How to control the device throught the filter driver?

hello,
i want to control the access of the list,and i asked how to do it using
the dacl,but no one give me detail reply,and so i want to solve the problem
throught the filter driver,but does some one can give me a sample?best has
the description.
thanks
regards


ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn

When you asked your last question, I and others asked for clarification.
What are you trying to do? This list doesn’t just give away solutions, many
of us are consultants who get paid for complete solutions. Ask a question
that is well formed and you will get an answer. Note, the filter idea is
stupid.


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello,
> i want to control the access of the list,and i asked how to do it
using
> the dacl,but no one give me detail reply,and so i want to solve the
problem
> throught the filter driver,but does some one can give me a sample?best has
> the description.
> thanks
> regards
>
> _________________________________________________________________
> ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn
>
>

hello burn,
thank you for your replay.you can the filter driver is stupid,but can
you give me some advice or some direction?
waiting for your message.
regards
ding hao


Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn

You haven’t said what you are trying to do in enough detail for anyone to
help you. Take a look at this for a start
http://msdn.microsoft.com/library/default.asp?url=/library/en-us/secbp/security/best_practices_for_the_security_apis.asp


Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
Remove StopSpam from the email to reply

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello burn,
> thank you for your replay.you can the filter driver is stupid,but can
> you give me some advice or some direction?
> waiting for your message.
> regards
> ding hao
>
> _________________________________________________________________
> Ãâ·ÑÏÂÔØ MSN Explorer: http://explorer.msn.com/lccn
>
>

hello burn,
sorry, i have not give out my goal.
my goal is to control the access of the devices,such as the netcard,usb
port,etc.
for example,three persons A,B,C use one computer,A has the admin
priviledge,and he does not allow the B and C to use the netcard or usb
port,so he want to control the access of the device,what the A want to do
is my goal.
i do not know whether i describe in detail?
regards
ding hao


ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn

Yes, we both know how to do it. We both get paid to develop software for
clients and not provide free designs and code to our competition. We help
when limited questions are posted and Don provides more help than many
others.

“shark marian” wrote in message
news:xxxxx@ntdev…
> hello burn,
> sorry, i have not give out my goal.
> my goal is to control the access of the devices,such as the netcard,usb
> port,etc.
> for example,three persons A,B,C use one computer,A has the admin
> priviledge,and he does not allow the B and C to use the netcard or usb
> port,so he want to control the access of the device,what the A want to do
> is my goal.
> i do not know whether i describe in detail?
> regards
> ding hao
>
> _________________________________________________________________
> ÓëÁª»úµÄÅóÓѽøÐн»Á÷£¬ÇëʹÓà MSN Messenger: http://messenger.msn.com/cn
>

hello David,
i do not want you to give your design or code,but just a suggestion.and
you only give me an idea,i will do the left,do you?
regards
ding hao


ÏíÓÃÊÀ½çÉÏ×î´óµÄµç×ÓÓʼþϵͳ¡ª MSN Hotmail¡£ http://www.hotmail.com

It’s the “etc.” that makes this a very difficult and time consuming
question to answer. I can’t think of a general answer that’s going to
work for all devices.

In general, though, I can say with some confidence that this is a very
hard problem to solve.

Let’s just use my company’s device, for example: our touchpad driver
provides an API usable by applications. It does this by creating a
uniquely-symbolically-named device object that apps can open. I don’t
see you your proposed driver can effectively control this without
knowing what that device object’s symbolic name is. So now we’re talking
about enumerating those, and how to you know which are devices you can
safely filter and which ones are things where you will wreck the system
if you disallow access?

Also, everyone here has different backgrounds/areas of driver
specialization.

Devices that have file systems may be best filtered using standard
filesystem access mechanisms, for example, but I wouldn’t really be the
best guy to answer that.

USB and serial devices will probably need a device upper filter driver
or a vastly more complicated (and prone to disasterous errors) bus
filter driver… unless someone wants to propose another kind of solution.

I suspect that network cards need yet another kind of solution (maybe an
IM filter?), but I’ve only briefly looked NDIS that so I can’t really
answer the question for that kind of device.

shark marian wrote:

hello burn,
sorry, i have not give out my goal.
my goal is to control the access of the devices,such as the
netcard,usb port,etc.
for example,three persons A,B,C use one computer,A has the admin
priviledge,and he does not allow the B and C to use the netcard or usb
port,so he want to control the access of the device,what the A want to
do is my goal.
i do not know whether i describe in detail?
regards
ding hao


与联机的朋友进行交流,请使用 MSN Messenger: http://messenger.msn.com/cn


…/ray..

Please remove “.spamblock” from my email address if you need to contact
me outside the newsgroup.