failed mount volume request

Hi,

If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can I still access
the storage device in any way?

Thanks in advance

cheers,
vincent


Get 10mb of inbox space with MSN Hotmail Extra Storage
http://join.msn.com/?pgmarket=en-sg at only S$36 including GST

Sure - see the MSDN docs for CreateFile for how to open a storage device
for direct access (or use IoGetDeviceObjectPointer from kernel-mode).
You’ll still get your handle whether or not the OS attempts to mount the
volume and whether or not it succeeds. Otherwise, how could an
unformatted parition be formatted in the first place?

  • Nick Ryan

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of vincent gambit
Sent: Saturday, June 28, 2003 11:30 AM
To: File Systems Developers
Subject: [ntfsd] failed mount volume request

Hi,

If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can
I still access
the storage device in any way?

Thanks in advance

cheers,
vincent


Get 10mb of inbox space with MSN Hotmail Extra Storage
http://join.msn.com/?pgmarket=en-sg at only S$36 including GST


You are currently subscribed to ntfsd as: xxxxx@nryan.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Nearly any access will try to trigger mount and will so be failed,
unless you open the device in FILE_READ_ATTRIBUTES mode.

Max

----- Original Message -----
From: “vincent gambit”
To: “File Systems Developers”
Sent: Saturday, June 28, 2003 10:29 PM
Subject: [ntfsd] failed mount volume request

> Hi,
>
> If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can I still
access
> the storage device in any way?
>
> Thanks in advance
>
> cheers,
> vincent
>
> _________________________________________________________________
> Get 10mb of inbox space with MSN Hotmail Extra Storage
> http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi,

Thanks for your reply.

So the only way to fail the direct access of a storage device is using
storage filter?
eg fail the format process.

Thank You!

cheers,
vincent

From: “Nick Ryan”
>Reply-To: “File Systems Developers”
>To: “File Systems Developers”
>Subject: [ntfsd] RE: failed mount volume request
>Date: Sat, 28 Jun 2003 13:01:22 -0700
>
>Sure - see the MSDN docs for CreateFile for how to open a storage device
>for direct access (or use IoGetDeviceObjectPointer from kernel-mode).
>You’ll still get your handle whether or not the OS attempts to mount the
>volume and whether or not it succeeds. Otherwise, how could an
>unformatted parition be formatted in the first place?
>
>- Nick Ryan
>
> > -----Original Message-----
> > From: xxxxx@lists.osr.com
> > [mailto:xxxxx@lists.osr.com] On Behalf Of vincent gambit
> > Sent: Saturday, June 28, 2003 11:30 AM
> > To: File Systems Developers
> > Subject: [ntfsd] failed mount volume request
> >
> >
> > Hi,
> >
> > If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can
> > I still access
> > the storage device in any way?
> >
> > Thanks in advance
> >
> > cheers,
> > vincent
> >
> >
> > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
> >
> >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@nryan.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
> >
>
>
>
>—
>You are currently subscribed to ntfsd as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com


Get 10mb of inbox space with MSN Hotmail Extra Storage
http://join.msn.com/?pgmarket=en-sg

You can try to fail FSCTL_LOCK_VOLUME, or even any DASD open (open
of “D:” without the following path) in the FS filter.

Max

----- Original Message -----
From: “vincent gambit”
To: “File Systems Developers”
Sent: Sunday, June 29, 2003 8:49 PM
Subject: [ntfsd] RE: failed mount volume request

> Hi,
>
> Thanks for your reply.
>
> So the only way to fail the direct access of a storage device is
using
> storage filter?
> eg fail the format process.
>
> Thank You!
>
> cheers,
> vincent
>
> >From: “Nick Ryan”
> >Reply-To: “File Systems Developers”
> >To: “File Systems Developers”
> >Subject: [ntfsd] RE: failed mount volume request
> >Date: Sat, 28 Jun 2003 13:01:22 -0700
> >
> >Sure - see the MSDN docs for CreateFile for how to open a storage
device
> >for direct access (or use IoGetDeviceObjectPointer from
kernel-mode).
> >You’ll still get your handle whether or not the OS attempts to
mount the
> >volume and whether or not it succeeds. Otherwise, how could an
> >unformatted parition be formatted in the first place?
> >
> >- Nick Ryan
> >
> > > -----Original Message-----
> > > From: xxxxx@lists.osr.com
> > > [mailto:xxxxx@lists.osr.com] On Behalf Of vincent
gambit
> > > Sent: Saturday, June 28, 2003 11:30 AM
> > > To: File Systems Developers
> > > Subject: [ntfsd] failed mount volume request
> > >
> > >
> > > Hi,
> > >
> > > If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can
> > > I still access
> > > the storage device in any way?
> > >
> > > Thanks in advance
> > >
> > > cheers,
> > > vincent
> > >
> > >

> > > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > > http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntfsd as: xxxxx@nryan.com
> > > To unsubscribe send a blank email to
xxxxx@lists.osr.com
> > >
> >
> >
> >
> >—
> >You are currently subscribed to ntfsd as: xxxxx@hotmail.com
> >To unsubscribe send a blank email to
xxxxx@lists.osr.com
>
>

> Get 10mb of inbox space with MSN Hotmail Extra Storage
> http://join.msn.com/?pgmarket=en-sg
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com

Hi,

Thanks for your reply.

But what do you meant by DASD open?
Is there any documentation on this in MSDN?

Thank You!

cheers,
vincent

From: “Maxim S. Shatskih”
>Reply-To: “File Systems Developers”
>To: “File Systems Developers”
>Subject: [ntfsd] RE: failed mount volume request
>Date: Mon, 30 Jun 2003 03:34:02 +0400
>
> You can try to fail FSCTL_LOCK_VOLUME, or even any DASD open (open
>of “D:” without the following path) in the FS filter.
>
> Max
>
>----- Original Message -----
>From: “vincent gambit”
>To: “File Systems Developers”
>Sent: Sunday, June 29, 2003 8:49 PM
>Subject: [ntfsd] RE: failed mount volume request
>
>
> > Hi,
> >
> > Thanks for your reply.
> >
> > So the only way to fail the direct access of a storage device is
>using
> > storage filter?
> > eg fail the format process.
> >
> > Thank You!
> >
> > cheers,
> > vincent
> >
> > >From: “Nick Ryan”
> > >Reply-To: “File Systems Developers”
> > >To: “File Systems Developers”
> > >Subject: [ntfsd] RE: failed mount volume request
> > >Date: Sat, 28 Jun 2003 13:01:22 -0700
> > >
> > >Sure - see the MSDN docs for CreateFile for how to open a storage
>device
> > >for direct access (or use IoGetDeviceObjectPointer from
>kernel-mode).
> > >You’ll still get your handle whether or not the OS attempts to
>mount the
> > >volume and whether or not it succeeds. Otherwise, how could an
> > >unformatted parition be formatted in the first place?
> > >
> > >- Nick Ryan
> > >
> > > > -----Original Message-----
> > > > From: xxxxx@lists.osr.com
> > > > [mailto:xxxxx@lists.osr.com] On Behalf Of vincent
>gambit
> > > > Sent: Saturday, June 28, 2003 11:30 AM
> > > > To: File Systems Developers
> > > > Subject: [ntfsd] failed mount volume request
> > > >
> > > >
> > > > Hi,
> > > >
> > > > If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can
> > > > I still access
> > > > the storage device in any way?
> > > >
> > > > Thanks in advance
> > > >
> > > > cheers,
> > > > vincent
> > > >
> > > >
>
> > > > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > > > http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
> > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntfsd as: xxxxx@nryan.com
> > > > To unsubscribe send a blank email to
>xxxxx@lists.osr.com
> > > >
> > >
> > >
> > >
> > >—
> > >You are currently subscribed to ntfsd as: xxxxx@hotmail.com
> > >To unsubscribe send a blank email to
>xxxxx@lists.osr.com
> >
> >

> > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > http://join.msn.com/?pgmarket=en-sg
> >
> >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>—
>You are currently subscribed to ntfsd as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com

_________________________________________________________________
Send a fun phone greeting to your friend!
http://www.msn.com.sg/mobile/fungreetings/

Hi,

Thanks for your reply.

I have tried to fail FSCTL_LOCK_VOLUME.
But when I used dskprobe.exe to try to open PhysicalDrive1, it did not go
into FSCTL_LOCK_VOLUME.
So does this means that dskprobe did not lock the volume?
I even tried with WinHex, it too did not use FSCTL_LOCK_VOLUME.

And I tried it in IRP_MJ_LOCK_CONTROL, both application did not issue the
major function.

why is that so?

does this means that file filter fail to hook these calls?

thank you!

cheers,
vincent

From: “Maxim S. Shatskih”
>Reply-To: “File Systems Developers”
>To: “File Systems Developers”
>Subject: [ntfsd] RE: failed mount volume request
>Date: Mon, 30 Jun 2003 03:34:02 +0400
>
> You can try to fail FSCTL_LOCK_VOLUME, or even any DASD open (open
>of “D:” without the following path) in the FS filter.
>
> Max
>
>----- Original Message -----
>From: “vincent gambit”
>To: “File Systems Developers”
>Sent: Sunday, June 29, 2003 8:49 PM
>Subject: [ntfsd] RE: failed mount volume request
>
>
> > Hi,
> >
> > Thanks for your reply.
> >
> > So the only way to fail the direct access of a storage device is
>using
> > storage filter?
> > eg fail the format process.
> >
> > Thank You!
> >
> > cheers,
> > vincent
> >
> > >From: “Nick Ryan”
> > >Reply-To: “File Systems Developers”
> > >To: “File Systems Developers”
> > >Subject: [ntfsd] RE: failed mount volume request
> > >Date: Sat, 28 Jun 2003 13:01:22 -0700
> > >
> > >Sure - see the MSDN docs for CreateFile for how to open a storage
>device
> > >for direct access (or use IoGetDeviceObjectPointer from
>kernel-mode).
> > >You’ll still get your handle whether or not the OS attempts to
>mount the
> > >volume and whether or not it succeeds. Otherwise, how could an
> > >unformatted parition be formatted in the first place?
> > >
> > >- Nick Ryan
> > >
> > > > -----Original Message-----
> > > > From: xxxxx@lists.osr.com
> > > > [mailto:xxxxx@lists.osr.com] On Behalf Of vincent
>gambit
> > > > Sent: Saturday, June 28, 2003 11:30 AM
> > > > To: File Systems Developers
> > > > Subject: [ntfsd] failed mount volume request
> > > >
> > > >
> > > > Hi,
> > > >
> > > > If I fail a mount volume request in IRP_MN_MOUNT_VOLUME, can
> > > > I still access
> > > > the storage device in any way?
> > > >
> > > > Thanks in advance
> > > >
> > > > cheers,
> > > > vincent
> > > >
> > > >
>
> > > > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > > > http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
> > > >
> > > >
> > > >
> > > > —
> > > > You are currently subscribed to ntfsd as: xxxxx@nryan.com
> > > > To unsubscribe send a blank email to
>xxxxx@lists.osr.com
> > > >
> > >
> > >
> > >
> > >—
> > >You are currently subscribed to ntfsd as: xxxxx@hotmail.com
> > >To unsubscribe send a blank email to
>xxxxx@lists.osr.com
> >
> >

> > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > http://join.msn.com/?pgmarket=en-sg
> >
> >
> >
> > —
> > You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
> > To unsubscribe send a blank email to xxxxx@lists.osr.com
>
>
>
>—
>You are currently subscribed to ntfsd as: xxxxx@hotmail.com
>To unsubscribe send a blank email to xxxxx@lists.osr.com

_________________________________________________________________
Download Norah Jones, Eminem and more! http://www.msn.com.sg/ringtones/

DASD is an open of the volume itself “\.\C:” for the purposes of
performing direct sector I/O on that volume. (Opening "C:", in
contrast, will get you handle to the root DIRECTORY instead). See the
MSDN documentation for CreateFile for the exact details on how to
perform such an open.

Depending on the desired access specified on the open, the system may
attempt to mount an unmounted volume at the time you open a DASD handle
on it. If some filesystem has mounted the volume (including RAW, the
filesystem of last resrt), I/O on this handle goes to the filesystem
first before being punted onto the storage stack by the FSD (if it
decides to honor your request). If not, the I/O goes directly to the
storage stack.

The user may even open the physical device directly using the path
format “\.\PHYSICALDRIVE0”. In this case, a handle representing the
physical disk (i.e. offset beginning at real sector 0, allowing access
to the MBR and partition table) is opened. Sectors in individual
partitions can be accessed by offsetting I/O with the offset of the
partition on disk. If you want to protect against this, you need to
filter the device representing the physical disk as well as the devices
representing the individual partitions/volumes. On my system, the disk
class driver creates these devices with names of the form
“\Device\Harddisk0\DR0”.

The partition devices are created with names of the form
“\Device\HarddiskVolume1”. I leave it as an exercise to the reader to
figure out how to relate these sets of devices in a storage filter
(hint: they are NOT layered). (Another hint: use the WinObj tool to
explore symbolic links that live in the “\Device\Harddisk0” directory).

  • Nick Ryan

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of vincent gambit
Sent: Sunday, June 29, 2003 6:47 PM
To: File Systems Developers
Subject: [ntfsd] RE: failed mount volume request

Hi,

Thanks for your reply.

But what do you meant by DASD open?
Is there any documentation on this in MSDN?

Thank You!

cheers,
vincent

>From: “Maxim S. Shatskih”
> >Reply-To: “File Systems Developers”
> >To: “File Systems Developers”
> >Subject: [ntfsd] RE: failed mount volume request
> >Date: Mon, 30 Jun 2003 03:34:02 +0400
> >
> > You can try to fail FSCTL_LOCK_VOLUME, or even any DASD
> open (open
> >of “D:” without the following path) in the FS filter.
> >
> > Max
> >
> >----- Original Message -----
> >From: “vincent gambit”
> >To: “File Systems Developers”
> >Sent: Sunday, June 29, 2003 8:49 PM
> >Subject: [ntfsd] RE: failed mount volume request
> >
> >
> > > Hi,
> > >
> > > Thanks for your reply.
> > >
> > > So the only way to fail the direct access of a storage device is
> >using
> > > storage filter?
> > > eg fail the format process.
> > >
> > > Thank You!
> > >
> > > cheers,
> > > vincent
> > >
> > > >From: “Nick Ryan”
> > > >Reply-To: “File Systems Developers”
> > > >To: “File Systems Developers”
> > > >Subject: [ntfsd] RE: failed mount volume request
> > > >Date: Sat, 28 Jun 2003 13:01:22 -0700
> > > >
> > > >Sure - see the MSDN docs for CreateFile for how to open a storage
> >device
> > > >for direct access (or use IoGetDeviceObjectPointer from
> >kernel-mode).
> > > >You’ll still get your handle whether or not the OS attempts to
> >mount the
> > > >volume and whether or not it succeeds. Otherwise, how could an
> > > >unformatted parition be formatted in the first place?
> > > >
> > > >- Nick Ryan
> > > >
> > > > > -----Original Message-----
> > > > > From: xxxxx@lists.osr.com
> > > > > [mailto:xxxxx@lists.osr.com] On Behalf Of vincent
> >gambit
> > > > > Sent: Saturday, June 28, 2003 11:30 AM
> > > > > To: File Systems Developers
> > > > > Subject: [ntfsd] failed mount volume request
> > > > >
> > > > >
> > > > > Hi,
> > > > >
> > > > > If I fail a mount volume request in
> IRP_MN_MOUNT_VOLUME, can I
> > > > > still access the storage device in any way?
> > > > >
> > > > > Thanks in advance
> > > > >
> > > > > cheers,
> > > > > vincent
> > > > >
> > > > >
> >
> > > > > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > > > > http://join.msn.com/?pgmarket=en-sg at only S$36 including GST
> > > > >
> > > > >
> > > > >
> > > > > —
> > > > > You are currently subscribed to ntfsd as: xxxxx@nryan.com To
> > > > > unsubscribe send a blank email to
> >xxxxx@lists.osr.com
> > > > >
> > > >
> > > >
> > > >
> > > >—
> > > >You are currently subscribed to ntfsd as:
> xxxxx@hotmail.com
> > > >To unsubscribe send a blank email to
> >xxxxx@lists.osr.com
> > >
> > >

> > > Get 10mb of inbox space with MSN Hotmail Extra Storage
> > > http://join.msn.com/?pgmarket=en-sg
> > >
> > >
> > >
> > > —
> > > You are currently subscribed to ntfsd as:
> xxxxx@storagecraft.com To
> > > unsubscribe send a blank email to xxxxx@lists.osr.com
> >
> >
> >
> >—
> >You are currently subscribed to ntfsd as: xxxxx@hotmail.com To
> >unsubscribe send a blank email to xxxxx@lists.osr.com
>
> _________________________________________________________________
> Send a fun phone greeting to your friend!
> http://www.msn.com.sg/mobile/fungreetings/
>
>
>
> —
> You are currently subscribed to ntfsd as: xxxxx@nryan.com
> To unsubscribe send a blank email to xxxxx@lists.osr.com
>