FSCTL_CREATE_USN_JOURNAL IOCTL (ntifs.h)
The FSCTL_CREATE_USN_JOURNAL control code creates an update sequence number (USN) change journal stream on a target volume, or modifies an existing change journal stream. See Remarks.
Major code
FSCTL_CREATE_USN_JOURNAL
Remarks
FSCTL_CREATE_USN_JOURNAL can be used to:
Create a new change journal stream for a volume. After the creation of the stream, the NTFS file system maintains a change journal for that volume.
Modify an existing change journal stream. If a change journal stream already exists, FSCTL_CREATE_USN_JOURNAL sets it to the characteristics provided in the [CREATE_USN_JOURNAL_DATA] structure. The change journal stream eventually gets larger or is trimmed to the new size limit that CREATE_USN_JOURNAL_DATA imposes.
To perform this operation, call FltFsControlFile or ZwFsControlFile with the following parameters.
FileObject [in]: Parameter for FltFsControlFile only. A file object pointer for the remote volume. This parameter is required and can't be NULL.
FileHandle [in]: Parameter for ZwFsControlFile only. A handle for the remote volume. This parameter is required and can't be NULL.
FsControlCode [in]: A control code for the operation. Use FSCTL_CREATE_USN_JOURNAL for this operation.
InputBuffer [in]: Pointer to a CREATE_USN_JOURNAL_DATA structure that contains the parameters for the operation.
InputBufferLength [in]: The size, in bytes, of the input buffer.
OutputBuffer [out]: Not used.
OutputBufferLength [in]: Not used.
FltFsControlFile or ZwFsControlFile returns STATUS_SUCCESS if the operation succeeds. Otherwise, the appropriate function returns the appropriate NTSTATUS error code.
Requirements
| Requirement | Value |
|---|---|
| Minimum supported client | Windows XP |
| Header | ntifs.h |