I am looking for a method to monitor exactly which files are being accessed on boot up by Windows. This is in attempts to find a bottle neck on physical workstations, but I would also like this information for all workstations in general. I can run the image in a VM, using a SAN as the disk location. I just need a fairly easy way to see which files are being touched on boot up.


  • 1
    Are you looking for something like BootVis?
    – ChrisN
    Jan 16, 2013 at 23:16
  • @ChrisN that certainly seems like what I am looking for. I will do some more reading at msdn.microsoft.com/en-us/performance/default.aspx and raymond.cc/blog/… (This seems a little sketchy though)
    – Mike Soule
    Jan 16, 2013 at 23:52
  • 1
    The unfortunate thing is, that BootVis is XP only. And the link on raymond.cc is broken...
    – ChrisN
    Jan 16, 2013 at 23:53
  • Windows Performance Recorder and Windows Performance Analyzer seem promising though.
    – Mike Soule
    Jan 16, 2013 at 23:54
  • 1
    Yeah, I think that might do what you want to do - I didn't look into it much, though. Something else you might want to consider is Soluto.
    – ChrisN
    Jan 17, 2013 at 0:00

1 Answer 1


You need to do a Boot trace, as shown here or here.

Alternatively you can use the Event Viewer, read this tutorial for more info.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .