format

NTFSD
1

While doing the format from computer management if we format a volume which
has some opened files then it will do a forced unmount. But i am confused
after observing the behaviour in this case.

these are sequence of operation
1 Sent FSCTL_DISMOUNT_VOLUME to file system.
2. Volume Mount occured using IRP_MN_MOUNT_VOLUME.
3 Sent FSCTL_LOCK_VOLUME
4. Sent FSCTL_DISMOUNT_VOLUME to file system.Call succeed
5. Sent FSCLT_UNLOCK_VOLUME.

I have not mentioned the IRP’s that got failed but mentioned only those gets
succeed. Can any one from you validate this behavior Whether my observations
are right or wrong. If my observations are right then do we need to follow
the same procedure while doing forceful unmount

Rohit Gauba

2

That’s correct.

Forced dismount only does FSCTL_DISMOUNT_VOLUME, and then does the
formatting write/verify operations from this very handle. Then the handle is
just closed, and any next attempt to access the volume will automount it.

No FSCTL_UNLOCK_VOLUME in this case.

–
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

“Rohit” wrote in message news:xxxxx@ntfsd…
> While doing the format from computer management if we format a volume which
> has some opened files then it will do a forced unmount. But i am confused
> after observing the behaviour in this case.
>
> these are sequence of operation
> 1 Sent FSCTL_DISMOUNT_VOLUME to file system.
> 2. Volume Mount occured using IRP_MN_MOUNT_VOLUME.
> 3 Sent FSCTL_LOCK_VOLUME
> 4. Sent FSCTL_DISMOUNT_VOLUME to file system.Call succeed
> 5. Sent FSCLT_UNLOCK_VOLUME.
>
> I have not mentioned the IRP’s that got failed but mentioned only those gets
> succeed. Can any one from you validate this behavior Whether my observations
> are right or wrong. If my observations are right then do we need to follow
> the same procedure while doing forceful unmount
>
>
> Rohit Gauba
>