ShareFile

DLP Existing Files Scan Tool

January 28, 2026

Contributed by:

Data Loss Prevention (DLP) features in ShareFile let you restrict access and sharing based on the content found within a file.

This tool allows you to:

Scan files stored on your StorageZone prior to enabling the DLP integration
Re-scan uploaded files

Tool Requirements

The DLP Integration must be enabled at the StorageZones Controller console. See Enable DLP for more information.
PsExec.exe must be used in order to run the tool with Network Service Rights.

Obtain Network Service Rights

Use PSExec to launch PowerShell (x86) under the same user context as the StorageZone Controller and obtain Network Service Rights using the following command:

PsExec.exe -i -u "NT AUTHORITY\NetworkService" C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell

Initiate a Scan

First, in the PowerShell window created in the previous step, navigate to the DLPExistingFiles.ps1 tool’s install location.

Example: PS C:\> cd ‘C:\inetpub\wwwroot\ShareFile\StorageCenter\Tools\DLPExistingFiles’

To initiate a scan, run the following command:

.\DLPExistingFiles.ps1 –runscan <scanType> -date <date> -queueLimit <queueLimit>

Note:

<scanType> is required. <date> and <queueLimit> are optional.`

–

Important:

If you have run the scan tool previously, please ensure that the Enddate.temp file located at C:\inetpub\wwwroot\ShareFile\StorageCenter\SC\Enddate.temp has been deleted before running a scan or scheduling a scan via Task Scheduler.

Custom Scan Options

You can customize your DLP scan with the following options:

scanType – This is a required variable. You may set scanType to the following:

Unscanned
Scanned (this type will scan all files that have been scanned previously, both OK and Rejected)
ScannedOK
ScannedRejected

Date – This is an optional variable. If the date is not set, the tool will scan all pre-existing files uploaded prior to the current date and time. To provide date and time, use the following format:

Mm/dd/yyyy/ hh:mm:ss AM/PM
Example: 09/21/2015/ 10:11:12 AM

queueLimit – This is an optional variable. The queueLimit is the max number of files that may be fetched for scanning at a time. By default, the value will be taken from app.config. The default is 512. When a queueLimit is reached, a temp file is created at the following location:

PS C:\> cd ‘C:\inetpub\wwwroot\ShareFile\StorageCenter\SC\Enddate.temp

Note regarding the Enddate.temp file:

The Enddate.temp file must be deleted before running the tool manually or scheduling a scan via Task Scheduler.

Schedule Recurring Scans via Task Scheduler

You may configure a recurring scan to run via Windows Task Scheduler. To do so:

Open Windows Task Scheduler.

Navigate to the Access Pane and select “Create Task”.

Under General, provide a Name for your task.

Under Security Options, click Change User or Group.

Enter the Object Name as “Network Service” or as a Named User with Write permissions to the storage location.

Under Configure For, select the correct operating system for your setup.

Under Trigger, configure the frequency for running the recovery task as needed.

Under Actions, create a New Action with the following parameters:

1:Action: “Start a Program” 2: Program/script: C:\Windows\System32\cmd.exe 3:Argument: /C “c:\Windows\syswow64\WindowsPowerShell\v1.0\PowerShell.exe –File .\DLPExistingFiles.ps1 –runscan <scantype> -queueLimit <queueLimit>” 4: Start In: c:\inetpub\wwwroot\ShareFile\StorageCenter\Tools\DLPExistingFiles

Conditions and Settings are optional.

Click OK.

Once all files have been scanned, you may stop the scheduled task.

Troubleshooting

Logs

Logs for the DLPExistingFiles.ps1 tool may be found at:

C:\inetpub\wwwroot\ShareFile\StorageCenter\SC\logs\DLPExistingFiles-<date>.txt

Error: “Cannot run PsExec.exe –i –u “NT AUTHORITY\NetworkService”

Verify your permissions and ensure you have appropriate access to the network service.

Error: “DLP Integration Needs to be Configured”

Ensure that the DLP Integration is enabled on the StorageZones Controller console.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Was this article helpful

DLP Existing Files Scan Tool

January 28, 2026

Contributed by:

January 28, 2026

Contributed by:

DLP Existing Files Scan Tool

Tool Requirements

Obtain Network Service Rights

Initiate a Scan

Custom Scan Options

Schedule Recurring Scans via Task Scheduler

Troubleshooting

Logs

Error: “Cannot run PsExec.exe –i –u “NT AUTHORITY\NetworkService”

Error: “DLP Integration Needs to be Configured”

In this article