FilterConnectCommunicationPort returns access denied

NTFSD
1

Hi,

I am new to this list, so pardon if it is already answered. I found one thread related to this though it doesn’t help me.

I have service which call FilterConnectCommunicationPort API.

This works fine if service is running under administrator. However it fails if user is not an admin.

I tried setting privileges but did not help.

Is there any specific set of privileges that i need to set to get this API working under a non-working admin account?

Thanks in advance!

Regards,
Mukesh

2

> I have service which call FilterConnectCommunicationPort API.

This works fine if service is running under administrator. However it fails if user is not an admin.
I tried setting privileges but did not help.

You didn’t set the permissions properly then.
Before calling FltCreateCommunicationPort, specify
a SECURITY_DESCRIPTOR with NULL DACL to
InitializeObjectAtttributes macro. Or better,
construct a more senseful security descriptor.

I faced the same problem in FileSpy. After setting proper security
descriptor, user mode application was able to connect to a communication
port from limited user account. it can’t, however, attach to a volume.
As someone from Microsoft explained, this is an operation that
is only allowed to administrators.

L.

3

Can you please give any pointer to the documentation explaining the admin privilege requirement given by Microsoft?

Regards,
Mukesh