I’m working with Win2K and have noticed some strangeness going on with my
filter driver when using mount points.
I am using a Storage Area Network and have mounted a volume on it using the
Win2k mount point facility in Disk Adminsitrator.
When I query the symbolic link for the mount point volume in order to get
its device name (using QueryDosDevices in user level code) I get something
like:
“\Device\HarddiskDmVolumes\Houics1\Volume1” (where the “Houics1” portion of
the name is the volume label - I think).
However, when I access a file on my new mount point, and examine what comes
through as the device name for the volume in the Create IRP, the driver
comes back with a device like:
“\Device\HarddiskDmVolumes\PhysicalDmVolumes\BlockVolume2”.
Now could someone please explain; what on earth does the second name
reference and in what way is it connected to the first? I mean, where does
the “\PhysicalDmVolumes\BlockVolume2” part come from? And more importantly,
how do I map this second name back to its symbolic link in order to get the
DOS visible mount point name so I can report which drive is being accessed
and compare it with what I see in Explorer? The mount point APIs are no
good, as they deal with GUIDs and these are not visible at kernel level.
i.
Ivan Lewis-Coker
Software Developer
AppSense Technologies
Europa Way
Bird Hall Lane
Cheadle Heath
Stockport
SK3 0WY
Tel: +44 (0) 161 610 4200
Fax:+44 (0) 161 610 4242
email: xxxxx@appsense.net
www: http://www.appsense.net
CONFIDENTIAL
The contents of this email and any attachments may be
confidential. It is intended for the named recipient(s).
If you are not the named recipient please notify the sender
immediately and do not disclose the contents to any other
person or make any copies.