | Microsoft.Windows.Client.Vista.Computer | EventCollection | True | False |
| 逻辑磁盘平均磁盘队列长度 | Microsoft.Windows.Client.Vista.LogicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | True | False |
| 逻辑磁盘每次读取磁盘的平均时间 | Microsoft.Windows.Client.Vista.LogicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘每次磁盘传输的平均时间 | Microsoft.Windows.Client.Vista.LogicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | True | False |
| 逻辑磁盘每次写入磁盘的平均时间 | Microsoft.Windows.Client.Vista.LogicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘当前磁盘队列长度 | Microsoft.Windows.Client.Vista.LogicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘每秒的磁盘字节数 | Microsoft.Windows.Client.Vista.LogicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘每秒读取磁盘次数 | Microsoft.Windows.Client.Vista.LogicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘每秒写入磁盘次数 | Microsoft.Windows.Client.Vista.LogicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘可用兆字节 | Microsoft.Windows.Client.Vista.LogicalDisk.FreeMB.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | False | False |
| 逻辑磁盘可用空间百分比 | Microsoft.Windows.Client.Vista.LogicalDisk.FreeSpace.Collection | Microsoft.Windows.Client.Vista.LogicalDisk | PerformanceCollection | True | False |
| Bytes Received Per Sec Collection Mission Critical | Microsoft.Windows.Client.Vista.NetworkAdapter.BytesReceivedPerSec.Collection.MissionCritical | Microsoft.Windows.Client.Vista.NetworkAdapter | PerformanceCollection | False | False |
| Bytes Sent Per Sec Collection Mission Critical | Microsoft.Windows.Client.Vista.NetworkAdapter.BytesSentPerSec.Collection.MissionCritical | Microsoft.Windows.Client.Vista.NetworkAdapter | PerformanceCollection | False | False |
| Bytes Total Per Sec Collection MissionCritical | Microsoft.Windows.Client.Vista.NetworkAdapter.BytesTotalPerSec.Collection.MissionCritical | Microsoft.Windows.Client.Vista.NetworkAdapter | PerformanceCollection | False | False |
| 网络适配器已断开 | Microsoft.Windows.Client.Vista.NetworkAdapter.NetworkAdapterDisconnected.Alert | Microsoft.Windows.Client.Vista.NetworkAdapter | EventCollection | True | False |
| 启动时检查文件系统 | Microsoft.Windows.Client.Vista.OperatingSystem.CheckingFileSystemOccuredOnStartup.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Windows 正常重新启动事件的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.CleanShutdown.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Windows 不正常关闭事件的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.DirtyShutdown.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 检测到计算机名重复 | Microsoft.Windows.Client.Vista.OperatingSystem.DuplicateNameonNetwork.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Reserved | Microsoft.Windows.Client.Vista.OperatingSystem.DuplicateNameonNetwork.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 事件日志文件已满 | Microsoft.Windows.Client.Vista.OperatingSystem.EventLogFull.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Event Log Full Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.EventLogFull.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 在网络上检测到重复的 IP 地址 | Microsoft.Windows.Client.Vista.OperatingSystem.IPAddressConflict.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| IP Address Conflict Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.IPAddressConflict.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| LDM - 自动导入失败 | Microsoft.Windows.Client.Vista.OperatingSystem.LDMAutoImportFailed.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Reserved | Microsoft.Windows.Client.Vista.OperatingSystem.LDMAutoImportFailed.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| LDM - 无法读取磁盘 | Microsoft.Windows.Client.Vista.OperatingSystem.LDMCantReadDisk.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| LDM Cannot Read Disk Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.LDMCantReadDisk.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| LDM - 磁盘组失败 | Microsoft.Windows.Client.Vista.OperatingSystem.LDMDiskGroupFailed.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Reserved | Microsoft.Windows.Client.Vista.OperatingSystem.LDMDiskGroupFailed.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| LDM - 卷尚未启动 | Microsoft.Windows.Client.Vista.OperatingSystem.LDMVolumeNotStarted.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Reserved | Microsoft.Windows.Client.Vista.OperatingSystem.LDMVolumeNotStarted.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 内存可用兆字节 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryAvailableMBytes.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | True | False |
| 每秒的内存页读取数 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPageReadsPerSec.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 每秒的内存页数 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPagesPerSec.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 每秒的内存页写入数 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPageWritesPerSec.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 内存正在使用的提交的字节数百分比 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPercentCommittedBytesInUse.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 内存池非分页字节数 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPoolNonPagedBytes.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 内存池分页字节数 | Microsoft.Windows.Client.Vista.OperatingSystem.MemoryPoolPagedBytes.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| NTFS - 延缓写入丢失 | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSDelayedWriteLost.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| NTFS Delayed Write Lost Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSDelayedWriteLost.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| NTFS - 文件系统损坏 | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSFileSystemCorrupt.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| NTFS File System Corrupt Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSFileSystemCorrupt.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| NTFS Quota Threshold Limit Reached Collection | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSQuotaThresholdLimitReached.Collection.