Search This Blog

Saturday 21 February 2009

Last Access Time on Vista

Just a quick note about Windows Vista (and probably Win2008 and Win7).

WatchDirectory's File Age monitoring method can detect "old files" based on their "Last Access Time" (the last time the file is opened). This timestamp is maintained on NTFS volumes when the registry key
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem\NtfsDisableLastAccessUpdate
is set to zero or does not exist.

Windows versions before Vista defaulted this setting to zero, so the Last Access timestamp was maintained for files on NTFS volumes. To improve file system performance, Microsoft disabled Last Access recording on Vista.

If you want to detect "old files" based on their Last Access time, please make sure this registry setting is set to zero.

More information:
http://blogs.technet.com/filecab/archive/2006/11/07/disabling-last-access-time-in-windows-vista-to-improve-ntfs-performance.aspx

No comments: