File Sharing Information

Hi Guys i want some information when any user shares or unshared any resource on a network some window service or filter driver send this file information to the network administrator. so my question is that how can i intercept file sharing/unsharing call? do i need to develop a file filter driver or network filter driver? or i can get this information form user mode without any kernel stuff?

Undocumented IOCTLs to \Device\LanmanServer I think.


Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com

wrote in message news:xxxxx@ntfsd…
> Hi Guys i want some information when any user shares or unshared any resource on a network some window service or filter driver send this file information to the network administrator. so my question is that how can i intercept file sharing/unsharing call? do i need to develop a file filter driver or network filter driver? or i can get this information form user mode without any kernel stuff?
>