Understanding the default quota notification time interval can help you interpret disk quota Event log messages.
User creates files, exceeds warning level, event is written to event log. User immediately hard-deletes files so disk usage falls under warning level. User immediately creates more files and exceeds warning level again. But when you check the event log, there is only one "user hit their quota threshold" event recorded. Why? Windows waits one hour after writing a quota event for a user before writing the same event a second time. You can modify the quota notification time by editing the registry. See
Microsoft Knowledge Base article 228812 for more details.
About Mitch Tulloch
Mitch Tulloch was lead author for the Windows Vista Resource Kit from Microsoft Press, which is the book for IT pros who want to deploy, maintain and support Windows Vista in mid- and large-sized network environments. Mitch was also the author of Introducing Windows Server 2008 and technical project lead for the Microsoft Office Communications Server 2007 Resource Kit, both books also from Microsoft Press. For more information on these and other books by Mitch, see www.mtit.com .
Article not looking right or info is missing? Let us know so that we can fix it: .