Skip to main content

Sysinternals File and Disk Utilities

  • AccessChk

    This tool shows you the accesses the user or group you specify has to files, Registry keys or Windows services.

  • AccessEnum

    This simple yet powerful security tool shows you who has what access to directories, files and Registry keys on your systems. Use it to find holes in your permissions.

  • CacheSet

    CacheSet is a program that allows you to control the Cache Manager's working set size using functions provided by NT. It's compatible with all versions of NT.

  • Contig

    Wish you could quickly defragment your frequently used files? Use Contig to optimize individual files, or to create new files that are contiguous.

  • Disk2vhd

    Disk2vhd simplifies the migration of physical systems into virtual machines (p2v).

  • DiskExt

    Display volume disk-mappings.

  • DiskMon

    This utility captures all hard disk activity or acts like a software disk activity light in your system tray.

  • DiskView

    Graphical disk sector utility.

  • Disk Usage (DU)

    View disk usage by directory.

  • EFSDump

    View information for encrypted files.

  • FindLinks

    FindLinks reports the file index and any hard links (alternate file paths on the same volume) that exist for the specified file.  A file's data remains allocated so long as at it has at least one file name referencing it.

  • Junction

    Create Win2K NTFS symbolic links.

  • LDMDump

    Dump the contents of the Logical Disk Manager"s on-disk database, which describes the partitioning of Windows 2000 Dynamic disks.

  • MoveFile

    Schedule file rename and delete commands for the next reboot. This can be useful for cleaning stubborn or in-use malware files.

  • NTFSInfo

    Use NTFSInfo to see detailed information about NTFS volumes, including the size and location of the Master File Table (MFT) and MFT-zone, as well as the sizes of the NTFS meta-data files.

  • PendMoves

    See what files are scheduled for delete or rename the next time the system boots.

  • Process Monitor

    Monitor file system, Registry, process, thread and DLL activity in real-time.

  • PsFile

    See what files are opened remotely.

  • PsTools

    The PsTools suite includes command-line utilities for listing the processes running on local or remote computers, running processes remotely, rebooting computers, dumping event logs, and more.

  • SDelete

    Securely overwrite your sensitive files and cleanse your free space of previously deleted files using this DoD-compliant secure delete program.

  • ShareEnum

    Scan file shares on your network and view their security settings to close security holes.

  • Sigcheck

    Dump file version information and verify that images on your system are digitally signed.

  • Streams

    Reveal NTFS alternate streams.

  • Sync

    Flush cached data to disk.

  • VolumeID

    Set Volume ID of FAT or NTFS drives.

Microsoft is conducting an online survey to understand your opinion of the MSDN Web site. If you choose to participate, the online survey will be presented to you when you leave the MSDN Web site.

Would you like to participate?