Uh, okay, I just went back to the fresh install machine and I see the WriteWatch entry in the ControlSet locations of the registry. All of them. Was I high on something when I looked in there before? (I had been exposed to a generous sprayout of MEK in the lab just before I joined this thread.)
I installed the very latest critical updates (three of them) on both machines BEFORE I was even aware of this thread. It's my habit to hit these two machines with everything that Microsoft puts on the update site just so that, if there's something loopy about an update or patch, I'll have a chance to notice it before the problem pops up elsewhere.
Surely that data was there this morning. I can't figure out why I didn't see it -- unless maybe I had left-clicked on a sub-key in the left pane without noticing. I was using the systems in very poor light conditions at the time and might not have noticed what was highlighted in the left pane.
I feel dumb.
I'm sorry for the misleading observation. Now back to the puzzle. If I find one of the references I've seen on file system filters (something I just gave passing notice a few weeks ago) I'll post a link. It may have nothing to do with this, but it's the only lead I can think of.
- prosaic