UnifiedWriteFilter CSP

The following list shows the UnifiedWriteFilter configuration service provider nodes:

CurrentSession

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession

Represent the UWF configuration in the current session (power cycle).

Description framework properties:

Property name Property value
Format node
Access Type Get

CurrentSession/AvailableOverlaySpace

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/AvailableOverlaySpace

The amount of free space, in megabytes, available to the UWF overlay.

Description framework properties:

Property name Property value
Format int
Access Type Get

CurrentSession/CommitRegistry

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/CommitRegistry

This method commits changes to the specified registry key and value.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Exec, Get

CurrentSession/CommitRegistryDeletion

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/CommitRegistryDeletion

This method deletes the specified registry key or registry value and commits the deletion.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Exec, Get

CurrentSession/CriticalOverlayThreshold

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/CriticalOverlayThreshold

The critical threshold size, in megabytes. UWF sends a critical threshold notification event when the UWF overlay size reaches or exceeds this value.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 1024

CurrentSession/FilterEnabled

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/FilterEnabled

Indicates if UWF is enabled for the current session.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/MaximumOverlaySize

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/MaximumOverlaySize

Indicates the maximum cache size, in megabytes, of the overlay in the current session.

Description framework properties:

Property name Property value
Format int
Access Type Get

CurrentSession/OverlayConsumption

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/OverlayConsumption

The current size, in megabytes, of the UWF overlay.

Description framework properties:

Property name Property value
Format int
Access Type Get

CurrentSession/OverlayFlags

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/OverlayFlags

Indicates flags set for the overlay in the current session. This value is a bit field represented by the combination of the following:

0x1: The next session's overlay will have Freespace Passthrough mode enabled to store writes in unused space on disk.

0x2: The next session's overlay will have Persistent mode enabled to retain writes across reboots. Only valid for disk-based overlays.

0x4: The next session's overlay will have Read-Only Media mode enabled to support the Hibernate Once/Resume Many (HORM) feature.

Description framework properties:

Property name Property value
Format int
Access Type Get

CurrentSession/OverlayType

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/OverlayType

Indicates the type of overlay in the current session. 0: RAM-based overlay, 1: Disk-based overlay.

Description framework properties:

Property name Property value
Format int
Access Type Get

CurrentSession/PersistDomainSecretKey

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/PersistDomainSecretKey

Indicates if the domain secret registry key is in the registry exclusion list. If the registry key isn't in the exclusion list, changes aren't persisted after a restart.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/PersistTSCAL

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/PersistTSCAL

Indicates if the Terminal Server Client Access License (TSCAL) registry key is in the UWF registry exclusion list. If the registry key isn't in the exclusion list, changes aren't persisted after a restart.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/RegistryExclusions

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/RegistryExclusions

The root node to contain all the registry exclusions.

Description framework properties:

Property name Property value
Format node
Access Type Get

CurrentSession/RegistryExclusions/{ExcludedRegistry}

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/RegistryExclusions/{ExcludedRegistry}

A registry key in the registry exclusion list for UWF in the current session.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Get
Dynamic Node Naming ClientInventory

CurrentSession/ServicingEnabled

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/ServicingEnabled

Indicates when servicing is enabled in the current session.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/ShutdownPending

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/ShutdownPending

This value is true if the system is pending on shutdown, else false.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/Volume

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume

The root node to contain all the volumes protected by UWF in the current session.

Description framework properties:

Property name Property value
Format node
Access Type Get

CurrentSession/Volume/{Volume}

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}

Represents a volume in the current session.

Description framework properties:

Property name Property value
Format node
Access Type Get
Dynamic Node Naming ClientInventory
CurrentSession/Volume/{Volume}/BindByDriveLetter
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/BindByDriveLetter

Indicates the type of binding that the volume uses in the current session. false: Bind by volume name, true: Bind by drive letter.

