Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no avail.

I’ve been building this driver for over a year with the 3790.1830 IFS kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no avail.

I’ve been building this driver for over a year with the 3790.1830 IFS kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com

Ken,

They are still the same thing - tokens are OS objects and dereferencing
them just drops the reference on the object.

This is definitely a bug in the WDK.

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 8:56 PM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build
of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works
fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no
avail.

I’ve been building this driver for over a year with the 3790.1830 IFS
kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

> That definition doesn’t exist in 5384. Does anybody know if it’s OK to

define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Look at PsDereferencePrimaryToken diassembly in your target OS in WinDbg.

Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
xxxxx@storagecraft.com
http://www.storagecraft.com

OK, thanks Tony. I’ll proceed on that assumption.

One wonders, though, why PsDereferencePrimaryToken is really a separate
routine in XP+…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Saturday, July 01, 2006 10:38 PM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Ken,

They are still the same thing - tokens are OS objects and dereferencing
them just drops the reference on the object.

This is definitely a bug in the WDK.

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 8:56 PM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build
of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works
fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no
avail.

I’ve been building this driver for over a year with the 3790.1830 IFS
kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

Well, keep in mind there isn’t a central control authority at MS. Some
developer may have just decided “gee, this shouldn’t be a macro, it
should be a function” and implemented it.

For what its worth, here’s the implementation on my XP box:

lkd> u nt!PsDereferencePrimaryToken
nt!PsDereferencePrimaryToken:
8058a4b8 8bff mov edi,edi
8058a4ba 55 push ebp
8058a4bb 8bec mov ebp,esp
8058a4bd 8b4d08 mov ecx,[ebp+0x8]
8058a4c0 e84b74f5ff call nt!ObfDereferenceObject (804e1910)
8058a4c5 5d pop ebp
8058a4c6 c20400 ret 0x4
8058a4c9 90 nop

Which is nothing more than a function implementation of what the macro
was doing…

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Sunday, July 02, 2006 6:52 AM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, thanks Tony. I’ll proceed on that assumption.

One wonders, though, why PsDereferencePrimaryToken is really a separate
routine in XP+…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Saturday, July 01, 2006 10:38 PM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Ken,

They are still the same thing - tokens are OS objects and dereferencing
them just drops the reference on the object.

This is definitely a bug in the WDK.

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 8:56 PM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build
of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works
fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no
avail.

I’ve been building this driver for over a year with the 3790.1830 IFS
kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com

Tony:

Very cool! Thanks for taking the trouble…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Sunday, July 02, 2006 8:28 AM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Well, keep in mind there isn’t a central control authority at MS. Some
developer may have just decided “gee, this shouldn’t be a macro, it
should be a function” and implemented it.

For what its worth, here’s the implementation on my XP box:

lkd> u nt!PsDereferencePrimaryToken
nt!PsDereferencePrimaryToken:
8058a4b8 8bff mov edi,edi
8058a4ba 55 push ebp
8058a4bb 8bec mov ebp,esp
8058a4bd 8b4d08 mov ecx,[ebp+0x8]
8058a4c0 e84b74f5ff call nt!ObfDereferenceObject (804e1910)
8058a4c5 5d pop ebp
8058a4c6 c20400 ret 0x4
8058a4c9 90 nop

Which is nothing more than a function implementation of what the macro
was doing…

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Sunday, July 02, 2006 6:52 AM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, thanks Tony. I’ll proceed on that assumption.

One wonders, though, why PsDereferencePrimaryToken is really a separate
routine in XP+…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Saturday, July 01, 2006 10:38 PM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Ken,

They are still the same thing - tokens are OS objects and dereferencing
them just drops the reference on the object.

This is definitely a bug in the WDK.

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 8:56 PM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build
of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works
fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no
avail.

I’ve been building this driver for over a year with the 3790.1830 IFS
kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com

BTW, the same thing is true of PsDereferenceImpersonationToken – not
defined in 5384, but set to ObfDereferenceObject in earlier versions.

Ken

-----Original Message-----
From: Ken Cross [mailto:xxxxx@comcast.net]
Sent: Sunday, July 02, 2006 8:46 AM
To: ‘Windows File Systems Devs Interest List’
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Tony:

Very cool! Thanks for taking the trouble…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Sunday, July 02, 2006 8:28 AM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Well, keep in mind there isn’t a central control authority at MS. Some
developer may have just decided “gee, this shouldn’t be a macro, it
should be a function” and implemented it.

For what its worth, here’s the implementation on my XP box:

lkd> u nt!PsDereferencePrimaryToken
nt!PsDereferencePrimaryToken:
8058a4b8 8bff mov edi,edi
8058a4ba 55 push ebp
8058a4bb 8bec mov ebp,esp
8058a4bd 8b4d08 mov ecx,[ebp+0x8]
8058a4c0 e84b74f5ff call nt!ObfDereferenceObject (804e1910)
8058a4c5 5d pop ebp
8058a4c6 c20400 ret 0x4
8058a4c9 90 nop

Which is nothing more than a function implementation of what the macro
was doing…

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Sunday, July 02, 2006 6:52 AM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, thanks Tony. I’ll proceed on that assumption.

One wonders, though, why PsDereferencePrimaryToken is really a separate
routine in XP+…

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Tony Mason
Sent: Saturday, July 01, 2006 10:38 PM
To: Windows File Systems Devs Interest List
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

Ken,

They are still the same thing - tokens are OS objects and dereferencing
them just drops the reference on the object.

This is definitely a bug in the WDK.

Tony

Tony Mason
Consulting Partner
OSR Open Systems Resources, Inc.
http://www.osr.com

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 8:56 PM
To: ntfsd redirect
Subject: RE: [ntfsd] Using Vista Beta 2 (5384) for Win2K

OK, I think I found it. This is in 3790.1830\inc\ifs\w2k\ntifs.h:

#define PsDereferencePrimaryToken(T) (ObDereferenceObject((T)))

That definition doesn’t exist in 5384. Does anybody know if it’s OK to
define that, i.e., is PsDereferencePrimaryToken the same as
ObDereferenceObject?

Ken

-----Original Message-----
From: xxxxx@lists.osr.com
[mailto:xxxxx@lists.osr.com] On Behalf Of Ken Cross
Sent: Saturday, July 01, 2006 6:38 PM
To: Windows File Systems Devs Interest List
Subject: [ntfsd] Using Vista Beta 2 (5384) for Win2K

NTFSD Folk:

I’m having problems building a mini-filter driver using the 5384 build
of
the IFS/DDK (Vista Beta 2).

I build in the Windows 2000 environment with no problems and it works
fine
on XP and higher, but when I try to start it on Windows 2000 with Update
Rollup 1 installed I get “The specified procedure could not be found.”

I’ve tried to figure out what the “specified procedure” is, but to no
avail.

I’ve been building this driver for over a year with the 3790.1830 IFS
kit
with no problem. I can continue to do that, but would rather use the
latest.

Anybody have a clue what’s going on?

Thanks,
Ken


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@comcast.net
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument:
‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: xxxxx@osr.com
To unsubscribe send a blank email to xxxxx@lists.osr.com


Questions? First check the IFS FAQ at
https://www.osronline.com/article.cfm?id=17

You are currently subscribed to ntfsd as: unknown lmsubst tag argument: ‘’
To unsubscribe send a blank email to xxxxx@lists.osr.com