Home
  •  

受保护结构 KDS 性能监视器

Microsoft.Windows.GuardedFabric.10.0.GuardedHost.KDS.Availability (UnitMonitor)

一种基于事件的单元监视器，用于确定受保护结构是否无法解开密钥保护程序

Knowledge Base article:

摘要

受保护结构的单元监视器，显示受保护结构是否无法解开密钥保护程序。

原因

这可能与认证失败或网络连接问题相关。查看事件说明，获取更多详细信息。

解决方案

在受保护结构成功解开密钥保护程序时自动解决。

Element properties:

TargetMicrosoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost
Parent MonitorSystem.Health.PerformanceState
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
受保护主机密钥保护程序失败
受保护结构无法为保护者解开密钥保护程序。
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.GuardedFabric.10.0.GuardedHost.KDS.Availability" Accessibility="Public" Enabled="true" Target="HGSDL!Microsoft.Windows.GuardedFabric.10.0.ComputerRole.GuardedHost" ParentMonitorID="Health!System.Health.PerformanceState" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="false">

  <Category>AvailabilityHealth</Category>

  <AlertSettings AlertMessage="Microsoft.Windows.GuardedFabric.10.0.GuardedHost.KDS.Availability.AlertMessage">

    <AlertOnState>Error</AlertOnState>

    <AutoResolve>true</AutoResolve>

    <AlertPriority>Normal</AlertPriority>

    <AlertSeverity>MatchMonitorHealth</AlertSeverity>

  </AlertSettings>

  <OperationalStates>

    <OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Error"/>

    <OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>

  </OperationalStates>

  <Configuration>

    <FirstComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</FirstComputerName>

    <FirstLogName>Microsoft-Windows-HostGuardianService-Client/Operational</FirstLogName>

    <FirstExpression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value Type="UnsignedInteger">2014</Value>

        </ValueExpression>

      </SimpleExpression>

    </FirstExpression>

    <SecondComputerName>$Target/Host/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/PrincipalName$</SecondComputerName>

    <SecondLogName>Microsoft-Windows-HostGuardianService-Client/Operational</SecondLogName>

    <SecondExpression>

      <SimpleExpression>

        <ValueExpression>

          <XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>

        </ValueExpression>

        <Operator>Equal</Operator>

        <ValueExpression>

          <Value Type="UnsignedInteger">2015</Value>

        </ValueExpression>

      </SimpleExpression>

    </SecondExpression>

  </Configuration>

</UnitMonitor>