Enterprise Vault - File System Archiving has an influence over registry key: 'NtfsDisableLastAccessUpdate' on Windows file servers.

book

Article ID: 100033698

calendar_today

Updated On:

Description

Error Message

No errors are generated.


Resolution

An alternative method for archiving may be required to ensure the files are being archived correctly. If the access time of the file is required for archiving then the value must be set to 0 so the file is updated properly when accessed by a user. 

As advised by Microsoft, Registry key: NtfsDisableLastAccessUpdate - is designed to prevent the NTFS log buffer in physical memory from becoming filled with time stamp update records. If there is an NTFS volume with a very large number of directories (in excess of 70,000), and Windows 2000 does not respond quickly to DIR commands, adding this entry to the registry might make directories list faster.

Hence, below registry must be present on each Windows file server with value: 1

HKLM\SYSTEM\CurrentControlSet\Control\FileSystem
Data type: REG_DWORD
Value name: NtfsDisableLastAccessUpdate
 

Warning: Incorrect use of the Windows registry editor may prevent the operating system from functioning properly. Great care should be taken when making changes to a Windows registry. Registry modifications should only be carried-out by persons experienced in the use of the registry editor application. It is recommended that a complete backup of the registry and workstation be made prior to making any registry changes.


Value Meaning
0 When listing directories, NTFS updates the last-access timestamp on each directory it detects, and it records each time change in the NTFS log.
1 When listing directories, NTFS does not update the last-access timestamp, and it does not record time stamp updates in the NTFS log.
 Refer: https://technet.microsoft.com/en-us/library/cc959914.aspx

Applies to:
Windows Server 2008
Windows Server 2012

Issue/Introduction

When File System Archiving policy (archiving rule) is based on Last access time, Enterprise Vault creates shortcuts when the specified time has elapsed since the last time the file was accessed. This option ensures that shortcuts are not created for frequently-accessed files.

However, the archiving results will be influenced when NtfsDisableLastAccessUpdate is set to 1 on targeted file server.
This setting can lead to unexpected archiving results as the Date accessed is not updated when a user opens or modifies the file.