Click here to Skip to main content
15,867,453 members
Please Sign up or sign in to vote.
0.00/5 (No votes)
I am trying to enumerate the NTFS USN change log. Calling DeviceIoControl with the control code FSCTL_ENUM_USN_DATA returns zero for Reason, SecurityId, SourceInfo and TimeStamp for all 428k records.

Why? How do I get the full record?
Posted
Comments
George Jonsson 5-Jan-15 6:21am    
What is the return value of DeviceIoControl?
Have you tried to call GetLastError()?
Mandelnuss 5-Jan-15 6:28am    
I do. There are no errors and the rest of the fields are populated fine.
George Jonsson 5-Jan-15 8:54am    
I think you should present the code you have and also the operating version you are using.
You have bigger chance to get help then.

This content, along with any associated source code and files, is licensed under The Code Project Open License (CPOL)



CodeProject, 20 Bay Street, 11th Floor Toronto, Ontario, Canada M5J 2N8 +1 (416) 849-8900