> But do you mean that IoRegisterFsRegistrationChange() does not work as it is described in IFS DDK if it is not loaded at boot time?So if I want to filter a later mounted volume I have to intercept the mount IRP and attach the filter driver to the FSD manually?
When you intercept a mount request you are attaching to a volume
- you are already attached to the FSD at that time, as otherwise you
wouldn’t see a mount request.
The IFS kit for Windows XP need not mention that
IoRegisterFsRegistrationChange doesn’t work unless your driver is loaded
at boot time, because this is so for Windows NT/2000 only - it does work
on XP.
The other question is that I try to load R. Nagar’s sfilter at system boot time.But it result in my system crashing.I want to know is there anybody who succeeded in doing that? Or i have to do sth before I can do it?
If it doesn’t work for you, you made a change that made it crash
- the SFilter works OK when loaded at boot time (which is when it must
boot).
–
Kind regards, Dejan M. MVP for DDK
http://www.alfasp.com E-mail: xxxxx@alfasp.com
Alfa Transparent File Encryptor - Transparent file encryption services.
Alfa File Protector - File protection and hiding library for Win32
developers.
Alfa File Monitor - File monitoring library for Win32 developers.