KGRKJGETMRETU895U-589TY5MIGM5JGB5SDFESFREWTGR54TY
Server : Apache/2.4.58 (Win64) OpenSSL/3.1.3 PHP/8.2.12
System : Windows NT SERVER-PC 10.0 build 26200 (Windows 11) AMD64
User : ServerPC ( 0)
PHP Version : 8.2.12
Disable Function : NONE
Directory :  C:/Windows/System32/en-US/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Current File : C:/Windows/System32/en-US/fsutil.exe.mui
MZ����@���	�!�L�!This program cannot be run in DOS mode.

$A[=�:S�:S�:S�|���:S�|�Q�:S�Rich:S�PEL���!&�

�N@ ��8.rdata�@@.rsrc�� �@@��
lPP��$����8.rdata8.rdata$voltmdP�.rdata$zzzdbg �.rsrc$01� Ю.rsrc$02 2&G]5掉����tm8�'�ب�����(�@�X�p�����	�	�	�� ���!���,���MUI���R')1��└'>���]�,�'���O��UE���q���MUIen-US'@>'@�@'@�'@��'@�'@���'@ (@0�"(@N(@�P(@�(@��(@)@؀)@D)@��J)@])@�_)@f)@�(h)@b*@�:�*@�*@�`�*@+@ b�*��*�P��*��*���*��*��� ---- Commands Supported ----



8dot3name         8dot3name management

behavior          Control file system behavior

bypassIo          BypassIo management

clfs              CLFS logfile management

dax               Dax volume management

devdrv            Developer volume management

dirty             Manage volume dirty bit

file              File specific commands

fsInfo            File system information

hardlink          Hard link management

objectID          Object ID management

quota             Quota management

repair            Self healing management

reparsePoint      Reparse point management

storageReserve    Storage Reserve management

resource          Transactional Resource Manager management

sparse            Sparse file control

tiering           Storage tiering property management

trace             File system trace management

transaction       Transaction management

usn               USN management

volume            Volume management

wim               Transparent wim hosting management

Error: %0

 Drives: %0

�Usage: fsutil fsInfo driveType <volume pathname>

   Eg: fsutil fsInfo driveType C:

0%1 - Unknown Drive

@%1 - No such Root Directory

4%1 - Removable Drive

,%1 - Fixed Drive

<%1 - Remote/Network Drive

,%1 - CD-ROM Drive

$%1 - Ram Disk

�Usage: fsutil fsInfo volumeInfo <volume pathname>

   Eg: fsutil fsInfo volumeInfo C:

LSupports Case-sensitive filenames

@Preserves Case of filenames

DSupports Unicode in filenames

@Preserves & Enforces ACL's

HSupports file-based Compression

4Supports Disk Quotas

4Supports Sparse files

8Supports Reparse Points

8Supports Remote Storage

,Compressed volume

@Supports Object Identifiers

HSupports Encrypted File System

4Supports Transactions

8Supports Named Streams

,Volume Name : %1

HVolume Serial Number : 0x%1!x!

DMax Component Length : %1!d!

4File System Name : %1

�Usage: fsutil volume diskFree <volume pathname>

   Eg: fsutil volume diskFree C:

(Total free bytes        : %1!*s! (%2!*s!%3!s!)

Total bytes             : %4!*s! (%5!*s!%6!s!)

Total quota free bytes  : %7!*s! (%8!*s!%9!s!)

LError opening handle for eventlog

DSearching in %1 Event Log...

d**** A user hit their quota threshold ! ****

\**** A user hit their quota limit ! ****

8    Event ID  : 0x%1!x!

4    EventType : Error

8    EventType : Warning

@    EventType : Information

D    EventType : Audit success

D    EventType : Audit failure

@    Event Category : %1!d!

(    Source : %1

$    Data: %1

DNo quota violations detected

(    User: %1\%2

�Usage: fsutil volume dismount <volume pathname>

   Eg: fsutil volume dismount C:

LFormerly MSG_USAGE_QUERY_CLUSTER

@Formerly MSG_QUERY_CLUSTER

�Usage: fsutil dirty set <volume pathname>

   Eg: fsutil dirty set C:

�Usage: fsutil fsInfo statistics <volume pathname>

   Eg: fsutil fsInfo statistics C:

�

UserFileReads :        %1

UserFileReadBytes :    %2

UserDiskReads :        %3

UserFileWrites :       %4

UserFileWriteBytes :   %5

UserDiskWrites :       %6

MetaDataReads :        %7

MetaDataReadBytes :    %8

MetaDataDiskReads :    %9

MetaDataWrites :       %10

MetaDataWriteBytes :   %11

MetaDataDiskWrites :   %12



�CreateHits :           %1

SuccessfulCreates :    %2

FailedCreates :        %3

NonCachedReads :       %4

NonCachedRead Bytes :  %5

NonCachedWrites :      %6

NonCachedWrite Bytes : %7

NonCachedDiskReads :   %8

NonCachedDiskWrites :  %9

MftReads :                      %1

MftReadBytes :                  %2

MftWrites :                     %3

MftWriteBytes :                 %4

Mft2Writes :                    %5

Mft2WriteBytes :                %6

RootIndexReads :                %7

RootIndexReadBytes :            %8

RootIndexWrites :               %9

RootIndexWriteBytes :           %10

BitmapReads :                   %11

BitmapReadBytes :               %12

BitmapWrites :                  %13

BitmapWriteBytes :              %14

MftBitmapReads :                %15

MftBitmapReadBytes :            %16

MftBitmapWrites :               %17

MftBitmapWriteBytes :           %18

UserIndexReads :                %19

UserIndexReadBytes :            %20

UserIndexWrites :               %21

UserIndexWriteBytes :           %22

LogFileReads :                  %23

LogFileReadBytes :              %24

LogFileWrites :                 %25

LogFileWriteBytes :             %26

LogFileFull :                   %27

DiskResourceFailure :           %28

@File System Type :     FAT

@File System Type :     NTFS

�Usage: fsutil file setValidData <filename> <datalength>

   Eg: fsutil file setValidData C:\testfile.txt 4096

HUsage: fsutil file setShortName <filename> <shortname>

Options:

    shortname - Specifies the short name to set for the filename. Specifying

                an empty(zero-length) string (e.g. "") will remove the short

                file name if it exists for the file specified by the filename.



    Eg: fsutil file setShortName C:\testfile.txt testfile

        fsutil file setShortName C:\testfile.txt ""

pA local NTFS volume is required for this operation.

Usage: fsutil file queryAllocRanges offset=<val> length=<val> <filename>



   offset: File Offset, the start of the range to query

   length: Size, in bytes, of the range



 Eg: fsutil file queryAllocRanges offset=1024 length=64 C:\Temp\sample.txt

HFormerly MSG_ALLOCRANGE_RANGES

Usage: fsutil file setZeroData offset=<val> length=<val> <filename>



   offset: File offset, the start of the range to set to zeroes

   length: Byte length of the zeroed range



 Eg: fsutil file setZeroData offset=100 length=150 C:\Temp\sample.txt

�Usage: fsutil sparse setFlag <filename> [1|0]

   Eg: fsutil sparse setFlag C:\Temp\sample.txt

�Usage: fsutil fsinfo ntfsInfo <volume pathname>

   Eg: fsutil fsinfo ntfsInfo C:

pNTFS Volume Serial Number :        0x%1

NTFS Version      :                %2!d!.%3!d!

LFS Version       :                %4!d!.%5!d!

Total Sectors     :                %6!*s!  (%7!*s!%8)

Total Clusters    :                %9!*s!  (%10!*s!%11)

Free Clusters     :                %12!*s!  (%13!*s!%14)

Total Reserved Clusters :          %15!*s!  (%16!*s!%17)

Reserved For Storage Reserve :     %18!*s!  (%19!*s!%20)

Bytes Per Sector  :                %21!d!

Bytes Per Physical Sector :        %22!d!

Bytes Per Cluster :                %23!d!  (%38%39)

Bytes Per FileRecord Segment    :  %24!d!

Clusters Per FileRecord Segment :  %25!d!

Mft Valid Data Length :            %26%27

Mft Start Lcn  :                   0x%28

Mft2 Start Lcn :                   0x%29

Mft Zone Start :                   0x%30

Mft Zone End   :                   0x%31

MFT Zone Size  :                   %32%33

Max Device Trim Extent Count :     %34!u!

Max Device Trim Byte Count :       %35!#x!

Max Volume Trim Extent Count :     %36!u!

Max Volume Trim Byte Count :       %37!#x!

�Usage: fsutil dirty query <volume pathname>

   Eg: fsutil dirty query  C:

8Volume - %1!s! is Dirty

@Volume - %1!s! is NOT Dirty

�Usage: fsutil reparsePoint query <filename>

   Eg: fsutil reparsePoint query C:\Server

DReparse Tag Value : 0x%1!08x!

4Tag value: Microsoft

<Tag value: Name Surrogate

<Tag value: Symbolic Link

8Tag value: Mount Point

(Tag value: HSM

(Tag value: SIS

<Tag value: Filter Manager

(Tag value: DFS

$GUID : %1!s!

$Reparse Data:

�Usage: fsutil reparsePoint delete <filename>

   Eg: fsutil reparsePoint delete C:\Server

�Usage: fsutil objectID set <ObjectId> <BirthVolumeId> <BirthObjectId> <DomainId> <filename>



 ObjectId      : 32-digit hexadecimal data

 BirthVolumeId : 32-digit hexadecimal data

 BirthObjectId : 32-digit hexadecimal data

 DomainId      : 32-digit hexadecimal data

 All values must be in Hex of the form 40dff02fc9b4d4118f120090273fa9fc



 Eg: fsutil objectID set 40dff02fc9b4d4118f120090273fa9fc

                         f86ad6865fe8d21183910008c709d19e

                         40dff02fc9b4d4118f120090273fa9fc

                         00000000000000000000000000000000 C:\Temp\sample.txt

�Usage: fsutil objectID query <filename>

   Eg: fsutil objectID query C:\Temp\sample.txt

�Usage: fsutil objectID create <filename>

   Eg: fsutil objectID create C:\Temp\sample.txt

�Usage: fsutil objectID delete <filename>

   Eg: fsutil objectID delete C:\Temp\sample.txt

4Object ID :        %0

4BirthVolume ID :   %0

4BirthObjectId ID : %0

4Domain ID :        %0

@Usage   : fsutil usn createJournal <volume pathname> [options]

Options : m=<maximum size>     - Specifies the maximum size, in bytes, that NTFS allocates for the change journal.

          a=<allocation delta> - Specifies the size, in bytes, of memory allocation that is added to the end and

                                 removed from the beginning of the change journal.

          ** Note: If maximum size or allocation delta is not specified, the default size will be set based on your

                   current volume size.



   Eg : fsutil usn createJournal C:

        fsutil usn createJournal C: m=1000

        fsutil usn createJournal C: m=1000 a=100

�

Major Version    : 0x%1!x!

Minor Version    : 0x%2!x!

FileRef#         : 0x%3

Parent FileRef#  : 0x%4

Usn              : 0x%5

Time Stamp       : 0x%6 %7 %8

Reason           : 0x%9!lx!

Source Info      : 0x%10!lx!

Security Id      : 0x%11!lx!

File Attributes  : 0x%12!lx!

File Name Length : 0x%13!x!

File Name Offset : 0x%14!x!

FileName         : %15!.*ws!

�Usage: fsutil usn queryJournal <volume pathname>

   Eg: fsutil usn queryJournal C:

�Usn Journal ID   : 0x%1

First Usn        : 0x%2

Next Usn         : 0x%3

Lowest Valid Usn : 0x%4

Max Usn          : 0x%5

Maximum Size     : 0x%6 (%7!*s!%8!s!)

Allocation Delta : 0x%9 (%10!*s!%11!s!)

Usage: fsutil usn deleteJournal <flags> <volume pathname>



<Flags>

  /D : Delete

  /N : Notify

  Eg : usn deleteJournal /D C:

�Usage: fsutil usn enumData <file ref#> <lowUsn> <highUsn> <volume pathname>

   Eg: fsutil usn enumData 1 0 1 C:

PFile Ref#       : 0x%1

ParentFile Ref# : 0x%2

Usn             : 0x%3

SecurityId      : 0x%4!08x!

Reason          : 0x%5!08x!

Name (%6!03d!)      : %7!.*ws!



