Accessing Filter Driver

NTDEV
1

Hi,
I have written a FileSystem filter driver to get the filenames of files
opened by apps like word, excel etc. Since my application might not be
running all the time, I have written a service which monitors all file
operation and serve my application. This Service runs under Local System
Account. This configuration works well on all machines except one client
machine. My service is not able to open handle to Device Driver. Is there
any user permission or right which can prevent a service from opening handle
to Driver.

I used WinObj on client machines and I could see the object of my driver.
Does that means my driver is loaded by OS properly?

How can I debug the problem?

Thanks in advance
Ashish

2

What error status are you getting back?

On Wed, 1 Feb 2006 17:19:51 +0530, “Ashish”
wrote:

>Hi,
> I have written a FileSystem filter driver to get the filenames of files
>opened by apps like word, excel etc. Since my application might not be
>running all the time, I have written a service which monitors all file
>operation and serve my application. This Service runs under Local System
>Account. This configuration works well on all machines except one client
>machine. My service is not able to open handle to Device Driver. Is there
>any user permission or right which can prevent a service from opening handle
>to Driver.
>
>I used WinObj on client machines and I could see the object of my driver.
>Does that means my driver is loaded by OS properly?
>
>How can I debug the problem?
>
>Thanks in advance
>Ashish
>
>

3

Unfortunately…We are not logging that error…We are just logging if
StartService() API fails… We believe error is most likely to be
ACCESS_DENIED…
----- Original Message -----
From: “Mark J. Cariddi”
Newsgroups: ntdev
To: “Windows System Software Devs Interest List”
Sent: Wednesday, February 01, 2006 6:08 PM
Subject: Re:[ntdev] Accessing Filter Driver

> What error status are you getting back?
>
> On Wed, 1 Feb 2006 17:19:51 +0530, “Ashish”
> wrote:
>
> >Hi,
> > I have written a FileSystem filter driver to get the filenames of files
> >opened by apps like word, excel etc. Since my application might not be
> >running all the time, I have written a service which monitors all file
> >operation and serve my application. This Service runs under Local System
> >Account. This configuration works well on all machines except one client
> >machine. My service is not able to open handle to Device Driver. Is there
> >any user permission or right which can prevent a service from opening
handle
> >to Driver.
> >
> >I used WinObj on client machines and I could see the object of my driver.
> >Does that means my driver is loaded by OS properly?
> >
> >How can I debug the problem?
> >
> >Thanks in advance
> >Ashish
> >
> >
>
> —
> Questions? First check the Kernel Driver FAQ at
http://www.osronline.com/article.cfm?id=256
>
> You are currently subscribed to ntdev as: xxxxx@elasticworkspace.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com