By default, Disk Quota notifications are not written to the event log immediately. Instead, they are written to the event log every hour.
: If you use Registry Editor incorrectly, you may cause serious problems that may
require you to reinstall your operating system. Microsoft cannot guarantee that you can solve
problems that result from using Registry Editor incorrectly. Use Registry Editor at your own
Disk Quota events are written to the event log (if enabled) using the logging option in Quota properties for a drive using the NTFS file system. Disk Quota logging is configured using the following check boxes in the drive's properties:
- Log event when a user exceeds their quota limit
- Log event when a user exceeds their warning level
However, events are not logged immediately when a user exceeds one of these thresholds. Instead, logging occurs asynchronously sometime after the NTFS driver scans the quota information for quota entries over the limits or warning levels.
Modifying Disk Quota Notification Time
You can modify the default one-hour Disk Quota notification time by modifying the following registry key:
Value: NtfsQuotaNotifyRate (REG_DWORD)
Default: One hour (specified in seconds). Value not present by default.