• State Not Answered
  • Locked Locked
  • Replies 1 reply
  • Subscribers 22 subscribers
  • Views 264 views
  • Users 0 members are here
Options
Related
This discussion has been locked. The information referenced herein may be inaccurate due to age, software updates, or external references.
You can no longer post new replies to this discussion. If you have a similar question you can start a new discussion in this forum.

FIM: disabled on startup

marcusmm8

I have noticed that even after enabling FIM on startup on Windows 7 workstations, they are disabled the next day. anyone else seeing this?

  • 0

    How to gather some information that might help below.  All steps should be on the system running FIM/the LEM Agent.

    1. Open a command prompt as an administrator
    2. Run FLTMC, get the results (screenshot)
    3. Run TASKLIST, get the results
    4. Run VERIFIER (Details on verifier are here: https://support.microsoft.com/en-us/kb/244617 )
      1. Create custom settings
      2. Enable Special Pool, Pool Tracking, I/O Verification, IRP Logging and Miscellaneous Checks
      3. Choose to select driver names from a list
      4. Pick the swfsfltr.sys driver, click FINISH
      5. THE SYSTEM WILL NEED TO REBOOT

    After the reboot, you can re-run VERIFIER and see the state of the FIM driver on the desktop.  Was it "Unloaded" or "Never Loaded"?

SolarWinds solutions are rooted in our deep connection to our user base in the THWACK® online community. More than 195,000 members are here to solve problems, share technology and best practices, and directly contribute to our product development process.

SolarWinds Customer Success Center Certification Media Vault Link Accounts
About THWACK Blogs For Government Edit Settings Free Tools & Trials
Legal Documents Terms of Use Privacy California Privacy Rights Security Information
©2024 SolarWinds Worldwide, LLC. All Rights Reserved.