Skip to main content
Operating system & services

Windows System File Integrity

Regularly verify Windows system files with SFC and get alerted when integrity violations are found.

The Windows System File Integrity check runs sfc /verifyonly and reports whether the System File Checker found damaged Windows system files. It only checks and does not repair files. It runs only on Windows (x64 and ARM64), locally through the octoja agent, every 7 days (10080 minutes) by default. Linux and macOS are not supported.

Prerequisites

  • You need the Monitoring Check Management permission.
  • SFC requires administrator rights. The agent runs as Local System, so there is nothing to set up on the device.

Steps

  1. Go to Devices and open the device.
  2. Click the Checks tab โ†’ Add Check โ†’ Windows System File Integrity.
  3. Click Add Check.

To assign the check to many devices at once, use a config package.

Settings

The check has no configuration fields of its own.

A scan can take up to 20 minutes. Choose a long interval, and only shorten the default interval if you need to.

Results

SituationResult
SFC reports no integrity violationsOK
SFC reports integrity violationsCritical
SFC does not complete successfully, exceeds the 20-minute time limit, or returns an incomplete or unrecognized resultFailure

The check compares the SFC output with the result messages that Windows itself provides in the device's language. If it cannot recognize the result unambiguously, it reports Failure instead of OK.

If the check reports Critical, repair the system files yourself, for example with sfc /scannow. The check makes no changes.

See also: Set up alerts for a check