I believe I have found a way to monitor the actual handle for the
pwfilter.dll using powershell. I have put the basis of the code below,
let me know your thoughts. This should allow you to create a script to
monitor for the DLL not being loaded or hopefully report of it has

Get-WMIObject -Class CIM_ProcessExecutable -ComputerName ServerName |
where { $_.Antecedent -match "^.*?pwfilter\.dll.*?$" };

stampsr's Profile: https://forums.netiq.com/member.php?userid=7353
View this thread: https://forums.netiq.com/showthread.php?t=55565