Incidents summarized by week start on a different day than expected.

Products

• Data Loss Prevention Enforce
• Data Loss Prevention

Issue/Introduction

The day of the week that an Incident Report in the Enforce console is summarized by week is not the expected day and may be inconsistent with other Enforce Servers

For example your report starts on the weekday Sunday but in other Enforce servers you notice it starts on a Monday.

Environment

Applies to: DLP - all versions

Resolution

The start day of the report is dependent on the Operating System's calendar settings on which the Enforce Server is installed which can be changed in the following ways:

1. A different calendar settings on the OS, to fix this follow these steps:

1. Click on Date/Time and calendar on the OS.
2. Click on Change Date/Time settings.
3. Click on Change Date and Time.
4. Click on Change calendar settings.

When the Window pops up for Customize format, change the First Day of the Week from Monday to Sunday.

 

2. Alternatively search the system registry for iFirstDayOfWeek key and change the value of each key to the value related to the required day:

For example change the iFirstDayOfWeek registry key value from Sunday (value = 6) to Monday (value = 0) :

HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek value 6 

to:

HKEY_CURRENT_USER\Control Panel\International\iFirstDayOfWeek value 0

Value	Meaning
0	Monday
1	Tuesday
2	Wednesday
3	Thursday
4	Friday
5	Saturday
6	Sunday

This diagram reference is taken from MS Technet - iFirstDayOfWeek

Note: The system settings can be changed by a GPO or simply by a script therefore you should confirm with your System Administrator if the changes are likely reverted back later if the problem reoccurs.