�Usage: fsutil usn readData <filename>

   Eg: fsutil usn readData C:\Temp\sample.txt

�Usage: fsutil file findBySID <user> <directory>

   Eg: fsutil file findBySID scottb C:\users

H---- BEHAVIOR Commands Supported ----



query           Query the file system behavior parameters

set             Change the file system behavior parameters

$%1 = %2!s!%0

8%1 is not currently set

�---- DIRTY Commands Supported ----



query           Query the dirty bit

set             Set the dirty bit

---- FILE Commands Supported ----



createNew                Creates a new file of a specified size

findBySID                Find a file by security identifier

layout                   Query all the information available about the file

optimizeMetadata         Optimize metadata for a file

queryAllocRanges         Query the allocated ranges for a file

queryCaseSensitiveInfo   Query the case sensitive information for a directory

queryEA                  Query the extended attributes (EA) information for a file

queryExtents             Query the extents for a file

queryExtentsAndRefCounts Query the extents and their corresponding refcounts for a file

queryFileID              Queries the file ID of the specified file

queryFileNameById        Displays a random link name for the file ID

queryProcessesUsing      Query the set of processes which have a file opened

queryOptimizeMetadata    Query the optimize metadata state for a file

queryValidData           Queries the valid data length for a file

setCaseSensitiveInfo     Set the case sensitive information for a directory

setShortName             Set the short name for a file

setValidData             Set the valid data length for a file

setZeroData              Set the zero data for a file

setEOF                   Sets the end of file for an existing file

setStrictlySequential    Sets ReFS SMR file as strictly sequential

�---- FSINFO Commands Supported ----



drives          List all drives

driveType       Query drive type for a drive

ntfsInfo        Query NTFS specific volume information

refsInfo        Query REFS specific volume information

sectorInfo      Query sector information

statistics      Query file system statistics

volumeInfo      Query volume information

---- HARDLINK Commands Supported ----



create          Create a hard link

list            Enumerate hard links on a file

�---- OBJECTID Commands Supported ----



create          Create the object identifier

delete          Delete the object identifier

query           Query the object identifier

set             Change the object identifier

T---- QUOTA Commands Supported ----



disable         Disable quota tracking and enforcement

enforce         Enable quota enforcement

modify          Set disk quota for a user

query           Query disk quotas

track           Enable quota tracking

violations      Display quota violations

---- REPARSEPOINT Commands Supported ----



delete          Delete a reparse point

query           Query a reparse point

t---- RESOURCE Commands Supported ----



create          Create a Secondary Transactional Resource Manager

info            Display information relating to a Transactional Resource Manager

setAutoReset    Set whether a default Transactional Resource Manager will clean its transactional metadata on next mount

setAvailable    Set a Transactional Resource Manager to prefer availability over consistency

setConsistent   Set a Transactional Resource Manager to prefer consistency over availability

setLog          Change characteristics of a running Transactional Resource Manager

start           Start a Transactional Resource Manager

stop            Stop a Transactional Resource Manager

\---- SETLOG Commands Supported ----



growth          Change the automatic growth settings

maxExtents      Change the maximum number of containers

minExtents      Change the minimum number of containers

mode            Switch between undo only logging and full logging

rename          Change the RM's Guid

shrink          Change the automatic shrink settings

size            Change the number of containers explicitly

DFormerly MSG_USAGE_SHORT_NAME

H---- SPARSE Commands Supported ----



queryFlag       Query sparse

queryRange      Query range

setFlag         Set sparse

setRange        Set sparse range

�---- TRANSACTION Commands Supported ----



commit          Commit a specified transaction

fileinfo        Display transaction information for a specific file

list            Display currently running transactions

query           Display information on a specified transaction

rollback        Rollback a specified transaction

D---- USN Commands Supported ----



createJournal           Create a USN journal

deleteJournal           Delete a USN journal

enableRangeTracking     Enable write range tracking for a volume

enumData                Enumerate USN data

queryJournal            Query the USN data for a volume

readJournal             Reads the USN records in the USN journal

readData                Read the USN data for a file

�---- VOLUME Commands Supported ----



allocationReport      Allocated clusters report

diskFree              Query the free space of a volume

dismount              Dismount a volume

findShrinkBlocker     Find files that are blocking volume shrink

fileLayout            Query all the information available about the file(s)

flush                 Flush a volume

list                  List volumes

queryCluster          Query which file is using a particular cluster

queryLabel            Query the label for a volume

queryNumaInfo         Queries the NUMA node for the given volume

setLabel              Set the label for a volume

smrGC                 Control SMR Garbage Collection

smrInfo               Query SMR information

tpInfo                Query thin provisioning info for the given volume

upgrade               Trigger an upgrade of the specified volume

�Usage: fsutil transaction rollback <guid>

   Eg: fsutil transaction rollback {0f2d8905-6153-449a-8e03-7d3a38187ba1}

�Usage: fsutil transaction commit <guid>

   Eg: fsutil transaction commit {0f2d8905-6153-449a-8e03-7d3a38187ba1}

Usage: fsutil transaction query [files|all] <guid>

   Eg: fsutil transaction query {0f2d8905-6153-449a-8e03-7d3a38187ba1}

�Usage: fsutil transaction fileInfo <filename>

   Eg: fsutil transaction fileInfo d:\foobar.txt

�Usage: fsutil resource create <RM Root pathname>

   Eg: fsutil resource create d:\foobar

�Usage: fsutil resource start <RM Root pathname> [<RM Log pathname> <TM Log pathname>]

   Eg: fsutil resource start d:\foobar

       fsutil resource start d:\foobar d:\foobar\LogDir\LogBLF::TxfLog d:\foobar\LogDir\LogBLF::TmLog

�Usage: fsutil resource stop <RM Root pathname>

   Eg: fsutil resource stop d:\foobar

�Usage: fsutil resource info <RM Root pathname>

   Eg: fsutil resource info d:\foobar

�Usage: fsutil resource txnreset <RM Root pathname> [<RM Log pathname>]

   Eg: fsutil resource txnreset d:\foobar

�Usage: fsutil resource setAutoReset <true|false> <Default RM Root pathname>

   Eg: fsutil resource setAutoReset true d:\

Usage: fsutil resource setLog size <number of containers> <RM Root pathname>

   Eg: fsutil resource setLog size 50 d:\foobar

�Usage: fsutil resource setLog mode <full|undo> <RM Root pathname>

   Eg: fsutil resource setLog mode full d:\foobar

Usage: fsutil resource setLog extentsize <size in Mb> <RM Root pathname>

   Eg: fsutil resource setLog extentsize 50 d:\foobar

�Usage: fsutil resource setLog rename <RM Root pathname>

   Eg: fsutil resource setLog rename d:\foobar

�Usage: fsutil resource setLog maxExtents <containers> <RM Root>

   Eg: fsutil resource setLog maxExtents 50 d:\foobar

�Usage: fsutil resource setLog minExtents <containers> <RM Root>

   Eg: fsutil resource setLog minExtents 5 d:\foobar

�Usage: fsutil resource setLog growth <containers> containers <RM Root>

       fsutil resource setLog growth <percent> percent <RM Root>

   Eg: fsutil resource setLog growth 5 containers d:\foobar

�Usage: fsutil resource setLog shrink <percent> <RM Root>

   Eg: fsutil resource setLog shrink 10 d:\foobar

TThe operation completed successfully.

�dwOutcome:        %1!s!

dwIsolationLevel: %2!s!

dwIsolationFlags: %3!s!

dwTimeout:        %4!s!

8Owner:            %1!s!

8Number of Files:  %1!s!

`%1!s! is not being locked by a transaction.

t%1!s! is being locked by a transaction called %2!s!.

�An RM cannot be reset from within the RM.  Please change to a directory

outside the RM and try again.

�This operation cannot be completed while the RM is running.

Please shutdown the RM and try again.

�One or more files within the RM could not be cleaned because they are in use

by another application.

�One or more files within the RM could not be cleaned because this process

does not have access to those files.

xNot all of the files within this RM have been cleaned.

�An unknown error occurred while attempting to clean this RM.

\Resource Manager Identifier :      %1!s!

@KTM Log Path for RM:  %1!s!

�Space used by TOPS:   %1!s! Mb

TOPS free space:      %2!s!%%

�Running transactions: %1!s!

One phase commits:    %2!s!

Two phase commits:    %3!s!

System initiated rollbacks: %4!s!

LAge of oldest transaction:  %1!s!

@Logging Mode:         Full

DLogging Mode:         Simple

Number of containers: %1!s!

Container size:       %2!s! Mb

Total log capacity:   %3!s! Mb

Total free log space: %4!s! Mb

HMaximum containers:   No Limit

@Maximum containers:   %1!s!

HMinimum containers:   No Limit

@Minimum containers:   %1!s!

DLog growth increment: %1!s!%%

\Log growth increment: %1!s! container(s)

LAuto shrink:          Not enabled

DAuto shrink:          %1!s!%%

\Log size is now:      %1!s! container(s).

�Usage: fsutil file createNew <filename> <length>

   Eg: fsutil file createNew C:\testfile.txt 1000

HFormerly MSG_USAGE_QUERYFILEID

PFormerl MSG_USAGE_QUERYFILENAMEBYID

�The FSUTIL utility requires that you have administrative privileges.

�Usage: fsutil hardlink create <new filename> <existing filename>

   Eg: fsutil hardlink create c:\foo.txt c:\bar.txt

\Hard link created for %1!s! <<===>> %2!s!

LFormerly MSG_USAGE_HARDLINK_LIST

4File %1!s! is created

PFormerly MSG_QUERYFILEID_SUCCEEDED

\Formerly MSG_QUERYFILENAMEBYID_SUCCEEDED

4Default quota values

TSID Name        = %1!s!\%2!s! (User)

TSID Name        = %1!s!\%2!s! (Group)

XSID Name        = %1!s!\%2!s! (Domain)

TSID Name        = %1!s!\%2!s! (Alias)

hSID Name        = %1!s!\%2!s! (WellKnownGroup)

hSID Name        = %1!s!\%2!s! (DeletedAccount)

XSID Name        = %1!s!\%2!s! (Invalid)

XSID Name        = %1!s!\%2!s! (Unknown)

�Change time     = %1!s!

Quota Used      = %2

Quota Threshold = %3

Quota Limit     = %4



�Usage: fsutil quota query <volume pathname>

   Eg: fsutil quota query C:

Usage: fsutil quota modify <volume pathname> <threshold> <limit> <user>

   Eg: fsutil quota modify c: 3000 5000 domain\user

�Usage: fsutil quota violations

   Eg: fsutil quota violations

PFileSystemControlFlags = 0x%1!08x!

X    Quotas are disabled on this volume

p    Quotas are tracked and enforced on this volume

T    Quotas are tracked on this volume

P    Logging enable for quota limits

X    Logging enable for quota thresholds

l    Logging enable for quota limits and threshold

`    Logging for quota events is not enabled

P    The quota values are incomplete

P    The quota values are up to date

�

Default Quota Threshold = 0x%1

Default Quota Limit     = 0x%2



\Quotas are not enabled on volume "%1!s!"

PVolume - %1!s! is now marked dirty

DValid data length is changed

4Zero data is changed

0No files were found

@This file is set as sparse

HThis file is NOT set as sparse

�Usage: fsutil sparse queryFlag <filename>

   Eg: fsutil sparse queryFlag C:\Temp\sample.txt

Usage: fsutil sparse setRange <filename> <beginning offset> <length>

   Eg: fsutil sparse setRange C:\Temp\sample.txt 65536 131072

�Usage: fsutil sparse queryRange <filename>

   Eg: fsutil sparse queryRange C:\Temp\sample.txt

LThe specified file is NOT sparse

�Allocated range[%1!d!]: Offset: 0x%2!-8I64x!  Length: 0x%3!I64x!

PThe specified file has no object id

�The new link and the existing file must be on the same volume.

�Usage: fsutil quota disable <volume pathname>

   Eg: fsutil quota disable C:

�Usage: fsutil quota track <volume pathname>

   Eg: fsutil quota track C:

�Usage: fsutil quota enforce <volume pathname>

   Eg: fsutil quota enforce C:

@%1 is an invalid parameter.

@Usage: fsutil fsInfo drives

�The FSUTIL utility requires a local volume for this operation.

LThe specified drive is too long.

xThe specified drive format is invalid or not supported.

�Format version: %1!d!

CSid:           %2!s!

LinkIndex:      0x%3!08x!.%4!08x!

LinkFileNtfsID: 0x%5!08x!.%6!08x!

CSFileNtfsID:   0x%7!08x!.%8!08x!

CSChecksum:     0x%9!08x!.%10!08x!

Checksum:       0x%11!08x!.%12!08x!

�Substitue Name offset: %1!d!

Substitue Name length: %2!d!

Print Name offset:     %3!d!

Print Name Length:     %4!d!

HSubstitute Name:       %1!.*s!

HPrint Name:            %1!.*s!

HReparse Data Length: 0x%1!-8x!

�Vendor ID:            %1!s!

Qualifier:            0x%2!08x!

Version:              0x%3!08x!

Global Flags:         0x%4!08x!

Num Data Entries:     %5!d!

File ID:              %6!s!

Data:

Flags:                0x%7!08x!

Migration Time:       %8!s!

HSM ID:               %9!s!

Bag ID:               %10!s!

File Start:           0x%11!08x!.%12!08x!

File Size:            0x%13!08x!.%14!08x!

Data Start:           0x%15!08x!.%16!08x!

Data Size:            0x%17!08x!.%18!08x!

File Version:         0x%19!08x!.%20!08x!

Verification Data:    0x%21!08x!.%22!08x!

Verification Type:    %23!u!

Recall Count:         %24!u!

Recall Time:          %25!s!

Data Stream Start:    0x%26!08x!.%27!08x!

Data Stream Size:     0x%28!08x!.%29!08x!

Data Stream:          %30!u!

Data Stream CRC Type: %31!u!

Data Stream CRC:      0x%32!08x!.%3!08x!

�---- REPAIR Commands Supported ----



enumerate      Enumerate the entries of a volume's corruption log

initiate       Initiate the repair of a file

query          Query the self healing state of the volume

set            Set the self healing state of the volume

state          Query the corruption state of the volume(s)

wait           Wait for repair(s) to complete

�Usage: fsutil repair query <volume pathname>

   Eg: fsutil repair query C:

�Usage: fsutil repair set <volume pathname> <flags>



 flags: 1 - enable general repair

        8 - warn about potential data loss



 Eg: fsutil repair set C: 1

     fsutil repair set C: 9

�Usage: fsutil repair wait <volume pathname> [<WaitType>]



 Values: 0 - wait for all repairs to complete (same as not specified)

         1 - wait for the current repair to complete



 Eg: fsutil repair wait C:

     fsutil repair wait C: 1

Usage: fsutil repair enumerate <volume pathname> [<LogName>]



 LogName: $Corrupt - The set of confirmed corruptions in the volume

                     (default when LogName is not specified)

 LogName: $Verify  - A set of potential, unverified corruptions in the volume



 Eg: fsutil repair enumerate C:

     fsutil repair enumerate C: $Corrupt

     fsutil repair enumerate C: $Verify

hSelf healing is now disabled for volume "%1!s!"

LNo corruption records were found.

`Self healing is disabled for volume "%1!s!"

hCurrent repair is completed for volume "%1!s!"

dAll repairs are completed for volume "%1!s!"

TTag value: IIS Caching Reparse Point

xLocal File Path  : %1!.*s!

Remote File Path : %2!.*s!

�Usage: fsutil volume upgrade <volume pathname>

   Eg: fsutil volume upgrade C:

�Usage: fsutil repair truncatelog <volume pathname>

   Eg: fsutil repair truncatelog C:

�Self healing repair log is now being truncated for volume "%1!s!"

tUsage: fsutil repair initiate <volume pathname> <file ref#>



 file ref# : File Reference including segment number of the file.



 Eg: fsutil repair initiate C: 0x001600000000123D

hInitiated the repair for file reference 0x%1!s!

`The data in the reparse buffer is invalid!

,Local-to-local %0

0Local-to-remote %0

0Remote-to-local %0

0Remote-to-remote %0

Hsymbolic link evaluation is: %0

DISABLED

ENABLED

�Usage: fsutil behavior set symlinkEvaluation {L2L|L2R|R2L|R2R}:{0|1} [...]



Controls the class of symbolic links that can be traversed when opening files.



