Pool Damage from Ntfs.sys When Quotas Are Used on a Mounted Volume

Hotfix Download Available
View and request hotfix downloads

View products that this article applies to.

This article was previously published under Q285799

Expand all | Collapse all

SYMPTOMS

When you are using mount points and quotas on the same volume, you may receive random error messages on a blue screen. This problem only happens when the path to the mount point is greater than 20 characters and the option to log an event when a user exceeds their quota limit or warning level is enabled.

When special pool is enabled by using the IoEr tag and monitoring for overruns, you receive the following error message on a blue screen:

STOP 0x000000D6 (0xa4008000, 0x00000001, 0xf0d8db53, 0x00000000)

NOTE: The first and fourth parameters may vary, but the second parameter is always 1 and the third parameter address is always in Ntfs.sys.

Back to the top

CAUSE

The problem occurs because Ntfs.sys is writing a mount point string that is larger than the memory that is allocated.

Back to the top

RESOLUTION

A supported hotfix is available from Microsoft. However, this hotfix is intended to correct only the problem that is described in this article. Apply this hotfix only to systems that are experiencing this specific problem.

If the hotfix is available for download, there is a "Hotfix download available" section at the top of this Knowledge Base article. If this section does not appear, submit a request to Microsoft Customer Service and Support to obtain the hotfix.

Note If additional issues occur or if any troubleshooting is required, you might have to create a separate service request. The usual support costs will apply to additional support questions and issues that do not qualify for this specific hotfix. For a complete list of Microsoft Customer Service and Support telephone numbers or to create a separate service request, visit the following Microsoft Web site:

http://support.microsoft.com/contactus/?ws=support (http://support.microsoft.com/contactus/?ws=support)

Note The "Hotfix download available" form displays the languages for which the hotfix is available. If you do not see your language, it is because a hotfix is not available for that language. The English version of this fix should have the following file attributes or later:

   Date        Time       Version      Size        File name
   ----------------------------------------------------------
   1/26/2001   07:38p   5.0.2195.3192  512,240     Ntfs.sys

Back to the top

WORKAROUND

To work around this problem, open the volume's properties dialog box, and then click to clear the following check boxes on the Quota tab under Select the quota logging option for this volume: