WDM storage driver problem

Hello:

This is a WDM driver , a mounted volume device that requires only my own application to access the volume.Problem is: after Windows 10 1511, filtration process in some way, The volume device can still be accessed through process 4(4 process can’t be filtered out, if filter and the whole mount device does not work). Before Windows 10 1511, there was no problem.Why is that?And how can I get the process ID information for the real operation from the IRP on process 4

Process 4 is the OS process.

Mark Roddy

On Mon, Oct 9, 2017 at 3:41 AM, xxxxx@msn.cn wrote:

> Hello:
>
> This is a WDM driver , a mounted volume device that requires only my
> own application to access the volume.Problem is: after Windows 10 1511, filtration
> process in some way, The volume device can still be accessed through
> process 4(4 process can’t be filtered out, if filter and the whole mount
> device does not work). Before Windows 10 1511, there was no problem.Why
> is that?And how can I get the process ID information for the real
> operation from the IRP on process 4
>
> —
> NTDEV is sponsored by OSR
>
> Visit the list online at: http:> showlists.cfm?list=ntdev>
>
> MONTHLY seminars on crash dump analysis, WDF, Windows internals and
> software drivers!
> Details at http:
>
> To unsubscribe, visit the List Server section of OSR Online at <
> http://www.osronline.com/page.cfm?name=ListServer&gt;
></http:></http:>