 Values: L2L:{0|1} - Controls local-to-local symbolic link evaluation   (default ENABLED)

         L2R:{0|1} - Controls local-to-remote symbolic link evaluation  (default ENABLED)

         R2L:{0|1} - Controls remote-to-local symbolic link evaluation  (default DISABLED)

         R2R:{0|1} - Controls remote-to-remote symbolic link evaluation (default DISABLED)



 Eg:  fsutil behavior set symlinkEvaluation L2L:1 L2R:0

      - Enables local-to-local symbolic link evaluation

      - Disables local-to-remote symbolic link evaluation

      - Does not change the evaluation state of remote-to-remote or remote-to-local links.



This operation takes effect immediately (no reboot required)

LFormally MSG_SYMLINK_USING_GP_KEY

TFormerly MSG_SHORT_NAME_USING_GP_KEY

LRM State:             Not Started

HRM State:             Starting

DRM State:             Active

PRM State:             Shutting Down

DRM State:             Invalid

�

NOTE: This RM will reset its metadata the next time it starts.

0Usage: fsutil repair set <volume pathname> <flags>



 Values: 0 - Disable general repair

         1 - Enable general repair

         9 - Enable general repair and warn about potential data loss (default)

      0x10 - Disable general repair and bugcheck once on first corruption.

             Before this option can be set you must first enable

             bugCheckOnCorrupt mode and then reboot.

             To enable: fsutil behavior set bugcheckOnCorrupt 1



 Eg: fsutil repair set C: 0

     fsutil repair set C: 0x10

TSelf healing state on volume "%1!s!" has been changed to: 0x%2!x!



 Values: 0 - General repair disabled

         1 - General repair enabled

         9 - General repair enabled with warnings about potential data loss

      0x10 - General repair disabled, bugcheck once on first corruption

0Self healing state on volume "%1!s!" is: 0x%2!x!



 Values: 0 - General repair disabled

         1 - General repair enabled

         9 - General repair enabled with warnings about potential data loss

      0x10 - General repair disabled, bugcheck once on first corruption

@Usage: fsutil behavior query <option>



<options>

  allowExtChar

  bugcheckOnCorrupt

  defaultNtfsTier

  disable8dot3 [<Volume Path>]

  disableCompression

  disableCompressionLimit

  disableDeleteNotify [NTFS|ReFS]

  disableEncryption

  disableFileMetadataOptimization

  disableLastAccess

  disableSpotCorruptionHandling

  disableTxF [<Volume Path>]

  disableWriteAutoTiering [<Volume Path>]

  enableMaximumHardLinks

  enableNonpagedNtfs

  enableReallocateAllDataWrites [<Volume Path>]

  encryptPagingFile

  memoryUsage

  mftZone

  parallelFlushOpenThreshold

  parallelFlushThreads

  quotaNotify

  symlinkEvaluation



Please use "fsutil 8dot3name query /?" for more information.

For disableDeleteNotify if neither "NTFS" nor "ReFS" is specified, both values are shown.

pUsage: fsutil behavior set <option> <value>



<option>                         <values>

  allowExtChar                     <0|1>

  bugcheckOnCorrupt                <0|1>

  defaultNtfsTier                  <1-2>

  disable8dot3                     <0-3> | [<Volume Path> <0|1>]

  disableCompression               <0|1>

  disableCompressionLimit          <0|1>

  disableDeleteNotify              [NTFS|ReFS] <0|1>

  disableEncryption                <0|1>

  disableFileMetadataOptimization  <0-3>

  disableLastAccess                <0-3> | <0|1>

  disableSpotCorruptionHandling    <0-15>

  disableTxF                       [<Volume Path> <0|1>]

  disableWriteAutoTiering          [<Volume Path> <0|1>]

  enableMaximumHardLinks           <0|1>

  enableNonpagedNtfs               <0|1>

  enableReallocateAllDataWrites    [<Volume Path> <0|1>]

  encryptPagingFile                <0|1>

  memoryUsage                      <1|2>

  mftZone                          <1-%3!d!> (this value multiplied by %2!d! MB)

  parallelFlushOpenThreshold       <100-1,000,000>

  parallelFlushThreads             <0-%1!d!>

  quotaNotify                      <1-4,294,967,295> seconds

  symlinkEvaluation                [<L2L>|<L2R>|<R2L>|<R2R>:<0|1>] [...]



Some of these options require a reboot to take effect.



Please use "fsutil 8dot3name set /?" for more information on modifying the

shortname behavior of the volume or system.



For DisableDeleteNotify if neither "NTFS" nor "ReFS" is specified, "NTFS" is assumed.



MftZone is a reserved region of the disk used to make the MFT contiguous.  The

200 MB multiplier is only applicable for volumes > 1.5 GB.  Below this threshold

the multiplier is scaled based on volume size.



Sample SymlinkEvaluation command:

  "fsutil behavior set symlinkEvaluation L2L:1 L2R:0"

        - Will enable local to local symbolic links and disable local to

          remote symbolic links. It will not change the state of remote to

          remote links or remote to local links.

        - This operation takes effect immediately (no reboot required)

lusage: fsutil 8dot3name set [0 through 3] | [<Volume Path> <0|1>]



When a volume is not specified the operation updates the registry value:



    0 - Enable 8dot3 name creation on all volumes on the system

    1 - Disable 8dot3 name creation on all volumes on the system

    2 - Set 8dot3 name creation on a per volume basis (default)

    3 - Disable 8dot3 name creation on all volumes except the

        system volume



    When a volume is specified this operation updates the individual

        volume's on disk state.  This operation is only meaningful

        if the registry value is set to 2.



    0 - Enable 8dot3 name creation on this volume

    1 - Disable 8dot3 name creation on this volume



This operation takes effect immediately (no reboot required)



Sample commands:

  "fsutil 8dot3name set 1"      - disable 8dot3 name creation on all volumes

  "fsutil 8dot3name set C: 1"   - disable 8dot3 name creation on c:

xUsage: fsutil resource setConsistent <RM Root pathname>

   Eg: fsutil resource setConsistent d:\foobar



NOTE: The RM must be restarted for a change to this setting to take effect.

tUsage: fsutil resource setAvailable <RM Root pathname>

   Eg: fsutil resource setAvailable d:\foobar



NOTE: The RM must be restarted for a change to this setting to take effect.

`

RM prefers consistency over availability.

`

RM prefers availability over consistency.

|The volume state is: 1 (8dot3 name creation is DISABLED)

xThe volume state is: 0 (8dot3 name creation is ENABLED)

�The registry state is: 0 (8dot3 name creation is ENABLED on all volumes)

�The registry state is: 1 (8dot3 name creation is DISABLED on all volumes)

�The registry state is: 2 (Per volume setting - the default)

�The registry state is: 3 (8dot3 name creation is DISABLED on all non-system volumes)

�

Based on the above settings, 8dot3 name creation is ENABLED on "%1"

�

Based on the above settings, 8dot3 name creation is DISABLED on "%1"

�

Based on the above two settings, 8dot3 name creation is ENABLED on "%1" (System volume).

�

Based on the above two settings, 8dot3 name creation is DISABLED on "%1" (Non-system volume).

lOnly privileged users can perform this operation.

�Registry Data                                                                     Registry Key Path

-------------------------------------------------------------------------------   ------------------------------------------

0%1!-80ws!  HKCU\%2

,%1!-80ws!  HKU\%2

0%1!-80ws!  HKCR\%2

0%1!-80ws!  HKLM\%2

0%1!-80ws!  HKCC\%2

0%1!-80ws!  HKPD\%2

l

Total affected registry keys:          %1!10d!

,

Total files and directories scanned:   %1!10d!

Total 8dot3 names found:               %2!10d!

Total 8dot3 names stripped:            %3!10d!

h

8dot3 Name      FileId                Full Path

-------------   -------------------   -------------------------------------------------------------------------------------

P%1!-15.15ws! 0x%2!-16.16ws!    "%3"

tError removing short name from        "%2": %1!8x! %3

tError accessing                       "%2": %1!8x! %3

�Error writing to the log.  This operation has been aborted.

HThe directory path is too long.

P

The operation failed because registry entries refer to 8dot3 names in the

specified path.

For details on the affected registry keys please see the log:

  "%1"

�

For details on the operations performed please see the log:

  "%1"

HPlease input a valid directory.

�Stripping 8dot3 names on the system volume is not allowed.

DError creating the log file.

<Error parsing the volume.

�Stripping will not be performed on files with names longer than the maximum path length.

�Some registry keys will not be scanned because their names are too long.

4Scanning registry...

<

Scanning 8dot3 names...

@

Stripping 8dot3 names...

�

Error creating the default log file.  Please enter

fsutil 8dot3name strip /? to learn how to

specify a log file name.

T

Error parsing the target directory.

x

Due to an error, the strip command did not complete.

X

Could not open the target directory.

<

Invalid registry hive.

0Supports Hard Links

DSupports Extended Attributes

8Supports Open By FileID

,

Warning: You are about to strip shortnames on the system volume. This is not

recommended as it might cause unexpected behavior of installed applications

including the inability to uninstall.  This may result in a system that might

need to be reinstalled from scratch.

Usage: fsutil 8dot3name query [<Volume Path>]



When no volume is specified the global 8dot3name state is displayed.

When volume is specified the volumes 8dot3name state is displayed.



Sample command:

  "fsutil 8dot3name query"

  "fsutil 8dot3name query C:"

�
Usage: fsutil 8dot3name strip </t> </s> </f> </l log file> </v> DirectoryPath



This command permanently removes 8dot3 file names from your volume. It will

list the registry keys pointing to the stripped 8dot3names but will not modify

the affected registry keys. Stripping will not be performed on files with full

path names longer than the maximum path length of 260 characters.



***WARNING***

If there are affected registry keys and you decide to use the override

switch /f, it is recommended that you backup your volume as it may lead to

unexpected application failures, including the inability to uninstall.



  /t - Test mode - specifies that all operations should be performed

          except the actual stripping of the file names.

  /s - Recurse mode - specifies that this operation should also be

          applied to subdirectories.

  /f - Force mode - specifies that the directory should be stripped even

          if there are registry conflicts.

  /v - Verbose mode - specifies that all information logged should also

          be printed out to the console.

  /l - Specifies a log file to write to.  This must be followed by a path to the

          log file.  If this option is not specified the log file will be:

            "%%temp%%\8dot3_removal_log@(GMT YYYY-MM-DD HH-MM-SS).log"



Sample command:

  "fsutil 8dot3name strip /l mylogfile.log /s D:\MyData"

t

A reboot is required for this change to take effect

4Supports USN Journal

Usage: fsutil volume queryCluster <volume pathname> <cluster> [<cluster> ...]

   Eg: fsutil volume queryCluster C: 50 0x2000



   Attribute Value definitions:

   -----

   ^^^^^

   |||||- D = Data Attribute, I=Index Attribute, S=System Attribute, ?=Unknown

   ||||-- A = Deny defrag requests

   |||--- T = TxF system file

   ||---- S = NTFS System Metadata File

   |----- P = Page File

\Cluster 0x%1!016I64x! used by %2!s! %3!s!

h---- 8DOT3NAME Commands Supported ----



query   Query the current setting for the shortname behavior on the system

scan    Scan for impacted registry entries

set     Change the setting that controls the shortname behavior on the system

strip   Remove the shortnames for all files within a directory

�Usage: fsutil file queryFileID <filename>

   Eg: fsutil file queryFileID C:\testfile.txt

Usage: fsutil file queryFileNameById <volume pathname> <fileid>

   Eg: fsutil file queryFileNameById C:\ 0x00040000000001bf

�Usage: fsutil hardlink list <filename>

   Eg: fsutil hardlink list c:\foo.txt

(File ID is 0x%1

\A random link name to this file is %1!s!

NOTE: %1 is currently controlled by group policy.

      Changes to this setting will be superseded by the group policy setting.



�NOTE: %1 is currently controlled by group policy.

      It can only be changed by group policy.



�Usage: fsutil 8dot3name scan </s> </l log file> </v> DirectoryPath



This command scans the specified directory path looking for registry keys that

might be impacted if short names were stripped from this path.



  /s - Recurse mode - specifies that this operation should also be

          applied to subdirectories.

  /v - Verbose mode - specifies that all information logged should also

          be printed out to the console.

  /l - Specifies a log file to write to.  This must be followed by a path to the

          log file.  If this option is not specified the log file will be:

            "%%temp%%\8dot3_removal_log@(GMT YYYY-MM-DD HH-MM-SS).log"



Sample command:

  "fsutil 8dot3name scan /l mylogfile.log /s D:\MyData"

---- SECURITY Commands Supported ----



enumsds         Enumerate security descriptors

stats           Display security file statistics

�Usage: fsutil security enumsds [options] <volume pathname> [offset [count]]



 This command displays the contents of the NTFS/REFS security descriptor stream.

 By default every security descriptor starting from the beginning of the stream

 will be displayed.  You can optionally provide a starting byte offset within

 the stream, and limit the maximum number of security descriptors to display.



 Options:



  /bare   Display no extraneous output other than security descriptors.

  /flags  Describe individual flag bits in human readable form (no effect if

          used with /sddl).

  /sddl   Display security descriptors in a compact SDDL form, useful for

          automated processing (especially with /bare).  Without this option,

          security descriptors are displayed in a human readable form.



  Eg: fsutil security enumsds C:

�Usage: fsutil security stats <volume pathname>

   Eg: fsutil security stats C:

tSuccessfully ENABLED 8dot3name generation on "%1!s!"

tSuccessfully DISABLED 8dot3name generation on "%1!s!"

TAn unexpected value was encountered.

�The registry state is now: 0 (Enable 8dot3 name creation on all volumes).

�The registry state is now: 1 (Disable 8dot3 name creation on all volumes).

�The registry state is now: 2 (Per volume setting - the default).

�The registry state is now: 3 (Disable 8dot3 name creation on all non-system volumes).

�Usage: fsutil file queryExtents [/R] <filename> [<startingvcn> [<numvcns>]] [<csv>]



   /R : If <filename> is a reparse point, open it rather than its target

   <startingvcn> : First VCN to query (if omitted, start at VCN 0)

   <numvcns> : Number of VCNs to query (if omitted or 0, query until EOF)

   <csv> : Display the result in csv format



 Eg: fsutil file queryExtents C:\Temp\sample.txt

     fsutil file queryExtents /R C:\Temp\sample.txt

     fsutil file queryExtents C:\Temp\sample.txt 10

     fsutil file queryExtents C:\Temp\sample.txt 10 100

     fsutil file queryExtents C:\Temp\sample.txt csv

TNo extents matching specified range.

|VCN: 0x%1!-8I64x! Clusters: 0x%2!-8I64x! LCN: 0x%3!I64x!

