Sunday, August 3, 2008

Disable updating last access update

If for some reason you don't need the NTFS file system to keep track of when a file was last accessed you can disable this with a registry key.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

Add dword value NtfsDisableLastAccessUpdate and set the value to 1. This works when you have rebooted your system.

From a security standpoint it might be a bad idea to do this since it will make it impossible to tell you if someone did or did not access a file.

No comments: