hidden hit counter
Help!

What is the Usn Journal

 
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> File System RSS
Next:  Question on policies/settings passed from DC to c..  
Author Message
Bob
External


Since: Jun 15, 2005
Posts: 50



PostPosted: Fri Oct 28, 2005 6:15 pm    Post subject: What is the Usn Journal
Archived from groups: microsoft>public>win2000>file_system (more info?)

I have read some of the KB articles and still I do not know what the
Usn Journal is or its purpose.

Something is corrupting my filesystem which causes CHKDSK to run. The
entry in Event Viewer is "The file system structure on the disk is
corrupt and unusable. Please run the chkdsk utility on the volume ",
which is about as helpful as a bucket under a bull.

When CHKDSK runs it quickly passes over everything but the Usn
Journal, which it says it has repaired. Sometimes I can see an
enumeration of entries being repaired one by one, but most of the time
it just says that it has repaired records in the Usn Journal.

I have never lost Win2K because of this - it always starts as if
nothing happned.


--

If you build a man a fire and he will be warm for a day. If you
set a man on fire, he will be warm for the rest of his life.
Back to top
seth
External


Since: Oct 03, 2005
Posts: 69



PostPosted: Fri Oct 28, 2005 7:00 pm    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

USN desribed
http://kb.iu.edu/data/aexw.html


"Bob" wrote in message

>I have read some of the KB articles and still I do not know what the
> Usn Journal is or its purpose.
>
> Something is corrupting my filesystem which causes CHKDSK to run. The
> entry in Event Viewer is "The file system structure on the disk is
> corrupt and unusable. Please run the chkdsk utility on the volume ",
> which is about as helpful as a bucket under a bull.
>
> When CHKDSK runs it quickly passes over everything but the Usn
> Journal, which it says it has repaired. Sometimes I can see an
> enumeration of entries being repaired one by one, but most of the time
> it just says that it has repaired records in the Usn Journal.
>
> I have never lost Win2K because of this - it always starts as if
> nothing happned.
>
>
> --
>
> If you build a man a fire and he will be warm for a day. If you
> set a man on fire, he will be warm for the rest of his life.
Back to top
Bob
External


Since: Jun 15, 2005
Posts: 50



PostPosted: Fri Oct 28, 2005 10:15 pm    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Fri, 28 Oct 2005 15:00:48 -0400, "seth" wrote:

>
>USN desribed
>http://kb.iu.edu/data/aexw.html

"USN Journal: This feature provides a persistent log of all changes
made to files on the volume. This feature is one of the reasons that
the Windows 2000 domain controller must use an NTFS 5.0 partition as
the system volume."

Yes, I knew that. I need to know more so I can figure out why it is
being corrupted, seemingly at random.


--

If you build a man a fire and he will be warm for a day. If you
set a man on fire, he will be warm for the rest of his life.
Back to top
John John
External


Since: Jun 05, 2004
Posts: 1937



PostPosted: Sat Oct 29, 2005 11:12 am    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Turn off (disable) Indexing Service and see if things change. Turn it
all off, on all drives and make sure the service is disabled.

John

Bob wrote:

> I have read some of the KB articles and still I do not know what the
> Usn Journal is or its purpose.
>
> Something is corrupting my filesystem which causes CHKDSK to run. The
> entry in Event Viewer is "The file system structure on the disk is
> corrupt and unusable. Please run the chkdsk utility on the volume ",
> which is about as helpful as a bucket under a bull.
>
> When CHKDSK runs it quickly passes over everything but the Usn
> Journal, which it says it has repaired. Sometimes I can see an
> enumeration of entries being repaired one by one, but most of the time
> it just says that it has repaired records in the Usn Journal.
>
> I have never lost Win2K because of this - it always starts as if
> nothing happned.
>
>
> --
>
> If you build a man a fire and he will be warm for a day. If you
> set a man on fire, he will be warm for the rest of his life.
Back to top
Bob
External


Since: Jun 15, 2005
Posts: 50



PostPosted: Sat Oct 29, 2005 12:15 pm    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Sat, 29 Oct 2005 07:12:32 -0300, John John
wrote:

>Turn off (disable) Indexing Service and see if things change. Turn it
>all off, on all drives and make sure the service is disabled.

How do I do all that? I am not very familiar with indexing service.

I went into Properties for each of my two hard disks and neither has
indexing checked. I also went into Search and it said that indexing is
currently disabled. Where else do I need to look?

What service or services do I need to disable? I cannot see anything
that is obviously related to "indexing".

I do have a few compressed directories - do I need to change them
back? I do not have any compressed drives.