�Usage: fsutil repair state [<volume pathname>]

   Eg: fsutil repair state C:

 Is ReadOnly

$Is ReadWrite

`  (translates to a zone size of %1!s!%2!s!)

�A local NTFS or ReFS volume is required for this operation.

|Offset: 0x%1!-8I64x!  Length: 0x%2!-8I64x!  Usage: %3!s!

�Usage: fsutil file queryValidData [/R] [/D] <filename>



   /R : If <filename> is a reparse point, open it rather than its target

   /D : Display detailed valid data information



 Eg: fsutil file queryValidData C:\testfile.txt

`

Global Corruption State:  0x%1!02x! - %2

�

Volume Name:       %1 (%2)

Corruption State:  0x%3!02x! - %4

Clean

0Full Chkdsk Needed

(Spot Fix Needed

0Online Scan Needed

0Spot Verify Needed

�Usage: fsutil fsInfo sectorInfo <volume pathname>

   Eg: fsutil fsInfo sectorInfo C:

�LogicalBytesPerSector :                                 %1!d!

PhysicalBytesPerSectorForAtomicity :                    %2!d!

PhysicalBytesPerSectorForPerformance :                  %3!d!

FileSystemEffectivePhysicalBytesPerSectorForAtomicity : %4!d!

Device Alignment :                                      %5

Partition alignment on device :                         %6

4Aligned (0x%1!.3x!)%0

<Not Aligned (0x%1!.3x!)%0

Unknown%0

`**** Online Scan is currently running ****

|**** Online Scan is currently running on this volume ****

�

Volume Name:       %1 (%2)

NTFS log recovery is not required.

DNTFS log recovery performed.

�

Volume Name:       %1 (%2)

NTFS log recovery is required.

 Valid Data

(Not Valid Data

`Valid Data Length is 0x%1!I64x! (%1!I64d!)

�Minimum record version supported : %1!d!

Maximum record version supported : %2!d!

(No Seek Penalty

4Performs Normal Seeks

(Trim Supported

0Trim Not Supported

�---- TIERING Commands Supported ----



clearFlags      Disable tiering behavior flags of a volume

queryFlags      Display the tiering behavior flags of a volume

regionList      List the regions of a volume and their respective storage tiers

setFlags        Enable tiering behavior flags of a volume

tierList        List the storage tiers associated with a volume

�Usage: fsutil tiering queryFlags <volume>

   Eg: fsutil tiering queryFlags D:

�

-----------------

Legend for flags:

-----------------



  /TrNH           NTFS and ReFS Only: For volumes with tiered storage, causes

                  Heat gathering to be disabled.

�Usage: fsutil tiering setFlags <volume> <flags>

   Eg: fsutil tiering setFlags C: /TrNH

�Usage: fsutil tiering clearFlags <volume> <flags>

   Eg: fsutil tiering clearFlags E: /TrNH

�Usage: fsutil tiering tierList <volume>

   Eg: fsutil tiering tierList X:

�Usage: fsutil tiering regionList <volume>

   Eg: fsutil tiering regionList F:

*NONE*%0

TCurrent flags on volume "%1!s!" : %0

PError! Invalid tiering flag: %1!s!

PError! Repeated tiering flag: %1!s!

0Enabling flags: %0

0Disabling flags: %0

tTotal Number of Storage Tiers for this volume: %1!d!

�Total Number of Storage Tiers returned by this operation: %1!d!

,    Tier # %1!d!:

8        Tier ID: %1!s!

0        Name: %1!s!

@        Description: %1!s!

<        Flags: 0x%1!08x!

l        Provisioned Capacity: 0x%1!016I64x! bytes

8        Media Type: %0

(*unspecified*%0

HDD%0

SSD%0

NVME%0

NVDIMM%0

hTotal Number of Regions for this volume: %1!d!

|Total Number of Regions returned by this operation: %1!d!

0   Region # %1!d!:

D        Offset: 0x%1!016I64x!

D        Length: 0x%1!016I64x!

Write range tracking: Enabled

Write range tracking chunk size: %1!I64d!

Write range tracking file size threshold: %2!I64d!

HWrite range tracking: Disabled

�Usage: fsutil usn enableRangeTracking [c=<chunk-size> s=<file-size-threshold>] <volume pathname>

   Eg: fsutil usn enableRangeTracking c=16384 s=67108864 C:

       fsutil usn enableRangeTracking c=0 s=0 C:

       fsutil usn enableRangeTracking C:

---- Commands Supported ----



8dot3name       8dot3name management

behavior        Control file system behavior

bypassIo        BypassIo management

dax             Dax volume management

devdrv          Developer volume management

dirty           Manage volume dirty bit

file            File specific commands

fsInfo          File system information

hardlink        Hard link management

objectID        Object ID management

quota           Quota management

repair          Self healing management

reparsePoint    Reparse point management

resource        Transactional Resource Manager management

sparse          Sparse file control

tiering         Storage tiering property management

trace           File system trace management

transaction     Transaction management

usn             USN management

volume          Volume management

wim             Transparent wim hosting management

LUsage: fsutil volume fileLayout [options] <volume pathname> *

       fsutil volume fileLayout [options] <volume pathname> <file id>

       fsutil volume fileLayout [options] <full file path>



Options:

   /v   Verbose mode - displays attribute buffer hex dump for $EA and $REPARSE_POINT.



 Eg: fsutil volume fileLayout C: *

     fsutil volume fileLayout C: 5

     fsutil volume fileLayout C: 0x00040000000001bf

     fsutil volume fileLayout C:\$MFT

     fsutil volume fileLayout C:\Windows

     fsutil volume fileLayout /v C:\windows

<No file entries returned

P

********* File 0x%1!016I64x! *********

File reference number   : 0x%1!016I64x!

File attributes         : 0x%2!08x!: %3!s!

File entry flags        : 0x%4!08x!

HExtra information not present.

�Creation Time           : %1!s!

Last Access Time        : %2!s!

Last Write Time         : %3!s!

Change Time             : %4!s!

LastUsn                 : %5!s!

OwnerId                 : %6!d!

SecurityId              : %7!d!

PFile name information not present.

LStreams information not present.

�Stream                  : 0x%8!03x!  %1!s!

    Attributes          : 0x%2!08x!: %3!s!

    Flags               : 0x%4!08x!: %5!s!

    Size                : %6!s!

    Allocated Size      : %7!s!

pUnknown %1!s! version. Expected %2!d!, found %3!d!.

HExtent information not present.

tExtent information was returned in an unknown format.

X    Extents             : %1!s! Extents

�                        : %1!s!: VCN: %2!s! Clusters: %3!s! LCN: %4!s!

�Usage : fsutil volume allocationReport [options] <volume pathname>



Options:

   /tier <tier type> - Displays allocation information for the selected storage tier only.

                         Supported tier types: capacity, performance.

   /v                - Verbose mode, displays each files under system file folders.



 Eg: fsutil volume allocationReport C:

     fsutil volume allocationReport /tier capacity C:

     fsutil volume allocationReport C: /v /tier performance

t

Total clusters              : %1!*s! (%2!*s! bytes)  %3!*s!%4!s!

Free clusters               : %5!*s! (%6!*s! bytes)  %7!*s!%8!s!

Reserved clusters           : %9!*s! (%10!*s! bytes)  %11!*s!%12!s!

Allocated clusters          : %13!*s! (%14!*s! bytes)  %15!*s!%16!s!

Cluster Size                : %19!d! Bytes



The allocation is split between:

System files                : Count: %17!s!  Allocated: %18!s! bytes (%20!s!%21!s!)

    FileID                Allocated%1!.*s!    File name

    ------------------    %2!.*s!    -----------------------------

�    Other system files      : Count: %1!s!  Allocated: %2!s! bytes (%3!s!%4!s!)

    Other system files under %1!s! folder:

        Count               : %2!s!

        Allocated           : %3!s! bytes (%4!s!%5!s!)

�

%1!-28s!: Allocated: %2!s! bytes (%3!s!%4!s!)

    Files                   : Count: %5!s!  Allocated: %6!s! bytes (%7!s!%8!s!)

    Folders                 : Count: %9!s!  Allocated: %10!s! bytes (%11!s!%12!s!)

�

User files                  : Count: %1!s!  Allocated: %2!s! bytes (%3!s!%4!s!)

�

User folders                : Count: %1!s!  Allocated: %2!s! bytes (%3!s!%4!s!)

     Default streams         : %1!s!

        With allocation     : %2!s!

        Space allocated     : %3!s! bytes (%10!s!%11!s!)

    Named streams           : %4!s!

        With Allocation     : %5!s!

        Space allocated     : %6!s! bytes (%12!s!%13!s!)

    Local metadata streams  : %7!s!

        With Allocation     : %8!s!

        Space allocated     : %9!s! bytes (%14!s!%15!s!)

DWithin these files there are:

HWithin these folders there are:

X    Compressed              : %1!s!

        Total allocated     : %2!*s! bytes (%3!*s!%4!s!)

        Total size          : %5!*s! bytes (%6!*s!%7!s!)

        Savings             : %8!s!%%

    Sparse                  : %9!s!

        Total allocated     : %10!*s! bytes (%11!*s!%12!s!)

        Total size          : %13!*s! bytes (%14!*s!%15!s!)

        Savings             : %16!s!%%

    Encrypted               : %17!s!

        Total allocated     : %18!s! bytes (%19!s!%20!s!)



    With named streams      : %21!s!

        Compressed          : %22!s!

        Sparse              : %23!s!

        Encrypted           : %24!s!

    With no allocation      : %25!s!

�Usage   : fsutil usn readJournal <volume pathname> [options]

Options : minVer=<number> - Minimum Major Version of USN_RECORD to return. Default=2.

        : maxVer=<number> - Maximum Major Version of USN_RECORD to return. Default=4.

        : startUsn=<USN number> - USN to start reading the USN journal from. Default=0.

        : csv - Print the USN records in CSV format.

        : wait - wait for more records to be added to the USN journal.

        : tail - starts reading at the end of the USN journal. If wait is not specified it will just return. Overrides any startusn value.



     Eg : fsutil usn readJournal C:

        : fsutil usn readJournal C: minVer=2 maxVer=3 startUsn=88

        : fsutil usn readJournal C: startUsn=0xF00

        : fsutil usn readJournal C: wait

        : fsutil usn readJournal C: wait tail

        : fsutil usn readJournal C: csv

�USN Journal ID    : 0x%1!016I64x!

First USN         : %2!I64d!

Next USN          : %3!I64d!

Start USN         : %4!I64d!

Min major version : Supported=%5!d!, requested=%6!d!

Max major version : Supported=%7!d!, requested=%8!d!

(

Usn               : %1!I64d!

File name         : %2!.*ws!

File name length  : %3!d!

Reason            : 0x%4!08x!: %5!s!

Time stamp        : %6!s!

File attributes   : 0x%7!08x!: %8!s!

File ID           : %9!s!

Parent file ID    : %10!s!

Source info       : 0x%11!08x!: %12!s!

Security ID       : %13!d!

Major version     : %14!hu!

Minor version     : %15!hu!

Record length     : %16!u!

�

Usn               : %1!I64d!

Reason            : 0x%2!08x!: %3!s!

File ID           : %4!s!

Parent file ID    : %5!s!

Source info       : 0x%6!08x!: %7!s!

Major version     : %8!hu!

Minor version     : %9!hu!

Record length     : %10!u!

Number of extents : %11!hu!

Remaining extents : %12!hu!

Extents           :

�

Major version     : %1!hu!

Minor version     : %2!hu!

Record length     : %3!u!



Usn,File name,File name length,Reason #,Reason,Time stamp,File attributes #,File attributes,File ID,Parent file ID,Source info #,Source info,Security ID,Major version,Minor version,Record length,Number of extents,Remaining extents,Extent,Offset,Length

   (Enabled)

$  (Disabled)

t  (System Managed, Last Access Time Updates DISABLED)

t  (System Managed, Last Access Time Updates ENABLED)

p  (User Managed, Last Access Time Updates DISABLED)

p  (User Managed, Last Access Time Updates ENABLED)

   (Seconds)

�Usage: fsutil behavior set disableLastAccess <0-3>



Controls if file systems will update the Last Access Time when a file is

read.



 Values: 0x0 - User Managed, Last Access Time Updates ENABLED

         0x1 - User Managed, Last Access Time Updates DISABLED

         0x2 - System Managed, Last Access Time Updates ENABLED

         0x3 - System Managed, Last Access Time Updates DISABLED



 - When "System Managed" is enabled it allows the system to enable/disable

   last access time updates based on system policy.

 - When group policy controls this setting the "System Managed" state can not

   be set and is not displayed.



This operation takes effect immediately (no reboot required)

�Usage: fsutil behavior query disableWriteAutoTiering <volume pathname>



 Values: 0 - Write auto tiering is enabled on the given ReFS volume

         1 - Write auto tiering is disabled on the given Refs volume

�Usage: fsutil behavior set disableWriteAutoTiering <volume pathname> <0|1>



 Values: 0 - Enable write auto tiering on the given ReFS volume (default)

         1 - Disable write auto tiering on the given ReFS volume



 Eg: fsutil behavior set disableWriteAutoTiering F: 1



This operation takes effect immediately (no reboot required)

XUsage: fsutil behavior set bugCheckOnCorrupt <0|1>



 Values: 0 - The system will NOT bugcheck when NTFS detects a corruption in its metadata. (default)

         1 - The system will bugcheck when NTFS detects a corruption in its metadata



A reboot is required for this change to take effect

�Usage: fsutil behavior set disableCompression <0|1>



 Values: 0 - NTFS file compression support is enabled. (default)

         1 - NTFS file compression support is disabled.



A reboot is required for this change to take effect

�Usage: fsutil behavior query enableReallocateAllDataWrites <volume pathname>



 Values: 0 - Reallocating all data writes is disabled on the given volume

         1 - Reallocating all data writes is enabled on the given volume

�Usage: fsutil behavior set enableReallocateAllDataWrites <volume pathname> <0|1>



 Values: 0 - Disable Reallocating all data writes on the given volume (default)

         1 - Enable Reallocating all data writes on the given volume



 Eg: fsutil behavior set enableReallocateAllDataWrites F: 1



This operation takes effect immediately (no reboot required)

T  (Last Access Updates are DISABLED)

P  (Last Access Updates are ENABLED)

l  (Allow Extended Characters in short file names)

|  (Do not allow Extended Characters in short file names)

�Usage: fsutil behavior set allowExtChar <0|1>



Controls usage of characters from the extended character set (including

diacritic characters) to be used in short file names on NTFS volumes.



