UWF_Overlay.GetOverlayFiles

Returns a list of files of a volume that were cached in the Unified Write Filter (UWF) overlay.

Syntax

UInt32 GetOverlayFiles(
    [in] string Volume,
    [out, EmbeddedInstance("UWF_OverlayFile")] string OverlayFiles[]
);

Volume
A string that specifies the drive letter or volume name.

OverlayFiles
An array of UWF_OverlayFiles objects embedded as strings.

Returns an HRESULT value that indicates WMI status or a WMI error.

You must use an administrator account to access this method.

The GetOverlayFiles method is intended to be used as a diagnostic tool.

Do not base decisions about what to commit based on this method’s output.

You should be aware of the following limitations:

This method is only supported on the NTFS file system.
This method requires a significant amount of free system memory to succeed (in a linear relationship to overlay usage). The method call fails when there is insufficient memory available to complete the call.
This method requires significant time to complete (in an exponential relationship to overlay usage).
This method may show files that are affected by seemingly unrelated operations to both registry and file exclusions and commits.

You should also be aware of the following items when you use the GetOverlayFiles method:

Files that were committed with the uwfmgr.exe file commit command are also contained in the overlay files list.
Excluded files may be contained in the overlay files list.
Files that are smaller than the cluster size (for example, 4 KB in most cases) will not be listed even if they are cached in overlay.
Changes and deletions in excluded directories, excluded files, or excluded registry items add to overlay usage.
File and registry commits add to overlay usage.