Registering FS minifilter

NTFSD
1

Hello everyone,

I’m having some issues with the passThrough sample provided by Microsoft (https://github.com/Microsoft/Windows-driver-samples/tree/master/filesys/miniFilter/passThrough). If I install it by right clicking the inf file it works well, however when I try to start it as a service manually with the following steps:

  1. OpenSCManager
  2. CreateService
  3. OpenService
  4. StartService

DriverEntry starts but FltRegisterFilter returns NTSTATUS c0000034 (STATUS_OBJECT_NAME_NOT_FOUND).

Anyone have any ideas why this might happen or how to deal with this issue?

2

The INF script actually installs additional registry keys and parameters that are required by Filter Manager. If you just use SCM, that information is not created and Filter Manager cannot find the keys (and values) and you get back the STATUS_OBJECT_NAME_NOT_FOUND error return.

We do this in the OSR driver loader, actually, but you can do it yourself as well - you just have to understand what those registry values are and create them.

Tony
OSR

3

Guess it’s time to hit the docs :slight_smile:

Thank you