Win32_FileScreenEvent, ROOT\CIMV2

Class | Methods | Properties (15) | Qualifiers (5) | Instances | Namespaces (2)
Samples: VB Script | C# | VB.Net | Search on:Microsoft

Win32_FileScreenEvent properties

Win32_FileScreenEvent has 15 properties (13 Local, 2 Derived)

NameOriginCIMType
FileScreenFlagsWin32_FileScreenEvent19 [UINT32]
FileScreenGroupWin32_FileScreenEvent8 [string]
FileScreenPathWin32_FileScreenEvent8 [string]
FileScreenSystemPathWin32_FileScreenEvent8 [string]
SECURITY_DESCRIPTOR__Event17 [uint8]
SourceFileOwnerWin32_FileScreenEvent8 [string]
SourceFileOwnerEmailWin32_FileScreenEvent8 [string]
SourceFileOwnerSidWin32_FileScreenEvent8 [string]
SourceFilePathWin32_FileScreenEvent8 [string]
SourceIoOwnerWin32_FileScreenEvent8 [string]
SourceIoOwnerEmailWin32_FileScreenEvent8 [string]
SourceIoOwnerSidWin32_FileScreenEvent8 [string]
SourceProcessIdWin32_FileScreenEvent19 [uint32]
SourceProcessImageWin32_FileScreenEvent8 [string]
TIME_CREATED__Event21 [uint64]

Detailed description of Win32_FileScreenEvent properties

Local properties (13) of Win32_FileScreenEvent class

▲ FileScreenFlags property
CIMTYPE'UINT32'
Description'Flags set on the file screen configuration that control the behavior of the policy.'
DisplayName'File Screen Flags'
readTrue
FileScreenFlags property is in 1 class (Win32_FileScreenEvent) of ROOT\cimv2 and in 2 namespaces
▲ FileScreenGroup property
CIMTYPE'string'
Description'The prohibited file group that caused the event to fire.'
DisplayName'File Screen Group'
readTrue
FileScreenGroup property is in 1 class (Win32_FileScreenEvent) of ROOT\cimv2 and in 2 namespaces
▲ FileScreenPath property
CIMTYPE'string'
Description'The path where the file screen policy applies.'
DisplayName'File Screen Path'
readTrue
FileScreenPath property is in 1 class (Win32_FileScreenEvent) of ROOT\cimv2 and in 2 namespaces
▲ FileScreenSystemPath property
CIMTYPE'string'
Description'The system path where the file screen policy applies.'
DisplayName'File Screen System Path'
readTrue
FileScreenSystemPath property is in 1 class (Win32_FileScreenEvent) of ROOT\cimv2 and in 2 namespaces
▲ SourceFileOwner property
CIMTYPE'string'
Description'The name of the user that owned the file that was being written to when the event was fired. This property may not always be available.'
DisplayName'Source File Owner Name'
readTrue
SourceFileOwner property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceFileOwnerEmail property
CIMTYPE'string'
Description'The email address of the user that owned the file that was being written to when the event was fired. This property may not always be available.'
DisplayName'Source File Owner Email'
readTrue
SourceFileOwnerEmail property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceFileOwnerSid property
CIMTYPE'string'
Description'The SID of the user that owned the file that was being written to when the event was fired. This property may not always be available.'
DisplayName'Source File Owner Sid'
readTrue
SourceFileOwnerSid property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceFilePath property
CIMTYPE'string'
Description'The path to the file that was being written when the event fired.'
DisplayName'Source File Path'
readTrue
SourceFilePath property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceIoOwner property
CIMTYPE'string'
Description'The name of the user that owned the process that issued the IO that caused the event to fire.'
DisplayName'Source Process Owner'
readTrue
SourceIoOwner property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceIoOwnerEmail property
CIMTYPE'string'
Description'The email address of the user that owned the process that issued the IO that caused the event to fire.'
DisplayName'Source Process Owner Email'
readTrue
SourceIoOwnerEmail property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceIoOwnerSid property
CIMTYPE'string'
Description'The SID of the user that owned the process that issued the IO that caused the event to fire.'
DisplayName'Source Process Owner Sid'
readTrue
SourceIoOwnerSid property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceProcessId property
CIMTYPE'uint32'
Description'The ID of the process that issued the IO that caused the event to fire. This property may not always be available.'
DisplayName'Source Process Id'
readTrue
SourceProcessId property is in 2 classes of ROOT\cimv2 and in 2 namespaces
▲ SourceProcessImage property
CIMTYPE'string'
Description'The image file name of the process that issued the IO that caused the event to fire. This property may not always be available.'
DisplayName'Source Process Image'
readTrue
SourceProcessImage property is in 2 classes of ROOT\cimv2 and in 2 namespaces

