While doing save operation of a MS-WORD file, (in my example "1M.doc" ) with client (Windows 8) and server(either Win 2008 R2 or Win2012 R2). Observing the following scenario.
After Renames are done(eg, xx.tmp renamed to 1M.doc) , all the file handles are being closed one by one.When the xx.tmp file is closed, immediately followed by Create of 1M.doc, the LastWrite time values between Close and Create are same but LastChanged time values are different. The LastChanged and LastWrite times are noted from the Close Response and Create Response packets.
No modification is done on the file between this last close and next create. So, why LastChanged time values are different for the file? We are observing this almost everytime with Win8- Win2k8R2/Win2012R2, but not observed till now with Win8-Win2012.