--

If you build a man a fire and he will be warm for a day. If you
set a man on fire, he will be warm for the rest of his life.
Back to top
John John
External


Since: Jun 05, 2004
Posts: 1937



PostPosted: Sun Oct 30, 2005 12:15 pm    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

If the Indexing service is disabled then it isn't running and can't be
responsible for errors in the USN Journal. Here is a description of USN
Journal from a Microsoft site:

"The update sequence number (USN) change journal, which provides a
persistent log of all changes made to files on the volume. As files,
directories, and other NTFS objects are added, deleted, and modified,
NTFS enters records into the USN change journal, one for each volume on
the computer. Each record indicates the type of change and the object
changed. New records are appended to the end of the stream."

"Programs can consult the USN change journal to determine all the
modifications made to a set of files. The USN change journal is much
more efficient than checking time stamps or registering for file
notifications. The USN change journal is enabled and used by the
Indexing Service, File Replication Service (FRS), Remote Installation
Service (RIS), and Remote Storage."

Note that any other applications (not just Indexing Service, File
Replication Service (FRS), Remote Installation Service (RIS), and Remote
Storage) can call on or use the USN Journal, so the journal might get
corrupted by a flawed application. You can read here for more insight:

Keeping an Eye on Your NTFS Drives: the Windows 2000 Change Journal
Explained
http://www.microsoft.com/msj/0999/journal/journal.aspx

Are any errors showing in the Event Viewer log?

John

Bob wrote:

> I have read some of the KB articles and still I do not know what the
> Usn Journal is or its purpose.
>
> Something is corrupting my filesystem which causes CHKDSK to run. The
> entry in Event Viewer is "The file system structure on the disk is
> corrupt and unusable. Please run the chkdsk utility on the volume ",
> which is about as helpful as a bucket under a bull.
>
> When CHKDSK runs it quickly passes over everything but the Usn
> Journal, which it says it has repaired. Sometimes I can see an
> enumeration of entries being repaired one by one, but most of the time
> it just says that it has repaired records in the Usn Journal.
>
> I have never lost Win2K because of this - it always starts as if
> nothing happned.
>
>
> --
>
> If you build a man a fire and he will be warm for a day. If you
> set a man on fire, he will be warm for the rest of his life.
Back to top
Bob
External


Since: Jun 15, 2005
Posts: 50



PostPosted: Sun Oct 30, 2005 2:15 pm    Post subject: Re: What is the Usn Journal [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Sun, 30 Oct 2005 07:35:29 -0400, John John
wrote:

>If the Indexing service is disabled then it isn't running and can't be
>responsible for errors in the USN Journal.

When CHKDSK runs it says that it has repaired records in the Usn
Journal. On some occasions I have seen an enumeration of the very
records it has repaired.

There must be something else that is using the Usn Journal, like a
background application.

>Here is a description of USN Journal from a Microsoft site

Thanks but as I mentioned in my original post I have read as much as I
can find in the MS KB, and none of it helps me find the culprit that
is corrupting the Usn Journal.

>Are any errors showing in the Event Viewer log?

Yes, two identical entries show up after the repair has been effected
and Windows comes up. I have watched the Event Viewer just before I
shutdown and there is no entry.

I posted the exact entry in an earlier post, and I do not have it
anymore. It is a terse one-liner about NTFS having been corrupted and
recommending that I run CHKDSK. But Windows schedules CHKDSK anyway.

On occasion I have bypassed CHKDSK to see what would happen, and
nothing happened that I was aware of. So whatever has happened the Usn
Journal is not catastrophic.


--

If you build a man a fire and he will be warm for a day. If you
set a man on fire, he will be warm for the rest of his life.
Back to top
DaBeers



Joined: Dec 29, 2008
Posts: 1



PostPosted: Mon Dec 29, 2008 7:02 am    Post subject: [Login to view extended thread Info.]

I think you summed it up throught this thread, but never made the determination. It seems to me your having a problem with shutdown, not boot.

If it was writing the new USN Journal appendi at shutdown, I would assume then it would be recognised at boot. This implies it is either not being written at all, or it's being written, but to a location other then the path defined for boot.

I'm hoping I can help a little in your troubleshooting, but I'm afraid I'm limited on what to recommend.
Maybe, just one time, try doing a "safely remove(USB) hardware", until all listed devices are terminated and see if maybe you can improve your shutdown proceedure. If not, I remember a "Quick Shutdown" option, though I'm not sure if it was in windows, or BIOS, but it could possibly improve things to disable it. Also, you may want to enable 'write-behind caching 'on the operating systems drive.

GL
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> File System All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You can edit your posts in this forum
You can delete your posts in this forum
You can vote in polls in this forum