Windows 10: Enable or Disable NTFS Last Access Time Stamp Updates in Windows 10

How to: Enable or Disable NTFS Last Access Time Stamp Updates in Windows 10

How to Enable or Disable NTFS Last Access Time Stamp Updates in Windows 10


The Last Access Time stamp displays an updated time each file and folder on a NTFS volume was last accessed.

In the System Managed mode, the NTFS driver can enable or disable the Last Access updates during the boot (in particular, when the system volume is mounted). The Last Access updates are enabled for NTFS volumes when the size of the system volume (which is usually mounted as the C: drive) is 128 GB or less. If the system volume is larger, then the Last Access updates are disabled.

In the User Managed mode (recommended), the status of the Last Access updates isnt modified by the system during the boot. "Last Access" will stay enabled or disabled as you set.

[table][tr][td]Value[/td] [td]Description[/td] [/tr] [tr][td]0[/td] [td]User Managed, Last Access Updates Enabled[/td] [/tr] [tr][td]1[/td] [td]User Managed, Last Access Updates Disabled[/td] [/tr] [tr][td]2 (default)[/td] [td]System Managed, Last Access Updates Enabled[/td] [/tr] [tr][td]3[/td] [td]System Managed, Last Access Updates Disabled[/td] [/tr] [/table]




See also:

• The “Last Access” updates are almost back – My DFIR Blog
• Fsutil behavior | Microsoft Docs

Having the Last Access Time stamp enabled on an older or slower computer may cause file access to take longer.

This tutorial will show you how to enable or disable the NTFS Last Access Time stamp updates for all users in Windows 10.

*note You must be signed in as an administrator to enable or disable the Last Access Time stamp.

*Warning This tutorial is only valid in Windows 10 version 1803 and higher.


CONTENTS:

• Option One: Enable or Disable NTFS Last Access Time Stamp Updates using Command
• Option Two: Enable or Disable NTFS Last Access Time Stamp Updates using a REG file

EXAMPLE: Last Access Time stamp

*note The details view is not there by default unless added.











OPTION ONE [/i] Enable or Disable NTFS Last Access Time Stamp Updates using Command
1. Open an elevated PowerShell console window.

2. Copy and paste the command below you want to use into the elevated console window, and press Enter.
(User Managed, Last Access Updates Enabled)
fsutil behavior set disablelastaccess 0

OR

(User Managed, Last Access Updates Disabled)
fsutil behavior set disablelastaccess 1

OR

(Default - System Managed, Last Access Updates Enabled)
fsutil behavior set disablelastaccess 2

OR

(System Managed, Last Access Updates Disabled)
fsutil behavior set disablelastaccess 3
3. Close the elevated console window.

4. Restart the computer to apply.





OPTION TWO [/i] Enable or Disable NTFS Last Access Time Stamp Updates using a REG file
*note The downloadable .reg files below will modify the DWORD value in the registry key below.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\FileSystem

NtfsDisableLastAccessUpdate DWORD

80000000 (hex) = User Managed, Last Access Updates Enabled
80000001 (hex) = User Managed, Last Access Updates Disabled
80000002 (hex) = System Managed, Last Access Updates Enabled
80000003 (hex) = System Managed, Last Access Updates Disabled
1. Do step 2 (user enabled), step 3 (user disabled), step 4 (system enabled), or step 5 (system disabled) below for what you would like to do.


2. User Managed, Last Access Updates Enabled
A) Click/tap on the Download button below to download the file below, and go to step 6 below.

User_Managed,_Last_Access_Updates_Enabled.reg

Download

3. User Managed, Last Access Updates Disabled
A) Click/tap on the Download button below to download the file below, and go to step 6 below.

User_Managed,_Last_Access_Updates_Disabled.reg

Download

4. System Managed, Last Access Updates Enabled
*note This is the default setting.
A) Click/tap on the Download button below to download the file below, and go to step 6 below.

DEFAULT_System_Managed,_Last_Access_Updates_Enabled.reg

Download

5. System Managed, Last Access Updates Disabled
A) Click/tap on the Download button below to download the file below, and go to step 6 below.

System_Managed,_Last_Access_Updates_Disabled.reg

Download
6. Save the .reg file to your desktop.

7. Double click/tap on the downloaded .reg file to merge it.

8. When prompted, click/tap on Run, Yes (UAC), Yes, and OK to approve the merge.

9. Restart the computer to apply.

10. You can now delete the downloaded .reg file if you like.

That's it,
Shawn

:)

 

Last Access Timestamp

@Kishvand

New updated tutorial for this now available.

*Arrow Enable or Disable NTFS Last Access Time Stamp Updates in Windows 10

 

How to disable Last Accessed date ( timestamp ) on FAT32 file system?

Scope of that article is how to *enable* the last accessed timestamp as it's disabled by default on NTFS drives.

Was it any special steps you were thinking about? I've already tried the fsutil command (see above); without rebooting though.

 

Last Access Timestamp

Hello and thanks very much for your kind help
I'm confused:
NTFS Disable Last Access Update File Time Stamp Windows 10 April 1803 Update | guru3D Forums

 

Windows 10 update being enabled.

My experience was that disabling Windows Update service works for a while until suddenly that service is magically enabled again and starts updating everything.

 

Windows 10 update being enabled.

Good to know, i will check later to see if it's still disabled.