Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Sept/Oct 2019 Issue of The NT Insider available


Download PDF here: http://insider.osr.com/2019/ntinsider_2019_01.pdf

It’s a particularly BIG issue, too: 40 pages of technical goodness, ranging from WDF to Minifilters. Check it out.
Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Trying to set OWNER_SECURITY_INFORMATION using FltSetSecurityObject(), returns STATUS_INVALID_OWNER

RashmiRashmi Member Posts: 4
edited April 3 in NTFSD

From some posts, I learnt that we need to restore the priviliges of the thread before setting an owner.
I followed http://www.osronline.com/article.cfm^article=23.htm to restore the privileges. But I am seeing STATUS_ACCESS_VIOLATION for routine NtAdjustPrivilegesToken().

So my question is
1) Is restoring the privileges is the solution to owner to security object?
2 ) If yes, how do I achieve that? Because I am seeing STATUS_ACCESS_VIOLATION for the routine NtAdjustPrivilegesToken()

Comments

  • ntdeveloper31ntdeveloper31 Member Posts: 23

    Just posting in case someone comes across this very issue.

    This needs to be done in the context of system worker thread. FltAllocateGenericWorkItem, FltQueueGenericWorkItem etc. family of functions are your friends.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Writing WDF Drivers 21 Oct 2019 OSR Seminar Space & ONLINE
Internals & Software Drivers 18 Nov 2019 Dulles, VA
Kernel Debugging 30 Mar 2020 OSR Seminar Space
Developing Minifilters 27 Apr 2020 OSR Seminar Space & ONLINE