Derived properties (2) of Win32_FileScreenEvent class

▲ SECURITY_DESCRIPTOR property
CIMTYPE'uint8'
SECURITY_DESCRIPTOR property is in 144 classes of ROOT\cimv2 and in 142 namespaces
▲ TIME_CREATED property
CIMTYPE'uint64'
TIME_CREATED property is in 149 classes of ROOT\cimv2 and in 142 namespaces

Win32_FileScreenEvent Qualifiers

NameValueToInstanceToSubclassOverridableAmendedLocal
abstractTrue✓✓✗✗✗
dynamicTrue✓✗✓✗✓
Locale'ms_409'✓✗✓✓✓
provider'FsrmEventProvider'✓✗✓✗✓
UUID'{7db7d150-cb53-40e1-a23f-42cae4b8408f}'✓✗✓✗✓

Win32_FileScreenEvent System properties

NameValueOriginCIMTypeLocalArray
__PATH'\\.\ROOT\cimv2:Win32_FileScreenEvent'___SYSTEM8✗✗
__NAMESPACE'ROOT\cimv2'___SYSTEM8✗✗
__SERVER'.'___SYSTEM8✗✗
__DERIVATION['__ExtrinsicEvent', '__Event', '__IndicationRelated', '__SystemClass']___SYSTEM8✗✓
__PROPERTY_COUNT15___SYSTEM3✗✗
__RELPATH'Win32_FileScreenEvent'___SYSTEM8✗✗
__DYNASTY'__SystemClass'___SYSTEM8✗✗
__SUPERCLASS'__ExtrinsicEvent'___SYSTEM8✗✗
__CLASS'Win32_FileScreenEvent'___SYSTEM8✗✗
__GENUS1___SYSTEM3✗✗

