Hi all,
While monitoring transacted registry operations it seems that
FltEnlistInTransaction routine should be used to receive transaction
notification callbacks in the registered routine with Filter Manager. That
works OK, but which specific mini-filter Instance should be used as the
first parameter in FltEnlistInTransaction?.
I know that in Vista the Enhanced Registry Callback was improved and now it
uses the concept of mini-filter altitude to support a “registry stack”, but
why should a registry transaction be associated to any volume through the
mini-filter Instance?. Is this just to avoid unloading the mini-filter with
pending operations?
Thanks,
mK
Express yourself instantly with MSN Messenger! Download today it’s FREE!
http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/