World of EUC

try <http://sysinternals.com|sysinternals.com> maybe RAM MAP or possibly procmon capture

Just be careful of filter drivers, I found this out when trying to work out how much data Teams was writing to an FSLogix disk

Thanks,  ProcMon shows me every single writet but I cant figure out how to quantify them in kb.mb.ect

Write it to a VHD and see how much it grows

I'd use Procmon &gt; stop collection and  set a filter for executable e.g. Notepad, goto the dropdown menu called Filter and enable "Drop Filtered Events". Don't show Network and Registry activity. Now Start your Procmon and then start the program you have configured to track, let it run for the amount of time that you think is needed. let all run and go to the Tools dropdown menu. Use File summary for file and folder data like in the picture below where I used a filter on Notepad and dropped data in %desktop%\1.txt and saved it.  If you need IOPS information then use Tools &gt; Process Activity Information and then double click on the process to get another form to popup, that will show numbers when you hover over the graph

<@UL91DJGSE> That is impressive. That would be perfect but I think James is on to something with the filter driver.  When I do the above instructions you provided I get 0 reads and writes for anywhere where FSlogix captures the data. (all of users %apdata%

Anyone know how to tell procmon to capture reads and writes that the fslogix filter driver takes?

I think you have to adjust the filter driver of FSLogix so that procmon is running above it, or vice versa

Is that something trivial to do? I have not learned about adjusting the filter driver or setting apps to be above or below. Have you seen any docs ?  LOL, i go to your site for this kind off stuff

Every filter driver has an altitude set in the Registry. Look up how to adjust the app layering filter driver, the FSLogix or procmon process should be the same

<https://social.msdn.microsoft.com/Forums/en-US/8a495cb9-d025-4b34-a122-e1c387d35a0b/faq-fslogix-troubleshooting-guide?forum=FSLogix> not sure if you can narrow down your search for the specific filter driver from the SC cmd's listed here on the cmdline image?

The FSLogix filter driver altitude is here - HKLM\System\CurrentControlSet\Services\frxdrvvt\Instances\frxdrvvt\Altitude