What can cause a folder's creation date/time to change in NTFS

So, could you please give various scenarios where a folder's date and time can change in NTFS? We are talking about XP/Vista/W7.

You basically create an empty folder, it has a date/time of creation.

Assume the folder never has contents. Assume the folder is at the second or perhaps at the fourth level in the tree (counted from the root).

Also, we are strictily talking about the creation date/time and not last access or modification.

Thanks a bunch in advance!
Who is Participating?
ee_autoConnect With a Mentor Commented:
Question PAQ'd and stored in the solution database.
Pete LongTechnical ConsultantCommented:

will modify them in an instant =/
Pete LongTechnical ConsultantCommented:
Hire Technology Freelancers with Gigs

Work with freelancers specializing in everything from database administration to programming, who have proven themselves as experts in their field. Hire the best, collaborate easily, pay securely, and get projects done right.

JamesSenior Cloud Infrastructure EngineerCommented:
File properties with regards to the date and time stamps

If you copy a file from D:\NTFS to D:\NTFS\SUB, it keeps the same modified date and time but changes the created date and time to the current date and time.
If you move a file from D:\NTFS to D:\NTFS\SUB, it keeps the same modified date and time and keeps the same created date and time.
In all examples, the modified date and time of a file does not change unless a property of the file has changed. The created date and time of the file changes depending on whether the file was copied or moved.

Folder properties with regards to the date and time stamps

If you create two new folders on an NTFS partition called D:\NTFS1 and D:\NTFS2, both the created and modified date and time are the same.
If you move the D:\NTFS2 folder into the D:\NTFS1 folder, creating D:\NTFS1\NTFS2, then:
D:\NTFS1 - The created folder is the same and the modified stamp changes.
D:\NTFS1\NTFS2 - Both the created folder changes and the modified folder stay the same.
This behavior occurs because, even though you moved the folder, a new folder is seen as being created within the D:\NTFS1 folder by the Master File Table (MFT).
If you copy the D:\NTFS2 folder into the D:\NTFS1 folder, creating the D:\NTFS1\NTFS2 folder, and the D:\NTFS2 folder still exists (after having copied it):
D:\NTFS1 - The created folder is the same and the modified folder time and date stamp changes.
D:\NTFS2 - No changes occur because it is the original folder.
D:\NTFS1\NTFS2 - Both the created folder and the modified folder changes to the same stamp, which is that of the time of the move.
This behavior occurs because even though you copied the folder, the new folder is seen as being created by the MFT and is given a new created and modified time stamp.

cerubAuthor Commented:
So, JBond2010, are you aware of any OS activities that would alter the date/time of creation of an otherwise untouched folder?

Please assume that the folder in question is not moved and copied into.

E.g., virus scanning, defragmentation, indexing etc.
cerubAuthor Commented:
"and *not* copied into"

So it's a lone folder with no contents at all.
JamesSenior Cloud Infrastructure EngineerCommented:
My previous comment is technically how this happens. How do you know the folder is untouched? Do you have auditing on the folder?
cerubAuthor Commented:
Thanks for all the input.

We have finally cracked this issue. None of us knew the file system of the OS actually stores a counter value instead of real dates. That's where daylight saving comes in. The perceived datetime was one hour more than expected which showed that folder/file datetimes are actually calculated.

We created a folder in October and everything checked but it had an hour stamp that couldn't be right. Sure enough, we made some tests and after the automatic daylight saving clock adjustment a false datetime was shown, as if the file would have been made an hour later. Essentially it had a false datetime attached to it.

Why was it nowehere included in my study materials regarding file systems and OS?

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.