Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am looking for a method to monitor exactly which files are being accessed on boot up by Windows. This is in attempts to find a bottle neck on physical workstations, but I would also like this information for all workstations in general. I can run the image in a VM, using a SAN as the disk location. I just need a fairly easy way to see which files are being touched on boot up.


share|improve this question
Are you looking for something like BootVis? – ChrisN Jan 16 '13 at 23:16
@ChrisN that certainly seems like what I am looking for. I will do some more reading at and… (This seems a little sketchy though) – Mike Soule Jan 16 '13 at 23:52
The unfortunate thing is, that BootVis is XP only. And the link on is broken... – ChrisN Jan 16 '13 at 23:53
Windows Performance Recorder and Windows Performance Analyzer seem promising though. – Mike Soule Jan 16 '13 at 23:54
Yeah, I think that might do what you want to do - I didn't look into it much, though. Something else you might want to consider is Soluto. – ChrisN Jan 17 '13 at 0:00
up vote 2 down vote accepted

You need to do a Boot trace, as shown here or here.

Alternatively you can use the Event Viewer, read this tutorial for more info.

share|improve this answer
Perfect, thank you. – Mike Soule Jan 17 '13 at 15:47

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.