Disabling chachin for NTFS files

NTFSD
1

Hi all.

I’m trying to write a file system minifilter driver to monitor writes.

I want to disable caching for all files and I tried doing so during pre create by setting the flag for no intermediate buffering for all files created in a specific folder.

During writes, however, I noticed that even though I only receive cached writes somehow the updated file is saved.
The local FS is NTFS.

Since flushing cache is not an option (wouldn’t work and highly discouraged to boot) does anybody have an Idea how to make sure all writes pass through my driver? some seem to be slipping through…

Thanks,
Ariel.

2

> During writes, however, I noticed that even though I only receive cached writes somehow the updated

file is saved.
The local FS is NTFS.

Impossible.

In some cases, NTFS just ignores the “no buffering” flag. For compressed files, for encrypted files, for MFT-resident streams, and so on.

–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com