Is there a way to find out a client system name in FSFD hooking
IRP_MJ_CREATE for an open of file/directory via LanManager share?
I can identify user impersonated by SRV open and would like to know if
client system name is also reachable.
Environment: Platforms W2K, WXP, Srv03. FSFD attached to NTFS.
I saw some old threads in NTFSD but no ultimate answer or hint.
Thanks in advance for any info.
WBR Primoz
Remote clinet system name The absolute path is:
\Device\LanmanRedirector\Server\Share\Path
from which \Server\Share\Path must be FileObject->FileName.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
----- Original Message -----
From: Primoz Beltram
To: Windows File Systems Devs Interest List
Sent: Thursday, November 18, 2004 2:12 PM
Subject: [ntfsd] Remote clinet system name
Is there a way to find out a client system name in FSFD hooking IRP_MJ_CREATE for an open of file/directory via LanManager share?
I can identify user impersonated by SRV open and would like to know if client system name is also reachable.
Environment: Platforms W2K, WXP, Srv03. FSFD attached to NTFS.
I saw some old threads in NTFSD but no ultimate answer or hint.
Thanks in advance for any info.
WBR Primoz
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Max,
Thanks for the reply. I was not clear enough in my question.
What I’m looking for is name of remote client computer from where the open
to file \Device\LanmanRedirector\Server\Share\Path was made.
My filter is attached to NTFS volume where "\Share" is exposed and I can
get user SID info of user who is *sitting* at remote client computer.
If possible, I would also like to get the remote client computer name, but
maybe I’m asking to much.
WBR Primoz
From: Maxim S. Shatskih [mailto:xxxxx@storagecraft.com]
Sent: Thursday, November 18, 2004 3:58 PM
To: Windows File Systems Devs Interest List
Subject: Re: [ntfsd] Remote clinet system name
The absolute path is:
\Device\LanmanRedirector\Server\Share\Path
from which \Server\Share\Path must be FileObject->FileName.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com mailto:xxxxx
http://www.storagecraft.com http:
----- Original Message -----
From: Primoz mailto:xxxxx Beltram
To: Windows File mailto:xxxxx Systems Devs Interest List
Sent: Thursday, November 18, 2004 2:12 PM
Subject: [ntfsd] Remote clinet system name
Is there a way to find out a client system name in FSFD hooking
IRP_MJ_CREATE for an open of file/directory via LanManager share?
I can identify user impersonated by SRV open and would like to know if
client system name is also reachable.
Environment: Platforms W2K, WXP, Srv03. FSFD attached to NTFS.
I saw some old threads in NTFSD but no ultimate answer or hint.
Thanks in advance for any info.
WBR Primoz
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
—
Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com</mailto:xxxxx></mailto:xxxxx></http:></mailto:xxxxx>
Remote clinet system name Then you must use the impersonation token. There were APIs to access it from IO_SECURITY_CONTEXT.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
----- Original Message -----
From: Primoz Beltram
To: Windows File Systems Devs Interest List
Sent: Thursday, November 18, 2004 6:39 PM
Subject: RE: [ntfsd] Remote clinet system name
Max,
Thanks for the reply. I was not clear enough in my question.
What I’m looking for is name of remote client computer from where the open to file \Device\LanmanRedirector\Server\Share\Path was made.
My filter is attached to NTFS volume where "\Share" is exposed and I can get user SID info of user who is *sitting* at remote client computer.
If possible, I would also like to get the remote client computer name, but maybe I’m asking to much.
WBR Primoz
From: Maxim S. Shatskih [mailto:xxxxx@storagecraft.com]
Sent: Thursday, November 18, 2004 3:58 PM
To: Windows File Systems Devs Interest List
Subject: Re: [ntfsd] Remote clinet system name
The absolute path is:
\Device\LanmanRedirector\Server\Share\Path
from which \Server\Share\Path must be FileObject->FileName.
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com
----- Original Message -----
From: Primoz Beltram
To: Windows File Systems Devs Interest List
Sent: Thursday, November 18, 2004 2:12 PM
Subject: [ntfsd] Remote clinet system name
Is there a way to find out a client system name in FSFD hooking IRP_MJ_CREATE for an open of file/directory via LanManager share?
I can identify user impersonated by SRV open and would like to know if client system name is also reachable.
Environment: Platforms W2K, WXP, Srv03. FSFD attached to NTFS.
I saw some old threads in NTFSD but no ultimate answer or hint.
Thanks in advance for any info.
WBR Primoz
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com
Questions? First check the IFS FAQ at https://www.osronline.com/article.cfm?id=17
You are currently subscribed to ntfsd as: xxxxx@storagecraft.com
To unsubscribe send a blank email to xxxxx@lists.osr.com