 Values: 0 - Do not allow extended characters in short names (default)

         1 - Allow extended characters in short names



A reboot is required for this change to take effect

�  (The system will bugcheck when NTFS detects a corruption in its metadata)

�  (The system will NOT bugcheck when NTFS detects a corruption in its metadata)

@  (Compression is DISABLED)

@  (Compression is ENABLED)

�  (Allows NTFS to stop compressing highly fragmented compressed files)

�  (Requires NTFS to compress the full contents of compressed files)

�Usage: fsutil behavior set disableCompressionLimit <0|1>



When a compressed file on an NTFS volume reaches a certain level of

fragmentation, rather than failing to extend the file, NTFS stops compressing

additional extents of the file. This was done to allow compressed files to be

larger than they normally would be. Setting this value to TRUE (1) disables

this feature which limits the size of compressed files on the system. We do not

recommend disabling this feature.



 Values: 0 - Allow NTFS to stop compressing highly fragmented compressed files (default)

         1 - Requires NTFS to compress the full contents of compressed files



This operation takes effect immediately (no reboot required)

�Usage: fsutil behavior set disableDeleteNotify [NTFS|ReFS] <0|1>



Controls whether TRIM operations are sent to the storage device when clusters

are freed by the file system.  The TRIM operation allows storage devices like

SSD's to more efficiently manage its free and used space.



Also controls whether format.exe sends TRIMs when a volume is formatted.

If neither NTFS nor ReFS are specified, NTFS is assumed.



 Values: 0 - Allow TRIM operations to be sent to storage devices. (default)

         1 - Do not allow TRIM operations to be sent to storage devices



This operation takes effect immediately (no reboot required)

�  (Allows TRIM operations to be sent to the storage device)

�  (Do not allow TRIM operations to be sent to storage devices)

�Usage: fsutil behavior set disableEncryption <0|1>



 Values: 0 - NTFS file encryption support is enabled. (default)

         1 - NTFS file encryption support is disabled.



A reboot is required for this change to take effect

@  (Encryption is DISABLED)

<  (Encryption is ENABLED)

t  (All NTFS file metadata optimizations are ENABLED)

�  (Full NTFS file metadata optimizations are DISABLED, Incremental optimizations are ENABLED)

�  (Incremental NTFS file metadata optimizations are DISABLED, full optimizations are ENABLED)

t  (All NTFS file metadata optimizations are DISABLED)

8Usage: fsutil behavior set encryptPagingFile <0|1>



Controls whether the PageFile on NTFS volumes is encrypted or not.



 Values: 0 - PageFile encryption is DISABLED (default)

         1 - PageFile encryption is ENABLED



A reboot is required for this change to take effect

P  (PageFile encryption is DISABLED)

P  (PageFile encryption is ENABLED)

Usage: fsutil behavior set memoryUsage <1|2>



This is a multiplier used by NTFS to control how much memory can be consumed to

cache filesystem metadata



 Values: 1 - Uses the default memory consumption values for caching NTFS metadata (default)

         2 - Doubles the memory consumption used for caching NTFS metadata



A reboot is required for this change to take effect

�  (The default memory consumption values are used for caching NTFS metadata)

�  (The memory consumption values are doubled for caching NTFS metadata)

Usage: fsutil behavior set mftZone <1-100>



This is a multiplier which controls the size of the MFT Zone.  The MFT Zone is

a space reserved on NTFS volumes for the $MFT file to grow into.  This is used

to minimize the fragmentation of $MFT.



This value is multiplied by 200 MB and defines the initial Zone size when a

volume is first mounted.  Once the initial Zone is consumed new Zones are

created in 200 MB chunks.



The default value is 1.



A reboot is required for this change to take effect

(Usage: fsutil behavior set quotaNotify <1-4,294,967,295> seconds



Controls how frequently NTFS quota violations are recorded in the system event log.

This value is in seconds, the default is 3600 seconds (1 hour).



A reboot is required for this change to take effect

\Usage: fsutil behavior set enableNonpagedNtfs <0|1>



By default NTFS allocates most of its internal data structures and code out of

pageable memory.  When enabled, NTFS switches to allocating all of its internal

data structures and code out of non-pageable memory.  This reduces the number of

pagefaults that occur while processing file system operations.



 Values: 0 - NTFS uses pageable memory for most allocations (default)

         1 - NTFS uses non-pageable memory for all allocations



A reboot is required for this change to take effect

p  (NTFS uses pageable memory for most allocations)

t  (NTFS uses non-pageable memory for all allocations)

�NOTE: %1 is currently controlled by group policy.

      Showing current group policy state:



�Usage: fsutil file queryFileNameById <volume pathname> <fileid>

   Eg: fsutil file queryFileNameById C:\ 0x00040000000001bf



This command also takes 128 bit fileid from ReFS.

Usage: fsutil file queryFileNameById <volume pathname> <upper 64 bits fileid> <lower 64 bits fileid>

   Eg: fsutil file queryFileNameById C:\ 0x600 0x10

*NONE*

Read only

Hidden

System

Directory

Archive

Normal

Temporary

Sparse

$Reparse point

 Compressed

Offline

0Not content indexed

Encrypted

,Integrity stream

Virtual

$No scrub data

Immovable

Pinned

Resident

4No clusters allocated

(Data overwrite

 Data extend

(Data truncation

4Named data overwrite

,Named data extend

4Named data truncation

 File create

 File delete

EA change

(Security change

,Rename: old name

,Rename: new name

,Indexable change

,Basic info change

,Hard link change

0Compression change

,Encryption change

,Object ID change

4Reparse point change

$Stream change

,Transacted change

,Integrity change

Close

(Data management

Auxiliary

8Replication management

DClient replication management

�Error! Flags not supported by this operation on volume "%1": %0

�---- WIM Commands Supported ----



enumFiles           Enumerate WIM backed files

enumWims            Enumerate backing WIM files

removeWim           Remove a WIM from backing files

queryFile           Query the origin of a specific file



HObjects enumerated: %1!I64d!



TThis file is not a WIM backed file.



$%1!s! failed:

hWim DataSource: %1!I64d!

Wim Hash:       %2!s!

@Wim State:      NOT ACTIVE

<Wim State:      SUSPENDED

8Wim State:      UNKNOWN

@Wim State:      Operational

�Usage: fsutil wim queryFile <filename>

   Eg: fsutil wim queryFile C:\Windows\Notepad.exe

�Usage: fsutil wim enumWims <drive name>

   Eg: fsutil wim enumWims C:

�Usage: fsutil wim enumFiles <drive name> <data source>

   Eg: fsutil wim enumFiles C: 0

�Usage: fsutil wim removeWim <drive name> <data source>

   Eg: fsutil wim removeWim C: 9

�Cannot remove a wim while files still refer to it.

Use "fsutil wim enumFiles" to display the list of files.

$Usage: fsutil fsInfo refsInfo <volume pathname> <Flags>



 <Flags>

   /r : Reset ReFS statistics to zero



 Eg: fsutil fsInfo refsInfo C:

(REFS Volume Serial Number :                0x%1

REFS Volume Version :                      %2!d!.%3!d!

REFS Driver Maximum Supported Version :    %4!d!.%5!d!

Number Sectors :                           0x%6

Total Clusters :                           0x%7

Free Clusters  :                           0x%8

Total Reserved :                           0x%9

Bytes Per Sector  :                        %10!d!

Bytes Per Physical Sector :                %12!d!

Bytes Per Cluster :                        %11!d!

Fast Tier Data Fill Percentage :           %13!d!.%14!d!%%

Slow Tier Data Fill Percentage :           %15!d!.%16!d!%%

Fast Tier to Slow Tier Rate (Clusters/s) : %17!d!

Metadata Checksum Type :                   %18!s!

Data Checksum Type :                       %19!s!



pA local REFS volume is required for this operation.

@Usage: fsutil file optimizeMetadata [/A] <filename>



   /A : Display metadata usage



 Eg: fsutil file optimizeMetadata c:\largefragmentedfile.txt

     fsutil file optimizeMetadata c:\$Secure:$SDS

     fsutil file optimizeMetadata c:\$MFT

     fsutil file optimizeMetadata c:\

0Usage: fsutil file queryOptimizeMetadata <filename>

   Eg: fsutil file queryOptimizeMetadata c:\largefragmentedfile.txt

       fsutil file queryOptimizeMetadata c:\$Secure:$SDS

       fsutil file queryOptimizeMetadata c:\$MFT

       fsutil file queryOptimizeMetadata c:\

pFile metadata optimization                  : None

|File metadata optimization                  : In progress

tFile metadata optimization                  : Pending

�File metadata optimization                  : Unknown (%1!d!)

lAttribute list size                         : %1!u! (%1!#x!)

File metadata space used                    : %2!u! (%2!#x!)

File metadata space allocated               : %3!u! (%3!#x!)

File metadata space usage                   : %4!u!%%

File records count(s)                       : %5!u!

Number of resident attribute(s)             : %6!u!

Number of nonresident attribute(s)          : %7!u!

Total number of attributes                  : %8!I64u!

Total active file metadata optimization(s)  : %9!u!

Total pending file metadata optimization(s) : %10!u!

TFile metadata optimization completed.

�                                              Before                  After

Attribute list size                         : %1!u! (%1!#x!) %9!*u! (%10!#x!)

File metadata space used                    : %2!u! (%2!#x!) %11!*u! (%12!#x!)

File metadata space allocated               : %3!u! (%3!#x!) %13!*u! (%14!#x!)

File metadata space usage                   : %4!u!%% %15!*u!%%

File records count(s)                       : %5!-7u!                 %16!u!

Number of resident attribute(s)             : %6!-7u!                 %17!u!

Number of nonresident attribute(s)          : %7!-7u!                 %18!u!

Total number of attributes                  : %8!-7I64u!                 %19!u!

Total active file metadata optimization(s)  : ---                     %20!u!

Total pending file metadata optimization(s) : ---                     %21!u!

�Usage: fsutil behavior query DisableFileMetadataOptimization

�Usage: fsutil behavior set DisableFileMetadataOptimization <0-3>



Controls the metadata optimizations that NTFS is allowed to perform on files

that require multiple MFT records.



 Values: 0x0 - Enable all file metadata optimizations (default)

         0x1 - Disable full file metadata optimizations only

         0x2 - Disable incremental file metadata optimizations only

         0x3 - Disable all file metadata optimizations



This operation takes effect immediately (no reboot required)

�

This operation takes effect immediately (no reboot required)

�VCN: 0x%1!-8I64x! Clusters: 0x%2!-8I64x! LCN: 0x%3!I64x! All: 0x%4!-8I64x! Pop: 0x%5!-8I64x! Err: 0x%6!-8I64x!

8

Read Cache Totals

    Allocated : %1!-8I64u!  (0x%1!-8I64x!)

    Populated : %2!-8I64u!  (0x%2!-8I64x!)

    In Error  : %3!-8I64u!  (0x%3!-8I64x!)

Cache size in bytes :             0x%1

Cache allocated in bytes :        0x%2

Cache populated in bytes :        0x%3

Cache bytes in error :            0x%4

Cache allocation size in bytes :  %5!d!

Total cache blocks :              %6!d!

Cache blocks free :               %7!d!

Cache blocks in error :           %8!d!

Cache transactions outstanding :  %9!d!

Max Cache tx outstanding :        %10!d!



Cache block allocations :         %11!d!

Cache invalidations :             %12!d!

Invalidations in bytes :          0x%13

Cache block initial writes :      %14!d!

Initial writes in bytes :         0x%15

Cache block updates :             %16!d!

Cache updates in bytes :          0x%17

Cache over reads in bytes :       0x%18



Cache hits :                      %19!d!

Bytes read from cache :           0x%20

Cache misses :                    %21!d!

Bytes read for misses :           0x%22

Cache hit rate as percentage :    %23!d!

Metadata size in bytes :          0x%24

Metadata bytes written :          0x%25

`        Flags: 0x%1!08x!    No Seek Penalty

X        Flags: 0x%1!08x!    Read Cache

`This volume has container rotation active.

xThe volume state is: 1 (write auto tiering is DISABLED)

xThe volume state is: 0 (write auto tiering is ENABLED)

�Total free bytes        : %1!*s! (%2!*s!%3!s!)

Total bytes             : %4!*s! (%5!*s!%6!s!)

Total quota free bytes  : %7!*s! (%8!*s!%9!s!)

Total metadata bytes    : %10!*s! (%11!*s!%12!s!)

�MftReads :                      %1

MftReadBytes :                  %2

MftWrites :                     %3

MftWriteBytes :                 %4

Mft2Writes :                    %5

Mft2WriteBytes :                %6

RootIndexReads :                %7

RootIndexReadBytes :            %8

RootIndexWrites :               %9

RootIndexWriteBytes :           %10

BitmapReads :                   %11

BitmapReadBytes :               %12

BitmapWrites :                  %13

BitmapWriteBytes :              %14

MftBitmapReads :                %15

MftBitmapReadBytes :            %16

MftBitmapWrites :               %17

MftBitmapWriteBytes :           %18

UserIndexReads :                %19

UserIndexReadBytes :            %20

UserIndexWrites :               %21

UserIndexWriteBytes :           %22

LogFileReads :                  %23

LogFileReadBytes :              %24

LogFileWrites :                 %25

LogFileWriteBytes :             %26

LogFileFull :                   %27

DiskResourceFailure :           %28

VolumeTrimCount :               %29

AvgVolumeTrimTime (ms) :        %30

AvgVolumeTrimSize (KB) :        %31

AvgVolumeTrimSpeed (KB/s) :     %32

VolumeTrimSkippedCount :        %33

VolumeTrimSkippedSize (KB) :    %34

FileLevelTrimCount :            %35

AvgFileLevelTrimTime (ms) :     %36

AvgFileLevelTrimSize (KB) :     %37

AvgFileLevelTrimSpeed (KB/s) :  %38

NtfsFillStatInfoFromMftRecordCalledCount :                              %39

NtfsFillStatInfoFromMftRecordBailedBecauseOfAttributeListCount :        %40

NtfsFillStatInfoFromMftRecordBailedBecauseOfNonResReparsePointCount :   %41

@File System Type :     REFS

DFile System Type :     ExFAT

HFile System Type :     UNKNOWN

�The FSUTIL utility requires a local NTFS/ReFS/FAT/FAT32/ExFAT volume for this operation.