Description framework properties:

Property name Property value
Format bool
Access Type Get
CurrentSession/Volume/{Volume}/CommitFile
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/CommitFile

This method commits changes from the overlay to the physical volume for a specified file on a volume protected by UWF.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Exec, Get
CurrentSession/Volume/{Volume}/CommitFileDeletion
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/CommitFileDeletion

This method deletes the specified file and commits the deletion to the physical volume.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Exec, Get
CurrentSession/Volume/{Volume}/DriveLetter
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/DriveLetter

The drive letter of the volume. If the volume doesn't have a drive letter, this value is NULL.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Get
CurrentSession/Volume/{Volume}/Exclusions
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/Exclusions

The root node to contain all the file exclusions for the volume.

Description framework properties:

Property name Property value
Format node
Access Type Get
CurrentSession/Volume/{Volume}/Exclusions/{ExclusionPath}
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/Exclusions/{ExclusionPath}

A string that contains the full path of the file or folder relative to the volume.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Get
Dynamic Node Naming ClientInventory
CurrentSession/Volume/{Volume}/Protected
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/Volume/{Volume}/Protected

Indicates whether the volume is protected by UWF in the current session.

Description framework properties:

Property name Property value
Format bool
Access Type Get

CurrentSession/WarningOverlayThreshold

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/CurrentSession/WarningOverlayThreshold

The warning threshold size, in megabytes. UWF sends a warning threshold notification event when the UWF overlay size reaches or exceeds this value.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 512

NextSession

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession

Contains settings for next UWF session(post reboot).

Description framework properties:

Property name Property value
Format node
Access Type Get

NextSession/FilterEnabled

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/FilterEnabled

Indicates if UWF is enabled for the next session.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value false

Allowed values:

Value Description
false (Default) UWF is disabled for the next session.
true UWF is enabled for the next session.

NextSession/HORMEnabled

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/HORMEnabled

Indicates if HORM is enabled for the next session.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value false

Allowed values:

Value Description
false (Default) HORM is disabled for the next session.
true HORM is enabled for the next session.

NextSession/MaximumOverlaySize

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/MaximumOverlaySize

Indicates the maximum cache size, in megabytes, of the overlay for the next session.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 4096

NextSession/OverlayFlags

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/OverlayFlags

Indicates flags for the overlay that will be used for the next session.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 0

Allowed values:

Flag Description
0x1 The next session's overlay will have Freespace Passthrough mode enabled to store writes in unused space on disk.
0x2 The next session's overlay will have Persistent mode enabled to retain writes across reboots. Only valid for disk-based overlays.
0x4 The next session's overlay will have Read-Only Media mode enabled to support the Hibernate Once/Resume Many (HORM) feature.

NextSession/OverlayType

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/OverlayType

Indicates the type of overlay that will be used for the next session.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) The next session will use a RAM-based overlay.
1 The next session will use a disk-based overlay.

NextSession/PersistDomainSecretKey

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/PersistDomainSecretKey

Indicates if the domain secret registry key is in the registry exclusion list in the next session. If the registry key isn't in the exclusion list, changes aren't persisted after a restart.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value true

Allowed values:

Value Description
false The domain secret registry key isn't in the exclusion list in the next session.
true (Default) The domain secret registry key is in the exclusion list in the next session.

NextSession/PersistTSCAL

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/PersistTSCAL

Indicates if the Terminal Server Client Access License (TSCAL) registry key is in the UWF registry exclusion list in the next session. If the registry key isn't in the exclusion list, changes aren't persisted after a restart.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value true

Allowed values:

Value Description
false The TSCAL registry key isn't in the exclusion list in the next session.
true (Default) The TSCAL registry key is in the exclusion list in the next session.

NextSession/RegistryExclusions

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/RegistryExclusions

The root node to contains all the registry exclusions for the next session.

Description framework properties:

Property name Property value
Format node
Access Type Get

NextSession/RegistryExclusions/{ExcludedRegistry}

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/RegistryExclusions/{ExcludedRegistry}

A registry key in the registry exclusion list for UWF.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get
Dynamic Node Naming UniqueName: A registry key in the registry exclusion list for UWF.