Similar Classes to Win32_FileScreenEvent

Number of classes:91
Class nameChildsPropertiesMethodsClass
Instances
Child
Instances
AbstractSingleton
__AggregateEvent020----
__ClassCreationEvent030--✓-
__ClassDeletionEvent030--✓-
__ClassModificationEvent040--✓-
__ClassOperationEvent330--✓-
__ConsumerFailureEvent070--✓-
__Event520--✓-
__EventConsumer030--✓-
__EventConsumerProviderRegistration020----
__EventDroppedEvent340--✓-
__EventFilter060----
__EventGenerator100--✓-
__EventProviderRegistration02017---
__EventQueueOverflowEvent050--✓-
__ExtrinsicEvent1520--✓-
__InstanceCreationEvent030--✓-
__InstanceDeletionEvent030--✓-
__InstanceModificationEvent040--✓-
__InstanceOperationEvent430--✓-
__MethodInvocationEvent060--✓-
__NamespaceCreationEvent030--✓-
__NamespaceDeletionEvent030--✓-
__NamespaceModificationEvent040--✓-
__NamespaceOperationEvent330--✓-
__QOSFailureEvent060--✓-
__SystemEvent120--✓-
__TimerEvent040--✓-
MSFT_NCProvEvent450--✓-
MSFT_SCMEvent120--✓-
MSFT_SCMEventLogEvent3820--✓-
MSFT_WMI_GenericNonCOMEvent060--✓-
MSFT_WmiConsumerProviderEvent450--✓-
MSFT_WmiEssEvent520--✓-
MSFT_WmiFilterEvent260--✓-
Msft_WmiProvider_ComServerLoadOperationEvent0150--✓-
Msft_WmiProvider_ComServerLoadOperationFailureEvent0160--✓-
Msft_WmiProvider_CreateClassEnumAsyncEvent_Post0140--✓-
Msft_WmiProvider_CreateClassEnumAsyncEvent_Pre0110--✓-
Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Post0140--✓-
Msft_WmiProvider_CreateInstanceEnumAsyncEvent_Pre0110--✓-
Msft_WmiProvider_DeleteClassAsyncEvent_Post0140--✓-
Msft_WmiProvider_DeleteClassAsyncEvent_Pre0110--✓-
Msft_WmiProvider_DeleteInstanceAsyncEvent_Post0140--✓-
Msft_WmiProvider_DeleteInstanceAsyncEvent_Pre0110--✓-
Msft_WmiProvider_ExecMethodAsyncEvent_Post0160--✓-
Msft_WmiProvider_ExecMethodAsyncEvent_Pre0130--✓-
Msft_WmiProvider_ExecQueryAsyncEvent_Post0150--✓-
Msft_WmiProvider_ExecQueryAsyncEvent_Pre0120--✓-
Msft_WmiProvider_GetObjectAsyncEvent_Post0140--✓-
Msft_WmiProvider_GetObjectAsyncEvent_Pre0110--✓-
Msft_WmiProvider_InitializationOperationEvent090--✓-
Msft_WmiProvider_InitializationOperationFailureEvent0100--✓-
Msft_WmiProvider_LoadOperationEvent0170--✓-
Msft_WmiProvider_LoadOperationFailureEvent0180--✓-
Msft_WmiProvider_OperationEvent990--✓-
Msft_WmiProvider_OperationEvent_Post1390--✓-
Msft_WmiProvider_OperationEvent_Pre1390--✓-
Msft_WmiProvider_ProvideEvents_Post0110--✓-
Msft_WmiProvider_ProvideEvents_Pre0100--✓-
Msft_WmiProvider_PutClassAsyncEvent_Post0140--✓-
Msft_WmiProvider_PutClassAsyncEvent_Pre0110--✓-
Msft_WmiProvider_PutInstanceAsyncEvent_Post0140--✓-
Msft_WmiProvider_PutInstanceAsyncEvent_Pre0110--✓-
Msft_WmiProvider_UnLoadOperationEvent090--✓-
MSFT_WmiProviderEvent140--✓-
MSFT_WmiSelfEvent220--✓-
MSFT_WmiThreadPoolEvent230--✓-
NTEventlogProviderConfig010---✓
RegistryEvent320--✓-
RegistryKeyChangeEvent040--✓-
RegistryTreeChangeEvent040--✓-
RegistryValueChangeEvent050--✓-
Win32_ComputerShutdownEvent040--✓-
Win32_ComputerSystemEvent130--✓-
Win32_DeviceChangeEvent230--✓-
Win32_IP4RouteTableEvent020--✓-
Win32_NTEventlogFile0391612---
Win32_NTLogEvent0160999---
Win32_NTLogEventComputer02040---
Win32_NTLogEventLog02040---
Win32_NTLogEventUser02040---
Win32_PerfFormattedData_Counters_EventTracingforWindows01501--✓
Win32_PerfFormattedData_Counters_EventTracingforWindowsSession014024---
Win32_PerfRawData_Counters_EventTracingforWindows01501--✓
Win32_PerfRawData_Counters_EventTracingforWindowsSession014024---
Win32_PowerManagementEvent040--✓-
Win32_QuotaEvent0230--✓-
Win32_RdvProvisioningChangeEvent030--✓-
Win32_SessionBrokerTargetEvent080--✓-
Win32_SystemConfigurationChangeEvent030--✓-
Win32_VolumeChangeEvent040--✓-
comments powered by Disqus
WUtils.com