�CreateHits :           %1

SuccessfulCreates :    %2

FailedCreates :        %3

NonCachedReads :       %4

NonCachedRead Bytes :  %5

NonCachedWrites :      %6

NonCachedWrite Bytes : %7

NonCachedDiskReads :   %8

NonCachedDiskWrites :  %9

$Is DAX volume

 DAX capable

(Not DAX capable

`Successfully DISABLED TxF on volume "%1!s!"

`Successfully ENABLED TxF on volume "%1!s!"

dThe volume TxF state is: 1 (TxF is DISABLED)

`The volume TxF state is: 0 (TxF is ENABLED)

usage: fsutil behavior set disableTxF <Volume Path> <0|1>



Changes the TxF enablement state of the given NTFS volume



TxF is an NTFS feature that provides transactional semantics to file system

operations.  The Windows servicing stack uses TxF so it is not recommended to

disable TxF on the C: volume.  TxF is a deprecated Windows feature.



 Values: 0 - TxF is enabled on the given volume

         1 - TxF is disabled on the given volume



This operation takes effect immediately (no reboot required)

usage: fsutil behavior query disableTxF <Volume Path>



The current TxF enablement state of the given volume is displayed

@Supports Integrity Streams

8Supports Block Cloning

0Supports Sparse VDL

8Supports File Ghosting

�Usage: fsutil file setEOF <filename> <length>

   Eg: fsutil file setEOF C:\testfile.txt 1000

0File %1!s! eof set

<Usage: fsutil volume list

hPossible volumes and current mount points are:

TStream information data not present.

�    DSC                 : Tier Class:    %1!s!

                        : Flags:         0x%2!08x!: %3!s!

DDesired Storage Class change

$Unspecified%0

 Capacity%0

$Performance%0

NVME%0

NVDIMM%0

(Shingled Disk%0

8Mixed Read Optimized%0

Slowest%0

Fastest%0

Mandatory

Maximum

Minimum

(Can be promoted

(Can be demoted

4Inherited from parent

4Inherited from volume

8Has Parsed Information

|Link (ParentID: Name)   : 0x%1!016I64x!: %2!-13s!: %3!s!

DOS Name

NTFS Name

 HLINK Name

XReturns Handle Close Result Information

`Stream Optimal Write Size :       0x%1!x!

Stream Granularity Size :         0x%2!x!

Minimum Stream ID :               0x%3!x!

Maximum Stream ID :               0x%4!x!

VCN: 0x%1!-8I64x! Clusters: 0x%2!-8I64x! LCN: 0x%3!-8I64x! Ref: 0x%4!-5x! All: 0x%5!-8I64x! Pop: 0x%6!-8I64x! Err: 0x%7!-8I64x!

�VCN: 0x%1!-8I64x! Clusters: 0x%2!-8I64x! LCN: 0x%3!-8I64x! Ref: 0x%4!-5x!

�Usage: fsutil file queryExtentsAndRefCounts [/R] <filename> [<startingvcn> [<numvcns>]]



   /R : If <filename> is a reparse point, open it rather than its target

   <startingvcn> : First VCN to query (if omitted, start at VCN 0)

   <numvcns> : Number of VCNs to query (if omitted or 0, query until EOF)



 Eg: fsutil file queryExtentsAndRefCounts C:\Temp\sample.txt

\However, the volume does not support TxF.

lHowever, being a DAX volume TxF is not supported.

�Usage: fsutil volume queryNumaInfo <volume path>

   Eg: fsutil volume queryNumaInfo c:

XThe given volume is in Numa node: %1!u!

$NTFS+DOS Name

T                                                          Cluster Count     %% of Tier

                                                          -------------     ---------

Size of randomly writable tier                  : %1 %2   %3!#16I64x!

Free space in randomly writable tier            : %4 %5   %6!#16I64x!          %7!3d!%%

Size of SMR tier                                : %8 %9   %10!#16I64x!

Free space in SMR tier                          : %11 %12   %13!#16I64x!          %14!3d!%%

Usable free space in SMR tier                   : %15 %16   %17!#16I64x!          %18!3d!%%

Recoverable Cluster(s)*                         : %19 %20   %21!#16I64x!          %22!3d!%%

Free Space Efficiency                           : %23!d!%%

Garbage collection current band fill percentage : %24!d!%%

�Garbage collection state (last status)          : Inactive (%1!x!)

|Garbage collection state                        : Paused

|Garbage collection state                        : Active

�Garbage collection state                        : Active Full Speed

|Garbage collection state                        : Unknown

�Usage: fsutil volume smrInfo <volume pathname>

   Eg: fsutil volume smrInfo C:

�Usage: fsutil volume smrGC <volume pathname> Action=start IoGranularity=<val>

       fsutil volume smrGC <volume pathname> Action={startfullspeed|pause|stop}

   Eg: fsutil volume smrGC D: Action=start IoGranularity=0x10000

<

        Tier Class: %0

Pinned

Unpinned

4Recall on data access

XSupports POSIX-style Unlink and Rename

�Usage: fsutil file setStrictlySequential <filename>

   Eg: fsutil file setStrictlySequential C:\testfile.txt

PFile %1!s! set strictly sequential

dZero-length file required for this operation.

 KB%0

 MB%0

 GB%0

 TB%0

�

* Note that up to %1!d! MB (%2!d! SMR Bands) of recoverable clusters may not be garbage collectible.

4Tag value: Directory

�---- DAX Commands Supported ----



queryFileAlignment        Query file alignment on dax volume

`Usage   : fsutil dax queryFileAlignment <filename> [options]

Options : q=<query flag>        - Query flag, see value options below: (Default is both)

            value: large        - Query for large page alignment.

                   huge         - Query for huge page alignment.

                   both         - Query for both large and huge page alignment.

            ** Note: huge page alignment query is limited to 64-bit architectures.

          n=<number of ranges>  - Number of output ranges. Default=all ranges.

          s=<file offset>       - Starting file offset of the range. Default=0.

          l=<length in bytes>   - Range length in bytes. Default=MAXLONGLONG-StartOffset.



   Eg : fsutil dax queryFileAlignment C:\Temp\sample.txt

      : fsutil dax queryFileAlignment C:\Temp\sample.txt q=large

      : fsutil dax queryFileAlignment C:\Temp\sample.txt q=huge n=10

      : fsutil dax queryFileAlignment C:\Temp\sample.txt q=both s=0x100 l=0x10000

      : fsutil dax queryFileAlignment C:\Temp\sample.txt q=both n=10 s=0x100 l=0x10000

@

  File Region Alignment:

@

  No Regions were found.

�

    Region        Alignment      StartOffset         LengthInBytes

|    %1!-8d!      %2!#-9s!      %3!-#18I64x!  %4!-#18I64x!

�Usage  : fsutil file layout [options] <filename>



Options:

   /v   Verbose mode - displays attribute buffer hex dump for $EA and

        $REPARSE_POINT.



 Eg: fsutil file layout C:\testfile.txt

     fsutil file layout /v C:\testfile.txt

�VCN: 0x%1!-8I64x! Clusters: 0x%2!-8I64x! LCN: 0x%3!-16I64x! TierClass: %4!s!

4Is Thinly-Provisioned

8Not Thinly-Provisioned

�Is Thinly-Provisioned, SlabSize :                       %1!s! bytes (%2!s!%3!s!)

�Usage: fsutil volume thinProvisioningInfo <volume pathname>

   Eg: fsutil volume thinProvisioningInfo C:

@%1 is not a tiered volume.

�        %1!-20s!: File ID 0x%2!016I64x!. Total allocated: %3!s! bytes.

XAllocation report for "Capacity" tier:

\Allocation report for "Performance" tier:

H

VCN,Clusters,LCN,All,Pop,Err

D

VCN,Clusters,LCN,TierClass

0

VCN,Clusters,LCN

�Warning: Huge page alignment query is limited to 64-bit architectures.



DUsage: fsutil file setCaseSensitiveInfo <directory name> [<enable>|<disable>] [recursive [depth]]

Options:

    enable      - Enable case sensitive attribute on <directory name>

                  (Default if not specified).

    disable     - Disable case sensitive attribute on <directory name>.

    recursive   - Recursively traverse and set case sensitive attribute on subdirectories.

    depth       - Specifies the depth of subdirectories to traverse and set case sensitive

                  attribute on. A depth of 0 is the same as not specifying the 'recursive'

                  option. When depth is notspecified, we'll travese all subdirectories.



Eg: fsutil file setCaseSensitiveInfo C:\TempFolder enable

    fsutil file setCaseSensitiveInfo C:\TempFolder disable

    fsutil file setCaseSensitiveInfo C:\TempFolder enable recursive

    fsutil file setCaseSensitiveInfo C:\TempFolder enable recursive 2

tCase sensitive attribute on directory %1 is enabled.

tCase sensitive attribute on directory %1 is disabled.

Usage: fsutil file queryCaseSensitiveInfo <directory name> [recursive [depth]]

Options:

    recursive   - Recursively traverse and query case sensitive attribute on subdirectories.

    depth       - Specifies the depth of subdirectories to traverse and query case sensitive

                  attribute on. A depth of 0 is the same as not specifying the 'recursive'

                  option. When depth is not specified, we'll travese all subdirectories.



Eg: fsutil file queryCaseSensitiveInfo C:\TempFolder

    fsutil file queryCaseSensitiveInfo C:\TempFolder recursive

    fsutil file queryCaseSensitiveInfo C:\TempFolder recursive 2

�Error: Setting case sensitive attribute on %1 is not supported.

dError: Invalid Windows Directory encountered.

�---- STORAGERESERVE Commands Supported ----



query          Query storage reserve area(s) of a volume

repair         Repair storage reserve area(s) of a volume

findByID       Find files by storage reserve ID

Usage: fsutil storageReserve define <volume pathname> <areaspec> [; <areaspec> ...]



   <areaspec>        : <id> [<space guarantee> [<area flags>]]

   <id>              : storage reserve ID (1 to 15)

   <space guarantee> : the space guarantee in MB (default 0)

   <area flags>      : optional storage reserve area flags



 Eg: fsutil storageReserve define C: 1 0x800 ; 2 0x500

�Usage: fsutil storageReserve update <volume pathname> <areaspec> [; <areaspec> ...]



   <areaspec>        : <id> [<space guarantee> [<area flags>]]

   <id>              : storage reserve ID (1 to 15)

   <space guarantee> : the space guarantee in MB (default 0)

   <area flags>      : optional storage reserve area flags



 Eg: fsutil storageReserve update C: 2 0

�Usage: fsutil storageReserve query <volume pathname> [<id> ...]

   Eg: fsutil storageReserve query C:

0

Reserve ID:       %1!d!

Flags:            0x%2!08lx!

Space Guarantee:  0x%3!-16I64x!(%4!I64u! MB)

Space Used:       0x%5!-16I64x!(%6!I64u! MB)

�Usage: fsutil storageReserve delete <volume pathname> [<id> ...]

   Eg: fsutil storageReserve delete C:

�Usage: fsutil storageReserve repair <volume pathname> [<id> ...]

   Eg: fsutil storageReserve repair C:

LNo storage reserve area(s) found.

�Usage: fsutil storageReserve setID <filename> <id>

   Eg: fsutil storageReserve setID C:\testfile.txt 2

�Usage: fsutil storageReserve queryID <filename>

   Eg: fsutil storageReserve queryID C:\testfile.txt

�Usage: fsutil storageReserve findByID [options] <volume pathname> *

       fsutil storageReserve findByID [options] <volume pathname> <id>



Options:

   /v   Verbose mode - displays hex dump for $EA and $REPARSE_POINT data.



 Eg: fsutil storageReserve findByID c: *

     fsutil storageReserve findByID C: 2

     fsutil storageReserve findByID /v C: 2

None

Hard

Soft

(*UpdateScratch*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

*UNKNOWN*

HStorageReserveId        : %1!d!

�    ** BTT (Block Translation Table) enabled on this volume.

TBTT (Block Translation Table) enabled

 PB%0

�Usage: fsutil volume flush <volume pathname>

   Eg: fsutil volume flush C:

�Usage: fsutil volume queryLabel <volume pathname>

   Eg: fsutil volume queryLabel C:

�Usage: fsutil volume setLabel <volume pathname> <label>

   Eg: fsutil volume flush C: "my volume"

PVolume Label for "%1" is "%2!*.*s!"

x    0x%1!016I64x!    %2!*s! bytes  (%3!*s!%4)    %5!s!

tSuccessfully set "%1!*.*s!" as volume label for "%3"

�The volume state is: 1 (reallocating all data writes is ENABLED)

�The volume state is: 0 (reallocating all data writes is DISABLED)

lTrying to open the volume with volume GUID path.

�Usage: fsutil file queryEA <file path>

   Eg: fsutil file queryEA C:\TempFile

t

The file %1 does not have extended attributes (EA).

�Extended attributes (EA) Buffer corrupts at offset %1!d! - buffer too small.

�Extended attributes (EA)  corrupt at offset %1!d! - NextEntryOffset is incorrect.

�Extended attributes (EA)  corrupt at offset %1!d! - empty EaName in list.

�Extended attributes (EA)  corrupt at offset %1!d! - EaName has NULL character.

�Extended attributes (EA)  corrupt at offset %1!d! - EaName is not NULL-terminated.

�

Extended Attributes (EA) information for file %1:



Total Ea Size: 0x%2!-8x!

�

Ea Buffer Offset: %1!-8x!

Ea Name: %2

Ea Value Length: %3!-8x!

`Stream information data buffer not present.

(    Size                : %1!*s! (%2!*s!%3!s!)

    Allocated Size      : %4!*s! (%5!*s!%6!s!)

    Vdl                 : %7!*s! (%8!*s!%9!s!)

d    Ea Information      : Ea Size: 0x%1!-8x!

0                        : Ea Buffer Offset: 0x%1!-8x!

                        : Ea Name: %2

                        : Ea Value Length: 0x%3!-8x!

x    Reparse Data        : Reparse Tag Value : 0x%1!08x!

�                        : Substitue Name offset: %1!d!

                        : Substitue Name length: %2!d!

                        : Print Name offset:     %3!d!