NextSession/ResetPersistentState

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/ResetPersistentState

If the Persistent flag is set for the overlay in the current session, indicates if and how the persistent data will be cleared on next boot.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 0

Allowed values:

Value Description
0 (Default) Don't clear the persistent data on next boot.
1 Clear the persistent data on next boot, rolling the device back to when the overlay was enabled.
255 Honor the setting in ResetPersistentStateSavedMode.

NextSession/ResetPersistentStateSavedMode

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/ResetPersistentStateSavedMode

Configure how persistent data in a disk overlay with the Persistent flag enabled is handled across reboots. This is honored if the ResetPersistentState is set to 255.

Description framework properties:

Property name Property value
Format int
Access Type Get, Replace
Default Value 1

Allowed values:

Value Description
0 Don't clear the persistent data across reboots.
1 (Default) Clear the persistent data across reboots, rolling the device back to when the overlay was enabled.

NextSession/ServicingEnabled

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/ServicingEnabled

Indicates whether or not UWF servicing mode should be enabled for the next session.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value false

Allowed values:

Value Description
false (Default) UWF servicing mode will be disabled for the next session.
true UWF servicing mode will be enabled for the next session.

NextSession/Volume

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume

The root node to contain all the volumes protected by UWF for the next session.

Description framework properties:

Property name Property value
Format node
Access Type Get

NextSession/Volume/{Volume}

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}

Represents a volume protected by UWF in the next session.

Description framework properties:

Property name Property value
Format node
Access Type Add, Delete, Get
Dynamic Node Naming UniqueName: Represents a volume protected by UWF in the next session.
NextSession/Volume/{Volume}/BindByDriveLetter
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}/BindByDriveLetter

Indicates if the UWF volume is bound to the physical volume by drive letter or by volume name in the next session.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value false

Allowed values:

Value Description
false (Default) The volume is bound by volume name in the next session.
true The volume is bound by drive letter in the next session.
NextSession/Volume/{Volume}/DriveLetter
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}/DriveLetter

The drive letter of the volume. If the volume doesn't have a drive letter, this value is NULL.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Get
Dynamic Node Naming ClientInventory
NextSession/Volume/{Volume}/Exclusions
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}/Exclusions

The root node to contain all the file exclusions for the volume in the next session.

Description framework properties:

Property name Property value
Format node
Access Type Get
NextSession/Volume/{Volume}/Exclusions/{ExclusionPath}
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}/Exclusions/{ExclusionPath}

A string that contains the full path of the file or folder relative to the volume.

Description framework properties:

Property name Property value
Format chr (string)
Access Type Add, Delete, Get
Dynamic Node Naming UniqueName: A string that contains the full path of the file or folder relative to the volume.
NextSession/Volume/{Volume}/Protected
Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/NextSession/Volume/{Volume}/Protected

Indicates whether the volume is protected by UWF in the next session.

Description framework properties:

Property name Property value
Format bool
Access Type Get, Replace
Default Value false

Allowed values:

Value Description
false (Default) The volume isn't protected by UWF in the next session.
true The volume is protected by UWF in the next session.

ResetSettings

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/ResetSettings

Restores UWF settings to the original state that was captured at install time.

Description framework properties:

Property name Property value
Format null
Access Type Exec, Get

RestartSystem

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/RestartSystem

Safely restarts a system protected by UWF, even if the overlay is full.

Description framework properties:

Property name Property value
Format null
Access Type Exec, Get
Reboot Behavior Automatic

ShutdownSystem

Scope Editions Applicable OS
✅ Device
❌ User
❌ Pro
✅ Enterprise
✅ Education
✅ IoT Enterprise / IoT Enterprise LTSC
✅ Windows 10, version 1709 [10.0.16299] and later
./Device/Vendor/MSFT/UnifiedWriteFilter/ShutdownSystem

Safely shuts down a system protected by UWF, even if the overlay is full.

Description framework properties:

Property name Property value
Format null
Access Type Exec, Get
Reboot Behavior Automatic

Configuration service provider reference