Both FindFirstChangeNotification and ReadDirectoryChangesW will allow you to spot changes to an entire volume. However, FindFirstChangeNotification will then merely tell you that a change occurred, not which file it occurred to. ReadDirectoryChangesW, on the other hand, can return the filename of the changed file. As it happens I've just put together an example on using this API call in thread222-576673