                        : Print Name Length:     %4!d!

|                        : Substitute Name:       %1!.*s!

|                        : Print Name:            %1!.*s!

�                        : Vendor ID:            %1!s!

                        : Qualifier:            0x%2!08x!

                        : Version:              0x%3!08x!

                        : Global Flags:         0x%4!08x!

                        : Num Data Entries:     %5!d!

                        : File ID:              %6!s!

                        : Data:

                        : Flags:                0x%7!08x!

                        : Migration Time:       %8!s!

                        : HSM ID:               %9!s!

                        : Bag ID:               %10!s!

                        : File Start:           0x%11!08x!.%12!08x!

                        : File Size:            0x%13!08x!.%14!08x!

                        : Data Start:           0x%15!08x!.%16!08x!

                        : Data Size:            0x%17!08x!.%18!08x!

                        : File Version:         0x%19!08x!.%20!08x!

                        : Verification Data:    0x%21!08x!.%22!08x!

                        : Verification Type:    %23!u!

                        : Recall Count:         %24!u!

                        : Recall Time:          %25!s!

                        : Data Stream Start:    0x%26!08x!.%27!08x!

                        : Data Stream Size:     0x%28!08x!.%29!08x!

                        : Data Stream:          %30!u!

                        : Data Stream CRC Type: %31!u!

                        : Data Stream CRC:      0x%32!08x!.%3!08x!

4                        : Format version: %1!d!

                        : CSid:           %2!s!

                        : LinkIndex:      0x%3!08x!.%4!08x!

                        : LinkFileNtfsID: 0x%5!08x!.%6!08x!

                        : CSFileNtfsID:   0x%7!08x!.%8!08x!

                        : CSChecksum:     0x%9!08x!.%10!08x!

                        : Checksum:       0x%11!08x!.%12!08x!

�                        : Local File Path  : %1!.*s!

                        : Remote File Path : %2!.*s!

Stream                  : 0x%6!03x!  %1!s!

    Attributes          : 0x%2!08x!: %3!s!

    Flags               : 0x%4!08x!: %5!s!

�                        : Warning: Invalid reparse data buffer.

x                        : Warning: Invalid reparse tag.

xStream information buffer corrupts - buffer too small.

tSlab Size (bytes) :                        0x%1!I64X!

lRead Zeros :                               %1!u!

lAnchor Supported :                         %1!u!

tUnmap Granularity Alignment (bytes) :      0x%1!I64X!

hFailed to query volume info; Win32 error %1!u!

�Failed to query storage manage dataset attributes; Win32 error %1!u!

�Invalid data returned from IOCTL_STORAGE_MANAGE_DATA_SET_ATTRIBUTES query

X%1 is not a thinly-provisioned volume.

tVolume Size (clusters) :                   0x%1!08X!

|Volume Size (bytes) :                      0x%1!016I64X!

tCluster Size (bytes) :                     0x%1!08X!

|Slab-Aligned Volume Size (bytes) :         0x%1!016I64X!

tSlab Count (Total) :                       0x%1!08X!

�Storage Query %1!u! (Offset 0x%2!016I64X!, Length 0x%3!016I64X!) (bytes)

|    Slab Offset Delta (bytes) :            0x%1!016I64X!

tSlab Count (Mapped) :                      0x%1!08X!

t    Slab Bitmap Length (ULONGs) :          0x%1!08X!

|    Slab Size (bytes) :                    0x%1!016I64X!

|    First Bit Size (bytes) :               0x%1!016I64X!

|    Last Bit Size (bytes) :                0x%1!016I64X!

8    Slab Bitmap Array :

HFilesystem-Level Slab Bitmap :

T        %1!8I64X! - %2!8I64X! : %3!s!

�Usage: fsutil tpInfo <option> <volume pathname>

   Eg: fsutil tpInfo full c:



Options:

 info            Query basic thin-provisioning info

 storageMap      Query storage-level thin-provisioning mapping

 full            Query all of the above

xUsage: fsutil behavior set disableSpotCorruptionHandling <0-15>



Controls which spot corruption handling features are enabled for use by NTFS.

All of these features work in conjunction with CHKDSK.



Any combination of the following values added together may be specified:



 Values: 0 - All NTFS spot corruption handling features are ENABLED (default)

         1 - All NTFS spot corruption handling features are DISABLED

         2 - DISABLES spot fixing of NTFS metadata corruptions

         4 - DISABLES online scanning for NTFS metadata corruptions

         8 - DISABLES spot verification of NTFS metadata corruptions



This operation takes effect immediately (no reboot required)

tNTFS spot fixing of metadata corruptions is: ENABLED

tNTFS spot fixing of metadata corruptions is: DISABLED

|NTFS online scanning for metadata corruptions is: ENABLED

�NTFS online scanning for metadata corruptions is: DISABLED

�NTFS spot verification of metadata corruptions is: ENABLED

�NTFS spot verification of metadata corruptions is: DISABLED

�Total free bytes                : %1!*s! (%2!*s!%3!s!)

Total bytes                     : %4!*s! (%5!*s!%6!s!)

Total quota free bytes          : %7!*s! (%8!*s!%9!s!)

Unavailable pool bytes          : %10!*s! (%11!*s!%12!s!)

Quota unavailable pool bytes    : %13!*s! (%14!*s!%15!s!)

Used bytes                      : %16!*s! (%17!*s!%18!s!)

Total Reserved bytes            : %19!*s! (%20!*s!%21!s!)

Volume storage reserved bytes   : %22!*s! (%23!*s!%24!s!)

Available committed bytes       : %25!*s! (%26!*s!%27!s!)

Pool available bytes            : %28!*s! (%29!*s!%30!s!)

Total free bytes                : %1!*s! (%2!*s!%3!s!)

Total bytes                     : %4!*s! (%5!*s!%6!s!)

Total quota free bytes          : %7!*s! (%8!*s!%9!s!)

Unavailable pool bytes          : %10!*s! (%11!*s!%12!s!)

Quota unavailable pool bytes    : %13!*s! (%14!*s!%15!s!)

Used bytes                      : %16!*s! (%17!*s!%18!s!)

Total Reserved bytes            : %19!*s! (%20!*s!%21!s!)

Volume storage reserved bytes   : %22!*s! (%23!*s!%24!s!)

Available committed bytes       : %25!*s! (%26!*s!%27!s!)

Pool available bytes            : %28!*s! (%29!*s!%30!s!)

Total metadata bytes            : %31!*s! (%32!*s!%33!s!)

@Storage-Level Slab Bitmap :

|    Alignment Offset (bytes) :             0x%1!016I64X!

t    Bit Count (Total) :                    0x%1!08X!

t    Bit Count (Set) :                      0x%1!08X!

�Usage: fsutil behavior set parallelFlushOpenThreshold <100-1,000,000>



When flushing a volume NTFS compares this setting to the number of open files

to decide when to use multiple threads vs. a single thread.



The default value is %3!d!.

�Usage: fsutil behavior set parallelFlushThreads <0-%2!d!>



When flushing a volume using multiple threads, this controls how many threads to use.



 Values: 0 - Default value of %1!2d! threads  (based on: (NumProcessors/2)+1)

         1 - Only use one thread

         Max value - %2!3d! threads          (based on: (NumProcessors*2))

@  (will use %1!d! threads)

0  (will use %1!d!)







   (Default)

`Usage: fsutil volume findShrinkBlocker <volume path> [options]

Options : /noFileName                - Avoid printing filenames for each immovable/pinned file.

          /shrinkSize <SizeWithUnit> - The amount of space to shrink. SizeWithUnit should be

                                       in B/KB/MB/GB/TB/PB format. If no unit specified, size

                                       will be interpreted in bytes.

          /newSize <SizeWithUnit>    - The new size of the volume. SizeWithUnit should be in

                                       B/KB/MB/GB/TB/PB format. If no unit specified, size

                                       will be interpreted in bytes.

          *Note: /shrinkSize and /newSize cannot be specified at the same time.

                 If neither is specified, the default query starting point is 1/4 of the volume

                 size from the end.



   Eg : fsutil volume findShrinkBlocker C:

      : fsutil volume findShrinkBlocker /noFileName /shrinkSize 200MB C:

      : fsutil volume findShrinkBlocker C: /newSize 2GB

|Invalid size %1!s! specified, beyond valid volume range.

<No file entries returned

,Pinned        %0

,Immovable     %0

dBlocker Type    FileId               FileName

8  0x%1!016I64x!   %2!s!

@Blocker Type        FileId

(  0x%1!016I64x!

,1 file processed.

8%1!lu! files processed.

<No shrink blocker found.

|1 shrink blocker found (%1!lu! immovable, %2!lu! pinned).

�%1!lu! shrink blockers found (%2!lu! immovable, %3!lu! pinned).

�Searching for shinrk blockers starting from Lcn: %1!I64d!, ClusterCount: %2!I64d!

Usage: fsutil behavior set defaultNtfsTier <1-2>



For NTFS tiered volumes this controls what tier to use when allocating new

clusters to a file.  This value is used when a file does not have an explicit

desired storage tier.



Values: 1 - Capacity tier

        2 - Performance tier



Client systems default to the Performance tier.

Server systems default to the Capacity tier.

, (Capacity tier)

0 (Performance tier)

0Supports Bypass IO

�---- BYPASSIO Commands Supported ----



State           Returns the BypassIo state for the given file/directory

�Usage: fsutil bypassIo state </v> <file path>



   /v   Verbose mode - display the name of the storage driver



   Eg: fsutil bypassIo state c:\test\testfile.txt

       fsutil bypassIo state /v d:

�BypassIo on "%1!s!" is currently supported

    Storage Type:   %2!s!

    Storage Driver: %0

\BypassIo on "%1!s!" is not currently supported

    HResult: 0x%2!x! (%3!s!)

    Driver:  %4!*s!

    Reason:  %5!*s!

    Storage Type:   %6!s!

    Storage Driver: %0

XBypassIo on "%1!s!" is not currently supported

    Status:  %2!d! (%3!s!)

    Driver:  %4!*s!

    Reason:  %5!*s!

    Storage Type:   %6!s!

    Storage Driver: %0

�---- TRACE Commands Supported ----



decode           Decode NTFS trace information

query            Query the state of NTFS trace session

start            Start a NTFS trace session

stop             Stop a NTFS trace session

, Usage   : fsutil trace create <trace session name> [options]

Options : output=<output path>      - Path of the output trace file. The default path is

                                      "%Systemdrive%\PerfLogs\Admin".

          keywords=<keywords value> - Trace keywords to enable. Default is to not trace any keyword.

                                      Supported keywords are as follows:

                                      COMMON              0x0000000000000001

                                      HASH_TABLE          0x0000000000000002

                                      DAX                 0x0000000000000004

                                      READ                0x0000000000000008

                                      WRITE               0x0000000000000010

                                      COMPRESSED          0x0000000000000020

                                      EFS                 0x0000000000000040

                                      MFT                 0x0000000000000080

                                      VOLBITMAP           0x0000000000000100

                                      CREATE              0x0000000000000200

                                      ALTSTREAMS          0x0000000000000400

                                      OBJID               0x0000000000000800

                                      INDEXES             0x0000000000001000

                                      TXFKTM              0x0000000000002000

                                      TXFRECOVERY         0x0000000000004000

                                      TXFRM               0x0000000000008000

                                      TXFFCB              0x0000000000010000

                                      SELFHEAL            0x0000000000020000

                                      HEALBITMAP          0x0000000000040000

                                      USNJRNL             0x0000000000080000

                                      DELNOTIFY           0x0000000000100000

                                      LOGFILE             0x0000000000200000

                                      FLUSH               0x0000000000400000

                                      SCRUB               0x0000000000800000

                                      STATUS_DEBUG        0x0000000001000000

                                      FRSCONSOLIDATION    0x0000000002000000

                                      ALLOC_FREE_CLUS     0x0000000004000000

                                      OPERATIONS          0x0000000008000000

                                      HOTFIX              0x0000000010000000

                                      VOLUME              0x0000000020000000

                                      CACHESUP            0x0000000040000000

                                      DEVIOSUP            0x0000000080000000

                                      FSCTRL              0x0000000100000000

                                      MFT_ATTR_LIST       0x0000000200000000

                                      MOUNT               0x0000000400000000

                                      CACHEDRUNS          0x0000000800000000

                                      SHARING_VIOLATION   0x0000001000000000

                                      ACCESS_DENIED       0x0000002000000000



          level=<trace level value> - Trace level to enable. Default is level 3 (warning).

                                      Supported trace levels:

                                      1 - TRACE_LEVEL_CRITICAL - Abnormal exit or termination events

                                      2 - TRACE_LEVEL_ERROR - Severe error events

                                      3 - TRACE_LEVEL_WARNING - Warning events such as allocation failures

                                      4 - TRACE_LEVEL_INFORMATION - Non-error events such as entry or exit events

                                      5 - TRACE_LEVEL_VERBOSE - Detailed trace events



   Eg   : fsutil trace create NtfsTrc output=C:\Temp\tracefile.etl keywords=0x3f00000000 level=4

�Usage : fsutil trace delete <trace session name>

   Eg : fsutil trace create NtfsTrc

@Usage : fsutil trace query

`"Usage   : fsutil trace start [options]

Options : output=<output path>      - Path of the output trace file. The default path is

                                      "%Systemdrive%\PerfLogs\Admin".

          keywords=<keywords value> - Trace keywords to enable. Default is to trace all keywords.

                                      Both numeric and string keywords are supported, use "+" to combine

                                      them, e.g. "Keywords=0x1010+CREATE" to trace INDEXES, WRITE and

                                      CREATE keywords.

