Filetrace - Windows 11 Service
ETW File Trace Filter.
This service also exists in Windows 10, 7, 8 and Vista.
Startup Type
| Windows 11 version | Home | Pro | Education | Enterprise |
|---|---|---|---|---|
| 21H2 | Manual | Manual | Manual | Manual |
| 22H2 | Manual | Manual | Manual | Manual |
| 23H2 | Manual | Manual | Manual | Manual |
| 24H2 | Manual | Manual | Manual | Manual |
Default Properties
| Display name: | Filetrace |
| Service name: | Filetrace |
| Type: | filesys |
| Path: | %WinDir%\system32\drivers\filetrace.sys |
| Error control: | normal |
| Group: | FSFilter Activity Monitor |
Default Behavior
The Filetrace service is a file system driver. If Filetrace fails to start, the error is logged. Windows 11 startup proceeds, but a message box is displayed informing you that the Filetrace service has failed to start.
Dependencies
Filetrace is unable to start, if the FltMgr service is stopped or disabled.
Restore Default Startup Type for Filetrace
Automated Restore
1. Select your Windows 11 edition and release, and then click on the Download button below.
2. Save the RestoreFiletraceWindows11.bat file to any folder on a local drive such as SSD or a hard disk.
3. Right-click the downloaded batch file and select Properties.
4. Check the Unblock checkbox and click OK.
5. Right-click the batch file again and select Run as administrator.
6. Restart the computer to save changes.
Note. Make sure that the filetrace.sys file exists in the %WinDir%\system32\drivers folder. If this file is missing you can try to restore it from your Windows 11 installation media.