An update is available that lets the Chkdsk.exe tool compact the NTFS security descriptor stream in Windows Server 2003 Service Pack 2

In Windows Server 2003, the NTFS file system does not provide an option to compact the security descriptor stream in the master file table (MFT).

Note The security descriptor stream is also known as the $secure file.

Therefore, the security descriptor stream may continue to grow and to consume lots of disk space, depending on the file system usage. If the security descriptor stream that is used exceeds a certain threshold, no more security settings can be configured in NTFS.

Currently, to compact the security descriptor stream, you must back up the whole volume, format the volume, and then restore the data on the volume.

This update adds a new function to the Chkdsk.exe tool so that it can compact the security descriptor stream when you use the /f switch.

After you apply this update, the output of the Chkdsk.exe tool may contain information that resembles the following:To determine whether the security descriptor stream has been successfully compacted and to determine how much space has been saved, first run the Chkdsk.exe tool together with the /f switch. Then, run the Chkdsk.exe tool again without the /f switch. Check the KB in use by the system value before and after you use the /f switch. The decrease in the KB in use by the system value after you use the /f switch represents the space that is saved by the compaction.

Update information

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem. This hotfix might receive additional testing. Therefore, if you are not severely affected by this problem, we recommend that you wait for the next software update that contains this hotfix.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, contact Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site: Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language.

Prerequisites

To apply this update, you must have Windows Server 2003 Service Pack 2 installed. For more information, click the following article number to view the article in the Microsoft Knowledge Base:

Restart requirement

You must restart the computer after you apply this update.

Update replacement information

This update does not replace any other updates.

File information

The English version of this update has the file attributes (or later file attributes) that are listed in the following table. The dates and times for these files are listed in Coordinated Universal Time (UTC). When you view the file information, it is converted to local time. To find the difference between UTC and local time, use the Time Zone tab in the Date and Time item in Control Panel.

Windows Server 2003 X86

Windows Server 2003 IA64Windows Server 2003 x64

For more information about software update terminology, click the following article number to view the article in the Microsoft Knowledge Base: