Getting the NT system directory from within a driver on NT

NTDEV
1

Does anyone know how to do this? In fact, all I want to actually get is the
device name of the drive on which the Windows NT system directory resides.

Regards,

i.

Ivan Lewis-Coker
Software Developer
AppSense Technologies
Europa Way
Bird Hall Lane
Cheadle Heath
Stockport
SK3 0WY

Tel: +44 (0) 161 610 4200
Fax:+44 (0) 161 610 4242

email: xxxxx@appsense.net
www: http://www.appsense.net

CONFIDENTIAL
The contents of this email and any attachments may be
confidential. It is intended for the named recipient(s).
If you are not the named recipient please notify the sender
immediately and do not disclose the contents to any other
person or make any copies.

2

Hello,

Query the contents of the symbolic link object named
“\SystemRoot” using ZwOpenSymbolicLinkObject and
ZwQuerySymbolicLinkObject native API calls. The
contents of the symbolic link contains the complete
path such as \Device\HardDisk0\Partition0\WINNT.

-Prasad

— xxxxx@appsense.co.uk wrote:

Does anyone know how to do this? In fact, all I want
to actually get is the
device name of the drive on which the Windows NT
system directory resides.

Regards,

i.

Ivan Lewis-Coker
Software Developer
AppSense Technologies
Europa Way
Bird Hall Lane
Cheadle Heath
Stockport
SK3 0WY

Tel: +44 (0) 161 610 4200
Fax:+44 (0) 161 610 4242

email: xxxxx@appsense.net
www: http://www.appsense.net

CONFIDENTIAL
The contents of this email and any attachments may
be
confidential. It is intended for the named
recipient(s).
If you are not the named recipient please notify the
sender
immediately and do not disclose the contents to any
other
person or make any copies.

You are currently subscribed to ntdev as:
xxxxx@yahoo.com
To unsubscribe send a blank email to
$subst(‘Email.Unsub’)

=====
Prasad S. Dabak
Director of Engineering, Windows NT/2000 Division
Cybermedia Software Private Limited
http://www.cybermedia.co.in
Co-author of the book “Undocumented Windows NT”
ISBN 0764545698

Do You Yahoo!?
Send online invitations with Yahoo! Invites.
http://invites.yahoo.com