I think I have found a bit of funniness with the EXchange Installable File
System (EXIFS). Its quite a small thing but it might be considered a bug and
it might affect other people. If I call IoQueryVolumeInformation for an
EXIFS volume, it reports the FileSystemName as NTFS, which it isnt.
For current project I am just interested in filtering above NTFS. I ran into
a bit of trouble filtering EXIFS due to the above. The answer for me was to
change the code to call IoGetBaseFileSystemDeviceObject and look at the
DeviceObject->DriverObject->DriverName field. I was wondering if anyone
could advice a better method to determine if the file system is an instance
of NTFS.
Cheers
Lyndon