There is not managed code to read NTFS change journal. What you can use is
to use FileSystemWatcher notifications and anytime there is a change of a
file look for entries in the change journal that corresponds to that file.
Of course need to write a wrapper class to use the change journal and take
in account that this process can reduce the performance of jour application
(change journal must me sequentially queried until you find the changes you
need) and only administrator could run your application (to access change
journal administrative privileges are needed).
Regards,
Idael Cardoso
> Hi - are there any examples of reading the NTFS change journal from
> dotnet?
[quoted text clipped - 6 lines]
>
> Lee
Lee Atkinson - 16 Apr 2004 18:10 GMT
Hi Idael.
Unfortunately, the FileSystemWatcher doesn't seem to work that well.
It does not seem to detect file moves completely - it seems to detect
the deletion of the file, but not the creation in the new place.
Are you aware of any .net wrappers to the journal?
Many thanks
Lee