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| NTFS Quota Threshold Reached Collection | Microsoft.Windows.Client.Vista.OperatingSystem.NTFSQuotaThresholdReached.Collection.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| 页面文件使用百分比 | Microsoft.Windows.Client.Vista.OperatingSystem.PageFilePercentUsage.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| Performance Counter Data Request TimeOut Alert | Microsoft.Windows.Client.Vista.OperatingSystem.PerfCounterDataRequestTimeOut.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 性能注册表损坏 | Microsoft.Windows.Client.Vista.OperatingSystem.PerformanceRegistryCorruption.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Performance Registry Corruption Alert | Microsoft.Windows.Client.Vista.OperatingSystem.PerformanceRegistryCorruption.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| Windows 重新启动事件(从检测错误中重新启动)的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.RebootFromBugCheck.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Windows 已重新启动事件的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.RestartEvent.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 服务已进入不可预测的状态 | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceEnteredUnpredictableState.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Service Entered Unpredictable State Alert | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceEnteredUnpredictableState.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 服务配置错误 | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceMisconfigured.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Service Misconfigured Alert | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceMisconfigured.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 服务或驱动程序启动失败 | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceOrDriverFailedToStart.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Service Or Driver Failed To Start Alert | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceOrDriverFailedToStart.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| Service Or Driver Failed To Start Collection | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceOrDriverFailedToStart.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 服务意外终止 | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceTerminatedUnexpextedly.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Service Terminated Unexpextedly Alert Mission Critical | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceTerminatedUnexpextedly.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| Service Terminated Unexpextedly Collection | Microsoft.Windows.Client.Vista.OperatingSystem.ServiceTerminatedUnexpextedly.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| Share Configuration Invalid Alert MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem.ShareConfigurationInvalid.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| 软件更新安装失败 | Microsoft.Windows.Client.Vista.OperatingSystem.SoftwareUpdateInstallationFailed.Alert | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | False |
| Software Update Installation Failed Alert MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem.SoftwareUpdateInstallationFailed.Alert.MissionCritical | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | False | True |
| Software Update Installation Failed Collection | Microsoft.Windows.Client.Vista.OperatingSystem.SoftwareUpdateInstallationFailed.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 软件更新安装事件的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.SoftwareUpdatesInstalled.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 软件更新计划安装事件的收集规则 | Microsoft.Windows.Client.Vista.OperatingSystem.SoftwareUpdatesScheduledForInstallation.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | EventCollection | True | False |
| 系统每秒上下文切换次数 | Microsoft.Windows.Client.Vista.OperatingSystem.SystemContextSwitchesPerSec.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 系统处理器队列长度 | Microsoft.Windows.Client.Vista.OperatingSystem.SystemProcessorQueueLength.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | True | False |
| 处理器 DPC 时间百分比总计 | Microsoft.Windows.Client.Vista.OperatingSystem.TotalPercentDPCTime.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 处理器中断时间百分比总计 | Microsoft.Windows.Client.Vista.OperatingSystem.TotalPercentInterruptTime.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | False | False |
| 处理器处理器时间百分比总计 | Microsoft.Windows.Client.Vista.OperatingSystem.TotalPercentProcessorTime.Collection | Microsoft.Windows.Client.Vista.OperatingSystem | PerformanceCollection | True | False |
| 物理磁盘平均磁盘队列长度 | Microsoft.Windows.Client.Vista.PhysicalDisk.AvgDiskQueueLength.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | True | False |
| 物理磁盘每次读取磁盘的平均时间 | Microsoft.Windows.Client.Vista.PhysicalDisk.AvgDiskSecPerRead.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每次磁盘传输的平均时间 | Microsoft.Windows.Client.Vista.PhysicalDisk.AvgDiskSecPerTransfer.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | True | False |
| 物理磁盘每次写入磁盘的平均时间 | Microsoft.Windows.Client.Vista.PhysicalDisk.AvgDiskSecPerWrite.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘当前磁盘队列长度 | Microsoft.Windows.Client.Vista.PhysicalDisk.CurrentDiskQueueLength.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每秒的磁盘字节数 | Microsoft.Windows.Client.Vista.PhysicalDisk.DiskBytesPerSec.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每秒磁盘读取次数 | Microsoft.Windows.Client.Vista.PhysicalDisk.DiskReadsPerSec.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 物理磁盘每秒磁盘写入次数 | Microsoft.Windows.Client.Vista.PhysicalDisk.DiskWritesPerSec.Collection | Microsoft.Windows.Client.Vista.PhysicalDisk | PerformanceCollection | False | False |
| 处理器 DPC 时间百分比 | Microsoft.Windows.Client.Vista.Processor.PercentDPCTime.Collection | Microsoft.Windows.Client.Vista.Processor | PerformanceCollection | False | False |
| 处理器中断时间百分比 | Microsoft.Windows.Client.Vista.Processor.PercentInterruptTime.Collection | Microsoft.Windows.Client.Vista.Processor | PerformanceCollection | False | False |
| 处理器处理器时间百分比 | Microsoft.Windows.Client.Vista.Processor.PercentProcessorTime.Collection | Microsoft.Windows.Client.Vista.Processor | PerformanceCollection | False | False |