Pardon me if this I have missed the obvious. But can anyone tell me how to identify the Boot and System volumes. I have fs mini-filter that I want to prevent from attaching to these and I can’t seem to find the proper API to determine this information.
Thanks,
Rob
DeviceObject->Flags & DO_SYSTEM_BOOT_PARTITION
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
wrote in message news:xxxxx@ntfsd…
> Pardon me if this I have missed the obvious. But can anyone tell me how to identify the Boot and System volumes. I have fs mini-filter that I want to prevent from attaching to these and I can’t seem to find the proper API to determine this information.
>
> Thanks,
> Rob
>
Max has given you the answer for the boot partition. For the system volume
I would open \SystemRoot.
If you start early on that won’t work and you need to open it as a symbolic
link and see where it points…
–
Rod Widdowson
Consulting Partner
Steading System Software LLP
www.steadingsoftware.com
+44 1368 850217 +1 508 915 4790
wrote in message news:xxxxx@ntfsd…
> Pardon me if this I have missed the obvious. But can anyone tell me how to
> identify the Boot and System volumes. I have fs mini-filter that I want to
> prevent from attaching to these and I can’t seem to find the proper API to
> determine this information.
>
> Thanks,
> Rob
>
How about IoGetBootDiskInformation ()
Never used it myself, but it looks like it should work even if there
is some mapping required between guids and device objects.
Mark.
At 10:37 23/02/2010, Rod Widdowson wrote:
Max has given you the answer for the boot partition. For the system
volume I would open \SystemRoot.If you start early on that won’t work and you need to open it as a
symbolic link and see where it points…–
Rod Widdowson
Consulting Partner
Steading System Software LLP
www.steadingsoftware.com
+44 1368 850217 +1 508 915 4790wrote in message news:xxxxx@ntfsd…
>>Pardon me if this I have missed the obvious. But can anyone tell me
>>how to identify the Boot and System volumes. I have fs mini-filter
>>that I want to prevent from attaching to these and I can’t seem to
>>find the proper API to determine this information.
>>
>>Thanks,
>>Rob
>
>
>—
>NTFSD is sponsored by OSR
>
>For our schedule of debugging and file system seminars
>(including our new fs mini-filter seminar) visit: http://www.osr.com/seminars
>
>To unsubscribe, visit the List Server section of OSR Online at
>http://www.osronline.com/page.cfm?name=ListServer
> Max has given you the answer for the boot partition. For the system volume
I would open \SystemRoot.
Both refer to the partition where NTOSKRNL and the whole system32 dir live.
If you need the initial active partition where BOOTMGR lives - then IoGetBootDiskInformation can help.
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
> How about IoGetBootDiskInformation ()
Never used it myself, but it looks like it should work
It works (if not called too late) on all Dyndisk/GPT combinations, tested this on Win7 Aug 09.
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
DeviceObject->Flags & DO_SYSTEM_SYSTEM_PARTITION for the system partition (Win7 only).
Scott
This posting is provided “AS IS” with no warranties, and confers no rights.
> DeviceObject->Flags & DO_SYSTEM_SYSTEM_PARTITION for the system partition (Win7 only).
What is “system” in this context? the one with bootmgr and BCD store?
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
Yes, the flag DO_SYSTEM_SYSTEM_PARTITION is set for the volume with bootmgr and the BCD store starting in Win7.
-----Original Message-----
From: xxxxx@lists.osr.com [mailto:xxxxx@lists.osr.com] On Behalf Of Maxim S. Shatskih
Sent: Saturday, February 27, 2010 2:41 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] System/Boot Volume Identification
DeviceObject->Flags & DO_SYSTEM_SYSTEM_PARTITION for the system partition (Win7 only).
What is “system” in this context? the one with bootmgr and BCD store?
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
NTFSD is sponsored by OSR
For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at http://www.osronline.com/page.cfm?name=ListServer
Does that mean we have three separate entities to worry about now - boot
device, system partition and the volume with \windows on it?
This doesn’t seem right somehow but I’ve never bothered to learn how Vista
does the early booting stuff…
“Scott Brender” wrote in message
news:xxxxx@ntfsd…
Yes, the flag DO_SYSTEM_SYSTEM_PARTITION is set for the volume with bootmgr
and the BCD store starting in Win7.
-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Maxim S. Shatskih
Sent: Saturday, February 27, 2010 2:41 AM
To: Windows File Systems Devs Interest List
Subject: Re:[ntfsd] System/Boot Volume Identification
> DeviceObject->Flags & DO_SYSTEM_SYSTEM_PARTITION for the system partition
> (Win7 only).
What is “system” in this context? the one with bootmgr and BCD store?
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com
—
NTFSD is sponsored by OSR
For our schedule of debugging and file system seminars
(including our new fs mini-filter seminar) visit:
http://www.osr.com/seminars
To unsubscribe, visit the List Server section of OSR Online at
http://www.osronline.com/page.cfm?name=ListServer
> Does that mean we have three separate entities to worry about now - boot
device, system partition and the volume with \windows on it?
“System” is the one with bootmgr/bcd store.
“Boot” is the one with \windows (aka SystemRoot).
Only 2 volumes.
–
Maxim S. Shatskih
Windows DDK MVP
xxxxx@storagecraft.com
http://www.storagecraft.com