Monitor detects file system corruption on NTFS volumes
This Health Monitor detects failed disk read/write errors on NTFS volumes.
Check the state of the file system and repair it if necessary.
Click Start, click Run, and then, in the Open box, type cmd
To determine whether the volume is corrupt, at the command prompt, type chkntfs Drive:
If the message “Drive_letter: is dirty” is displayed, the volume is corrupt. In this case, repair the file system.
If the message “Drive_letter: is not dirty” is displayed, the volume is not corrupt and no further action is required.
To repair the file system
Save any unsaved data and close any open programs.
Restart the computer.
The volume is automatically checked and repaired when you restart the computer.
Alternatively, you can run the Chkdsk tool from the command prompt without shutting down the computer first.
Click Start, click Run, and then type cmd
At the command prompt, type
chkdsk /X Drive:
Chkdsk runs and automatically repairs the volume.
If the following message appears, type Y.
“Cannot lock current drive. Chkdsk cannot run because the volume is in use by another process. Would you like to schedule this volume to be checked the next time the system restarts?”
The next time the computer is started, Chkdsk will automatically run.
If the NTFS 55 message appears regularly, for example daily or weekly, run Chkdsk using the /R command-line option. This option allows Chkdsk to locate bad sectors on the hard disk.
Target | Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk |
Parent Monitor | System.Health.AvailabilityState |
Category | StateCollection |
Enabled | True |
Alert Generate | False |
Alert Auto Resolve | True |
Monitor Type | Microsoft.Windows.SingleEventLogManualReset2StateMonitorType |
Remotable | True |
Accessibility | Public |
RunAs | System.PrivilegedMonitoringAccount |
<UnitMonitor ID="Microsoft.Windows.Client.Win7.PhysicalDisk.FileSystemCorruption.Monitor" RunAs="System!System.PrivilegedMonitoringAccount" Accessibility="Public" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Target="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" Remotable="true" Enabled="onEssentialMonitoring" Priority="Normal" ConfirmDelivery="false">
<Category>StateCollection</Category>
<OperationalStates>
<OperationalState ID="FileSystemHealthy" HealthState="Success" MonitorTypeStateID="ManualResetEventRaised"/>
<OperationalState ID="FileSystemCorrupted" HealthState="Warning" MonitorTypeStateID="EventRaised"/>
</OperationalStates>
<Configuration>
<ComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</ComputerName>
<LogName>System</LogName>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>Ntfs</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>55</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume1$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume2$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume3$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery>EventData/DataItem/EventData/Data[last()]/text()</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value>$Target/Property[Type="Microsoft.Windows.Client.Win7.Aggregate.PhysicalDisk"]/Volume4$</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</And>
</Expression>
</Configuration>
</UnitMonitor>