0

In my backup application I am using USN journal to check changes to the volume. By default USN is disabled or enabled? In this link (old article)it was mentioned like "By default, an NTFS volume will have its Change Journal disabled" .I didn't get much information about it in any website. Is it really disabled on NTFS drive or Is it based on OS? It's important to me because I use it in my application.

Daniel
  • 3,092
  • 3
  • 32
  • 49
IT researcher
  • 3,274
  • 17
  • 79
  • 143

2 Answers2

2

It's generally on in Windows XP, Vista, 7, 8, Server 2003, Server 2008, and Server 2012. But, I've seen it off in each and every one of these version, so you can't rely on it just being on. I've seen articles and q/a where users are told to delete it to save space. You can query whether it's off or on here.

You can turn it off and on (or grow it) here.

The article you've referenced is an oldie but a goody. Windows 2000 was the brave new world when that was written.

There is also a tool called fsUtil available in Windows XP,Vista, 7, 8, Server 2003, Server 2008, and Server 2012 that will let you query the USN journal, turn it off/on, and grow it from the command line.

Clay
  • 4,999
  • 1
  • 28
  • 45
0

I think it's disabled by default, because it consumes resources, and if nobody needs the journal, then it would be a waste. Anyway, the real answer is that you can't depend on this knowledge. It may be dependent on many of things. Even if there is a default, any user may have enabled/disabled the journal manually. If you depend on the journal, then you have to check if it's enabled, and if not, then enable it.

fejesjoco
  • 11,763
  • 3
  • 35
  • 65
  • I have checked some PC's in my office and i found it was enabled. But I didn't remember about enabling it manually. Is there any windows services which may have enabled it? – IT researcher Nov 28 '14 at 10:14
  • I know that DPM client protection enables it. But still, you can never be sure. – fejesjoco Nov 28 '14 at 11:05
  • Ok. But how can I enable USN journal? in cmd or any code available? – IT researcher Nov 28 '14 at 11:15
  • http://technet.microsoft.com/en-us/library/cc788042.aspx http://msdn.microsoft.com/en-us/library/windows/desktop/aa363798%28v=vs.85%29.aspx – fejesjoco Nov 28 '14 at 12:41
  • I found this code which has create journal option etc http://code.openhub.net/project?pid=wRlLVGcnu7s&prevcid=1&cid=y-8Zxp8lkwg&pp=0&fl=C%23&ff=1&filterChecked=true&fp=394564&mp,=1&ml=0&me=1&md=1&projSelected=true – IT researcher Nov 29 '14 at 06:47