How to block the application from shutting the system down

Good morning,

I have a setup for one application, which requires autologon as admin
and to do that - reboots the machine stamping the registry with admin
logon/password.
I don’t like this concept, so in order to block the application from
rebooting the machine I wrote a kernel driver to intercept system call as
normal, but I don’t know
which call to intercept, however. ZwShutdownSystem doesn’t look like right
answer. Does anyone know how to accomplish this goal? Thanks in advance.

Adel.


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com

> I have a setup for one application, which requires autologon as admin

and to do that - reboots the machine stamping the registry with admin
logon/password.

Ask the user for an administrative username/password during SETUP and save
this information in the WinLogon’s registry then.

Max


You are currently subscribed to ntdev as: $subst(‘Recip.EmailAddr’)
To unsubscribe send a blank email to leave-ntdev-$subst(‘Recip.MemberIDChar’)@lists.osr.com