Obtaining a Volume Handle for Change Journal Operations
To obtain a handle to a volume for use with update sequence number (USN) change journal operations, call the CreateFile function with the lpFileName parameter set to a string of the following form: \\.\X:
Note that X is the letter that identifies the drive on which the NTFS volume appears.
If the volume does not have a drive letter, use the syntax described in Naming a Volume.