Change Journals under Windows 10 return error when file is created READ_USN_JOURNAL_DATA_V1 (help)

  • Thread starter Thread starter Striebrovlas
  • Start date Start date
S

Striebrovlas

Guest
I have problem with read journals under windows 10. Something is read, but something not. For example created new files / folders give me error 1181 [ ERROR_JOURNAL_ENTRY_DELETED The journal entry has been deleted from the journal ] (Under windows 10, win7 doesn't give me any error) .

Anohter problem is, when I open text file and make changes and save it, Change Journals detect changes, throw 1181 error + show me strange Reason with number 3 I can't find in this documentation for READ_USN_JOURNAL_DATA_V1.

I use READ_USN_JOURNAL_DATA_V1 and PUSN_RECORD_V2 for FSCTL_READ_USN_JOURNAL

here is topic with more code. ( for w10 I use READ_USN_JOURNAL_DATA_V1 structure with MinMajorVersion = 0 and MaxMajorVersion = 2; which is not in code I showed in topic )

Continue reading...
 
Back
Top