Home
  •  

Aggregate Irreparable Corrupted System File Monitor

Microsoft.Windows.Client.Vista.PhysicalDisk.COFIRE_NotFixed.Monitor (UnitMonitor)

Monitor reports when the Corrupted File Recovery server detects a corrupted file that it cannot automatically repair

Knowledge Base article:

Summary

This Health monitor turns RED when Windows Vista detects bad sectors in OS section of the system drive and has NOT been able to self-heal the drive. The hard drive errors might render the system unbootable or cause system instability.

.

Resolutions

1.Work with user to gauge impact of disk error on system

2.Consider replacing the hard drive if the system is unbootable or unstable.

Element properties:

TargetMicrosoft.Windows.Client.Vista.Aggregate.PhysicalDisk
Parent MonitorSystem.Health.AvailabilityState
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityError
Alert PriorityLow
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
A Windows Vista computer has a corrupted system file
Windows Vista has detected a corrupted system file that it tried to self-heal and failed. This might cause the system to be in an unbootable state or cause system instability. Please re-image the machine and consider replacing the hard drive if this problem persists.
RunAsSystem.PrivilegedMonitoringAccount

Source Code:

<UnitMonitor ID="Microsoft.Windows.Client.Vista.PhysicalDisk.COFIRE_NotFixed.Monitor" RunAs="System!System.PrivilegedMonitoringAccount" Accessibility="Public" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Target="Microsoft.Windows.Client.Vista.Aggregate.PhysicalDisk" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" Remotable="true" Enabled="true" Priority="Normal" ConfirmDelivery="false">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.Client.Vista.PhysicalDisk.COFIRE_NotFixed.Monitor.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Low</AlertPriority>

    <AlertSeverity>Error</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="NoProblem" HealthState="Success" MonitorTypeStateID="ManualResetEventRaised"/>

    <OperationalState ID="ProblemNotFixed" HealthState="Error" MonitorTypeStateID="EventRaised"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>

    <LogName>System</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Microsoft-Windows-CorruptedFileRecovery-Server</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>6</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <Value>$Target/Property[Type="Microsoft.Windows.Client.Vista.Aggregate.PhysicalDisk"]/ContainsSystemDrive$</Value>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>1</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>