папка DiagTrack

Question

Что делает папка diagtrack в windows? Почему на папке Globalization нету ограничения от Trustedinstaller, хотя эта папка системная и ее удаление приведет к краху системы? Как Windows понимает, что файл используется приложением и не даёт его удалить?

Answer 1

Hello, The DiagTrack folder in Windows is part of the Connected User Experiences and Telemetry service, which collects diagnostic data to help Microsoft improve system performance and reliability. It stores logs and telemetry data, such as crash reports and usage patterns, and sends them to Microsoft servers. While this service is legitimate and not malware, it has raised privacy concerns because of the extent of data it can collect ranging from basic system info to more detailed user activity, depending on your privacy settings.

As for the Globalization folder, although it's a critical system directory that supports language and locale features, it doesn't always have TrustedInstaller protection. Windows relies on other security mechanisms like file permissions and system integrity checks to safeguard it. The absence of TrustedInstaller restrictions doesn't mean it's safe to delete removing it can crash the system or break language support.

Windows prevents deletion of files in use by tracking file handles. When an application opens a file, it creates a handle that stays active until the file is closed. If another process tries to delete the file while it's still open, Windows blocks the action. This ensures data integrity and prevents crashes. You can use tools like Process Explorer or Resource Monitor to identify which process is locking a file and close it safely.