Good morning,
I have a setup for one application, which requires autologon as admin
and to do that - reboots the machine stamping the registry with admin
logon/password.
I don’t like this concept, so in order to block the application from
rebooting the machine I wrote a kernel driver to intercept system call as
normal, but I don’t know
which call to intercept, however. ZwShutdownSystem doesn’t look like right
answer. Does anyone know how to accomplish this goal? Thanks in advance.
Adel.
You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com