Files
windows-itpro-docs/windows/device-security/auditing/event-5051.md
Nicholas Brower 1ae3f0b230 Merged PR 4822: "msdate update (generated from most recent commit date)"
"msdate update (generated from most recent commit date)"
2017-12-05 22:36:05 +00:00

1.2 KiB

title, description, ms.pagetype, ms.prod, ms.mktglfcycl, ms.sitesec, author, ms.date
title description ms.pagetype ms.prod ms.mktglfcycl ms.sitesec author ms.date
5051(-) A file was virtualized. (Windows 10) Describes security event 5051(-) A file was virtualized. security w10 deploy library Mir0sh 04/19/2017

5051(-): A file was virtualized.

Applies to

  • Windows 10
  • Windows Server 2016

This event should be generated when file was virtualized using LUAFV.

This event occurs very rarely during standard LUAFV file virtualization.

There is no example of this event in this document.

Subcategory: Audit File System

Event Schema:

A file was virtualized.

Subject:

Security ID:%1%

Account Name:%2

Account Domain:%3

Logon ID:%4

Object:

File Name:%5

Virtual File Name:%6

Process Information:

Process ID:%7

Process Name%8

Required Server Roles: None.

Minimum OS Version: Windows Server 2008, Windows Vista.

Event Versions: 0.

Security Monitoring Recommendations

  • There is no recommendation for this event in this document.