FIM: disabled on startup

marcusmm8

I have noticed that even after enabling FIM on startup on Windows 7 workstations, they are disabled the next day. anyone else seeing this?

curtisi

How to gather some information that might help below.  All steps should be on the system running FIM/the LEM Agent.

1. Open a command prompt as an administrator
2. Run FLTMC, get the results (screenshot)
3. Run TASKLIST, get the results
4. Run VERIFIER (Details on verifier are here: https://support.microsoft.com/en-us/kb/244617 )
   1. Create custom settings
   2. Enable Special Pool, Pool Tracking, I/O Verification, IRP Logging and Miscellaneous Checks
   3. Choose to select driver names from a list
   4. Pick the swfsfltr.sys driver, click FINISH
   5. THE SYSTEM WILL NEED TO REBOOT

After the reboot, you can re-run VERIFIER and see the state of the FIM driver on the desktop.  Was it "Unloaded" or "Never Loaded"?