Home
  •  

用于注册表处理的监视器

Microsoft.Windows.GroupPolicy.2008.RegistryCSE.GroupPolicyRegistryProcessing.System.Correctaregistryextensionfailure.EventBased.UnitMonitor (UnitMonitor)

Knowledge Base article:

摘要

注册表处理

注册表客户端扩展负责在处理组策略过程中从客户端的注册表写入和删除注册表项和值。

解决方法

更正注册表扩展失败

注册表客户端扩展无法从组策略模板位置读取 registry.pol 文件。registry.pol 文件包含注册表策略设置。此文件可能已丢失、不可访问或已损坏。

可能的解决方法包括：

Element properties:

TargetMicrosoft.Windows.GroupPolicy.2008.RegistryCSE
Parent MonitorSystem.Health.AvailabilityState
CategoryStateCollection
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.SingleEventLogManualReset2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
有关组策略注册表处理的警报
{0}
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.GroupPolicy.2008.RegistryCSE.GroupPolicyRegistryProcessing.System.Correctaregistryextensionfailure.EventBased.UnitMonitor" Accessibility="Public" Enabled="onEssentialMonitoring" Target="Microsoft.Windows.GroupPolicy.2008.RegistryCSE" ParentMonitorID="SystemHealth!System.Health.AvailabilityState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.SingleEventLogManualReset2StateMonitorType" ConfirmDelivery="true">

  <Category>StateCollection</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.GroupPolicy.2008.RegistryCSE.GroupPolicyRegistryProcessing.System.Correctaregistryextensionfailure.EventBased.UnitMonitor.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

    <AlertParameters>

      <AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>

    </AlertParameters>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="ManualReset" MonitorTypeStateID="ManualResetEventRaised" HealthState="Success"/>

    <OperationalState ID="NegativeHealthState" MonitorTypeStateID="EventRaised" HealthState="Error"/>

  </OperationalStates>

  <Configuration>

    <ComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</ComputerName>

    <LogName>System</LogName>

    <Expression>

      <And>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>PublisherName</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>Microsoft-Windows-GroupPolicy</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

        <Expression>

          <SimpleExpression>

            <ValueExpression>

              <XPathQuery>EventDisplayNumber</XPathQuery>

            </ValueExpression>

            <Operator>Equal</Operator>

            <ValueExpression>

              <Value>1096</Value>

            </ValueExpression>

          </SimpleExpression>

        </Expression>

      </And>

    </Expression>

  </Configuration>

</UnitMonitor>