Using mini-redirector by restricted users

NTFSD
1

Hello all,

I’ve written a small mini-redirector (with RDBSS) based on the NULMRX example. This works all fine so far, except that it cannot be used by a normal (restricted) user without admin rights.

If I do a “net use x: ”, it fails in the network provider DLL when opening the device with “CreateFile” -> Error 5 (ACCESS_DENIED). A simple user-mode program using exact this line (CreateFile) fails also with the same error.

I played around with the DACL stuff, but this didn’t help either.
What do I need to do to get the mini-redirector working with restricted users?

Thanks!

2

I spotted up my device in the Windows Object Manager (\Device<mydevicename> and \GLOBAL??<mydevicename>). When I’m trying to lookup the permission rights with a restricted user, it says “Cannot open .”. Using an administrator account, it works. Adding “Everyone” and/or “Restricted” to the allowed read/write/delete group of users for this device didn’t help at all.

Any further suggestions?