You are currently offline, waiting for your internet to reconnect

The size of the $vds$.log file grows quickly after you remove a RAW file system storage device from a Windows Server 2003-based computer

Support for Windows Server 2003 ended on July 14, 2015

Microsoft ended support for Windows Server 2003 on July 14, 2015. This change has affected your software updates and security options. Learn what this means for you and how to stay protected.

This article has been archived. It is offered "as is" and will no longer be updated.
When you remove a removable storage device that uses the RAW file system from a Microsoft Windows Server 2003-based computer, the size of the $vds$.log file grows quicker than expected. Additionally, you may notice many instances of the following entry in the log file:


This problem occurs if the following conditions are true:
  • The Virtual Disk Service (VDS) is running and VDS logging is enabled.
  • The Content Indexing service (Cisvc.exe) is enabled.
This problem occurs because the Cisvc.exe triggers a new mount point notification from the RAW file system. This behavior occurs when the Cisvc.exe handles mount point notifications that the Plug and Play (PnP) devices send.

When a RAW volume is mounted, PnP sends a notification. The Cisvc.exe processes the notification by opening a handle to the RAW disk device, and then the Cisvc.exe closes the handle. The RAW disk driver mounts the RAW volume the first time that a handle for a RAW disk device is opened. Then, the driver dismounts the RAW volume when the last handle for the RAW disk device is closed. Therefore, RAW volume mount notification is sent repeatedly.

The VDS also processes a RAW volume mount notification from PnP by logging information to the $vds$.log file. This behavior causes the size of the $vds$.log file to grow quickly.

The initial RAW volume mount notification may occur because the Disk Management snap-in of the Windows Server 2003 operating system tool calls the VDS to obtain information about a RAW disk. This behavior causes the VDS to open a handle to a RAW disk device.
To work around this problem, use either of these methods:
  • Stop the Cisvc.exe. It is better not to leave mounted RAW volumes when you use the Cisvc.exe.
  • Un-assign the drive letter from the PnP devices.
Microsoft has confirmed that this is a problem in the Microsoft products that are listed in the "Applies to" section.
More information
For more information about how to enable logging for the VDS, click the following article number to view the article in the Microsoft Knowledge Base:
842011 How to turn on logging for the VDS in Windows Server 2003

Article ID: 924733 - Last Review: 01/15/2015 18:02:46 - Revision: 2.0

Microsoft Windows Server 2003, Standard Edition (32-bit x86), Microsoft Windows Server 2003, Enterprise Edition (32-bit x86), Microsoft Windows Server 2003, Datacenter Edition (32-bit x86), Microsoft Windows Server 2003, Web Edition

  • kbnosurvey kbarchive kbserver kbtshoot kbprb KB924733