                                      Supported keywords are as follows:

                                      COMMON              0x0000000000000001

                                      HASH_TABLE          0x0000000000000002

                                      DAX                 0x0000000000000004

                                      READ                0x0000000000000008

                                      WRITE               0x0000000000000010

                                      COMPRESSED          0x0000000000000020

                                      EFS                 0x0000000000000040

                                      MFT                 0x0000000000000080

                                      VOLBITMAP           0x0000000000000100

                                      CREATE              0x0000000000000200

                                      ALTSTREAMS          0x0000000000000400

                                      OBJID               0x0000000000000800

                                      INDEXES             0x0000000000001000

                                      TXFKTM              0x0000000000002000

                                      TXFRECOVERY         0x0000000000004000

                                      TXFRM               0x0000000000008000

                                      TXFFCB              0x0000000000010000

                                      SELFHEAL            0x0000000000020000

                                      HEALBITMAP          0x0000000000040000

                                      USNJRNL             0x0000000000080000

                                      DELNOTIFY           0x0000000000100000

                                      LOGFILE             0x0000000000200000

                                      FLUSH               0x0000000000400000

                                      SCRUB               0x0000000000800000

                                      STATUS_DEBUG        0x0000000001000000

                                      FRSCONSOLIDATION    0x0000000002000000

                                      ALLOC_FREE_CLUS     0x0000000004000000

                                      OPERATIONS          0x0000000008000000

                                      HOTFIX              0x0000000010000000

                                      VOLUME              0x0000000020000000

                                      CACHESUP            0x0000000040000000

                                      DEVIOSUP            0x0000000080000000

                                      FSCTRL              0x0000000100000000

                                      MFT_ATTR_LIST       0x0000000200000000

                                      MOUNT               0x0000000400000000

                                      CACHEDRUNS          0x0000000800000000

                                      SHARING_VIOLATION   0x0000001000000000

                                      ACCESS_DENIED       0x0000002000000000



          level=<trace level value> - Trace level to enable. Default is level 2 (error).

                                      Supported trace levels:

                                      1 - TRACE_LEVEL_CRITICAL - Abnormal exit or termination events

                                      2 - TRACE_LEVEL_ERROR - Severe error events

                                      3 - TRACE_LEVEL_WARNING - Warning events such as allocation failures

                                      4 - TRACE_LEVEL_INFORMATION - Non-error events such as entry or exit events

                                      5 - TRACE_LEVEL_VERBOSE - Detailed trace events



   Eg   : fsutil trace start output=C:\Temp\tracefile.etl keywords=0x3f00000000 level=4

          fsutil trace start keywords=0x1010+CREATE

<Usage : fsutil trace stop

LUsage   : fsutil trace decode [trace file path] [options]

          [trace file path]          - Path for the trace file to decode. When not specifing, we'll use the

                                       default path "%Systemdrive%\PerfLogs\Admin\Fsutil_NtfsTrace.etl".

Options : output=<output path>       - Output path for decoded trace

          format=<output format>     - Output format. Default = TXT.

                                       Supported format: CSV, XML, EVTX, TXT, No

   Eg   : fsutil trace decode

          fsutil trace decode C:\Temp\tracefile.etl

          fsutil trace decode C:\Temp\tracefile.etl output=c:\Temp\traceOutput.txt format=CSV

 Usage   : fsutil trace update <trace session name> [options]

Options : output=<output path>      - Updated path of the output trace file.

          keywords=<keywords value> - Updated trace keywords to enable.

                                      Supported keywords are as follows:

                                      COMMON              0x0000000000000001

                                      HASH_TABLE          0x0000000000000002

                                      DAX                 0x0000000000000004

                                      READ                0x0000000000000008

                                      WRITE               0x0000000000000010

                                      COMPRESSED          0x0000000000000020

                                      EFS                 0x0000000000000040

                                      MFT                 0x0000000000000080

                                      VOLBITMAP           0x0000000000000100

                                      CREATE              0x0000000000000200

                                      ALTSTREAMS          0x0000000000000400

                                      OBJID               0x0000000000000800

                                      INDEXES             0x0000000000001000

                                      TXFKTM              0x0000000000002000

                                      TXFRECOVERY         0x0000000000004000

                                      TXFRM               0x0000000000008000

                                      TXFFCB              0x0000000000010000

                                      SELFHEAL            0x0000000000020000

                                      HEALBITMAP          0x0000000000040000

                                      USNJRNL             0x0000000000080000

                                      DELNOTIFY           0x0000000000100000

                                      LOGFILE             0x0000000000200000

                                      FLUSH               0x0000000000400000

                                      SCRUB               0x0000000000800000

                                      STATUS_DEBUG        0x0000000001000000

                                      FRSCONSOLIDATION    0x0000000002000000

                                      ALLOC_FREE_CLUS     0x0000000004000000

                                      OPERATIONS          0x0000000008000000

                                      HOTFIX              0x0000000010000000

                                      VOLUME              0x0000000020000000

                                      CACHESUP            0x0000000040000000

                                      DEVIOSUP            0x0000000080000000

                                      FSCTRL              0x0000000100000000

                                      MFT_ATTR_LIST       0x0000000200000000

                                      MOUNT               0x0000000400000000

                                      CACHEDRUNS          0x0000000800000000

                                      SHARING_VIOLATION   0x0000001000000000

                                      ACCESS_DENIED       0x0000002000000000



          level=<trace level value> - Updated trace level to enable.

                                      Supported trace levels:

                                      1 - TRACE_LEVEL_CRITICAL - Abnormal exit or termination events

                                      2 - TRACE_LEVEL_ERROR - Severe error events

                                      3 - TRACE_LEVEL_WARNING - Warning events such as allocation failures

                                      4 - TRACE_LEVEL_INFORMATION - Non-error events such as entry or exit events

                                      5 - TRACE_LEVEL_VERBOSE - Detailed trace events



   Eg   : fsutil trace update NtfsTrc output=C:\Temp\tracefile.etl keywords=0x3f00000000 level=4

hFailed to query existing trace session setting.

<Failed to invoke logman.

8Failed to invoke netsh.

�This operation is not supported due to required binary logman.exe is not available on this build.

�This operation is not supported due to required binary netsh.exe is not available on this build.

0BypassIo compatible

8Not BypassIo Compatible

@    Driver Name:    %1!*s!

XSuccessfully started the trace session.

<Supports Stream Snapshots

PSupports Case-Sensitive Directories

PSupports Strictly Sequential Files

XSuccessfully stopped the trace session.

0Trace level: %1!s!

DTrace keywords: 0x%1!016I64x!

@    0x%1!016I64x!    %2!s!

4Trace keywords: None.

8Trace file path: %1!s!

�A volume supporting case-sensitivity is required for this operation (e.g., a local REFS or NTFS volume).

 BypassIo on "%1!s!" is partially supported

    Volume stack bypass is disabled (%3!*s!)

    Storage Type:   %2!s!

    Storage Driver: %0

�BypassIo on "%1!s!" is partially supported

    Volume stack bypass is disabled (%3!*s!)

      HResult: 0x%4!x! (%5!s!)

      Reason:  %6!*s!

    Storage Type:   %2!s!

    Storage Driver: %0

�BypassIo on "%1!s!" is partially supported

    Volume stack bypass is disabled (%3!*s!)

      Status:  %4!d! (%5!s!)

      Reason:  %6!*s!

    Storage Type:   %2!s!

    Storage Driver: %0

HUsage: fsutil file queryProcessesUsing [/C] <file/directory name>



<Flags>

  /C : Output in CSV format



Eg: fsutil file queryProcessesUsing /C c:\foo.txt

�"%1!s!" is opened by the following process(es):

         PID  Image Path

(PID,Image Path

(%1!12u!  %2!s!

 %1!u!,%2!s!

�Failed to acquire debug privilege; some process image paths may not be displayed.

p"%1!s!" is not found to be opened by any processes.

�Failed to query case sensitive attribute information for file %1, error: 0x%2!08x! %3.

�Failed to set case sensitive attribute information for file %1, error: 0x%2!08x! %3.

Failed to set short name, either the specified file has been opened in case-sensitive mode or the specified short name is invalid.

`Successfully set short name %1 for file %2.

dSuccessfully removed short name for file %1.

LUsage: fsutil behavior set enableMaximumHardLinks <0|1>



When enabled, NTFS will allow creation of hard links beyond the default

1024 per file hard link limit.  The number of hard links that can be

created for a given file is based on its available metadata space.



 Values: 0 - NTFS allows a maximum of 1024 hard links per file (default)

         1 - NTFS will allow the maximum number of hard links per file

�  (NTFS will allow the maximum number of hard links per file)

p  (NTFS will allow up to 1024 hard links per file)

xVolume format will be upgraded upon next volume mount.

�Usage: fsutil devdrv query [<volume path>]

   Eg: fsutil devdrv query

   Eg: fsutil devdrv query D:



Query information about developer volumes in general or the given developer

volume.

PThis is a trusted developer volume.

�The volume is formatted as a developer volume but is not trusted on this machine.

HThis is not a developer volume.

�NOTE: This won't be a developer volume after a dismount or reboot.

The volume is in use and the change may not take effect immediately.

Please dismount the volume for the change to take effect.

(Error %1!d!: %0

dFailed to update the persistent volume state.

�Failed to delete the stale machine specific state for the volume.

�Failed to create new machine specific state for the volume.

@Failed to open the volume.

$

Dev drive or a developer volume is a volume that is tuned for performance of

developer scenarios.  This also lets an administrator of the device control

the file system filters that are attached to the volume.



---- DEVDRV Commands Supported ----



query                Query developer volume information

enable               Enable developer volume support on this machine

disable              Disable developer volume support on this machine

trust                Trust the given developer volume

untrust              Untrust the given developer volume

setFiltersAllowed    Set the list of allowed filters for developer volume

clearFiltersAllowed  Clear the list of allowed filters for developer volume



Please use "fsutil devdrv <command> /?" for more information.

�Usage: fsutil devdrv trust [/f] <volume path>



Trust the given developer volume. Developer volume filter attach policy is

honored only for a trusted developer volume.



Options:

   /f - Force dismount the volume for the change to take effect

        immediately even if the volume is in use.  Otherwise

        the volume is dismounted only if it is not in use.



Sample commands:

   fsutil devdrv trust D:

   fsutil devdrv trust /f D:

�Usage: fsutil devdrv untrust [/f] <volume path>



Untrust the given developer volume. Developer volume filter attach policy is

not honored for an untrusted developer volume.



Options:

   /f - Force dismount the volume for the change to take effect

        immediately even if the volume is in use.  Otherwise

        the volume is dismounted only if it is not in use.



Sample commands:

   fsutil devdrv untrust D:

   fsutil devdrv untrust /f D:

HDeveloper volumes are enabled.

HDeveloper volumes are disabled.

hDeveloper volumes are enabled, by group policy.

lDeveloper volumes are disabled, by group policy.

NOTE: This setting is currently controlled by group policy.

      Effective value of this setting will consider group policy as well.



�Usage: fsutil devdrv disable



Disable developer volume support on this machine.

Usage: fsutil devdrv enable [/allowAv|/disallowAv]

   Eg: fsutil devdrv enable

   Eg: fsutil devdrv enable /allowAv

   Eg: fsutil devdrv enable /disallowAv



Enable developer volume support on this machine.



Options:

   /allowAv    - Specifies that developer volumes are to be protected by

                 antivirus filter.

   /disallowAv - Specifies that developer volumes need not be protected by

                 antivirus filter.



NOTE: If neither /allowAv nor /disallowAv is specified, antivirus policy for

developer volume is not configured and system default is to have developer

volumes protected by antivirus filter.

`Filters allowed on any developer volume:%0



    %0

, %0

%1%0

|Error looking up filters allowed on any developer volume.

�Filters allowed on any developer volume, by group policy:%0

�Error looking up group policy, for filters allowed on any developer volume.

`Filters allowed on this developer volume:%0

�Error looking up filters allowed on this developer volume.

xFilters currently attached to this developer volume:%0

�Error looking up filters that are currently attached to this developer volume.

�No filters are currently attached to this developer volume.

%1!.*s!%0

�Failed to create or open machine specific state for the volume.

�Usage: fsutil devdrv setFiltersAllowed [[/f] /volume <volume path>] "filter1, filter 2, ..."

   Eg: fsutil devdrv setFiltersAllowed "filter1, filter 2"

   Eg: fsutil devdrv setFiltersAllowed /volume D: filter1,filter2

   Eg: fsutil devdrv setFiltersAllowed /f /volume D: filter1,filter2



Set the list of allowed filters for the given developer volume or any developer

volume on this machine.



Options:

   /f      - Force dismount the specified volume for the change to take effect

             immediately even if the volume is in use.  Otherwise the volume,

             if specified, is dismounted only if it is not in use.

   /volume - If specified, the allowed list of filters is set only for this

             volume.

Usage: fsutil devdrv clearFiltersAllowed [[/f] <volume path>]

   Eg: fsutil devdrv clearFiltersAllowed

   Eg: fsutil devdrv clearFiltersAllowed D:

   Eg: fsutil devdrv clearFiltersAllowed /f D:



Clear the list of allowed filters for the given developer volume or any developer

volume on this machine.



Options:

   /f      - Force dismount the specified volume for the change to take effect

             immediately even if the volume is in use.  Otherwise the volume,

             if specified, is dismounted only if it is not in use.

   /volume - If specified, the allowed list of filters is cleared only for this

             volume.

HA reboot is required for this change to take effect.  Alternatively the volumes

of interest can be dismounted to have the change take effect on those volumes.

tDeveloper volumes are protected by antivirus filter.

�Developer volumes are protected by antivirus filter, by group policy.

�Developer volumes may not be protected by antivirus filter.

xAn NTFS or ReFS volume is required for this operation.

hAn NTFS volume is required for this operation.

�

Provides administrative functionality for CLFS logfiles.



---- CLFS Commands Supported ----



authenticate         Add authentication codes to an existing CLFS logfile.



Please use "fsutil clfs <command> /?" for more information.

$Usage: fsutil clfs authenticate <Logfile BLF path>

   Eg: fsutil clfs authenticate "C:\example_log.blf"



Add authentication support to a CLFS logfile that has invalid or

missing authentication codes. Authentication codes will be written

to the Base Logfile (.blf) and all containers associated with the logfile.



It is required that this command be executed with administrative

privileges.

�Failed to create process with cmdline "%1!s!", error %2!8x!.

�Trace file %1!s! already existed, please delete it and try again.

�Failed to rename trace file from %1!s! to %2!s!, error %3!8x!.

HFailed to create trace session.

HFailed to start trace session.

HFailed to delete trace session.

�Trace session already started, please stop it with "fsutil trace stop" before starting a new one.

�4VS_VERSION_INFO��
E�e
E�e?�StringFileInfo�040904B0LCompanyNameMicrosoft Corporation>FileDescriptionfsutil.exen'FileVersion10.0.26100.6725 (WinBuild.160101.0800)6InternalNamefsutil.exe�.LegalCopyright� Microsoft Corporation. All rights reserved.FOriginalFilenamefsutil.exe.muij%ProductNameMicrosoft� Windows� Operating SystemDProductVersion10.0.26100.6725DVarFileInfo$Translation	�PADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPADDINGPADDINGXXPAD

Anon7 - 2021