Difference in starting driver auto or manual ?!?!?

NTFSD
1

Hi gurus,

can anyone explain this ? We’ve made a file filter driver that runs
perfectly under Windows 2000 when it is manually started (eg, via net start
).

Now, we changed the startup behaviour of the driver so that it is
automatically started (“start” value in registry entry is set to 2). Now,
we keep getting bugchecks like NO_MORE_IRP_STACK_LOCATIONS,
IRQL_NOT_LESS_OR_EQUAL and others. The driver is part of the ‘Filter’
group. The accompanying service depends on the driver (via DependOnService)
and is also automatically started.

It seems that the NO_MORE_IRP_STACK_LOCATIONS occur mostly when network
resources are accessed.

Can anyone explain this behaviour ?
–
Bartjan.

—
You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

2

Some thoughts that might help:

  • dependency of some other driver
  • different user credentials that starts the driver (user issuing net start
    command vs. OS). To exclude this, you can try with RunAs command and specify
    “Local system account” for running “net start ”. RunAs is part of
    W2K (press shift key and right mouse button over some exe file). Alternative
    is CmdAsUser utility downloadable from
    http://www.develop.com/kbrown/security/samples.htm.
    Wbr Primoz

    -----Original Message-----
    From: Bartjan Wattel [mailto:xxxxx@zeelandnet.nl]
    Sent: Thursday, March 08, 2001 2:55 PM
    To: File Systems Developers
    Subject: [ntfsd] Difference in starting driver auto or manual ?!?!?

    Hi gurus,

    can anyone explain this ? We’ve made a file filter driver that runs
    perfectly under Windows 2000 when it is manually started (eg, via net start
    ).

    Now, we changed the startup behaviour of the driver so that it is
    automatically started (“start” value in registry entry is set to 2). Now,
    we keep getting bugchecks like NO_MORE_IRP_STACK_LOCATIONS,
    IRQL_NOT_LESS_OR_EQUAL and others. The driver is part of the ‘Filter’
    group. The accompanying service depends on the driver (via DependOnService)
    and is also automatically started.

    It seems that the NO_MORE_IRP_STACK_LOCATIONS occur mostly when network
    resources are accessed.

    Can anyone explain this behaviour ?
    –
    Bartjan.

    —
    You are currently subscribed to ntfsd as: xxxxx@hermes.si
    To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com

    —
    You are currently subscribed to ntfsd as: $subst(‘Recip.EmailAddr’)
    To unsubscribe send a blank email to leave-ntfsd-$subst(‘Recip.MemberIDChar’)@lists.osr.com