Windows System Software -- Consulting, Training, Development -- Unique Expertise, Guaranteed Results

Before Posting...
Please check out the Community Guidelines in the Announcements and Administration Category.

Blocking creation of a network share

OttljvOttljv Member Posts: 5

Hi guys,

Is there a way to monitor and block sharing of a folder? For example if I'd like to protect "c:\test" folder I'd like to deny all access to files within it.
But if someone shares this folder:

net share mytest=c:\test /GRANT:Everyone,FULL

The folder would be accessible through network share circumventing the regular minifilter protection (blocking access to folder based on disposition in PreCreate)

Thank you.

Comments

  • Scott_Noone_(OSR)Scott_Noone_(OSR) Administrator Posts: 3,142

    Your minifilter will see file accesses from remote clients. They arrive as requests from the System process on a thread impersonating the remote user.

    -scott
    OSR

  • OttljvOttljv Member Posts: 5

    Thank you Scott.

Sign In or Register to comment.

Howdy, Stranger!

It looks like you're new here. If you want to get involved, click one of these buttons!

Upcoming OSR Seminars
Developing Minifilters 29 July 2019 OSR Seminar Space
Writing WDF Drivers 23 Sept 2019 OSR Seminar Space
Kernel Debugging 21 Oct 2019 OSR Seminar Space
Internals & Software Drivers 18 Nov 2019 Dulles, VA