When return STATUS_ACCESS_DENIED, how can I prevent OS from popuping a Messagebox?

NTFSD
1

In my sfilter driver, for some reason I want to prevent some executable file from running, so I check the FILE_EXECUTE flag at the file creation, the FILE_EXECUTE bit exists, return STATUS_ACCESS_DENIED. But what is annoying that the OS popup a same MessageBox with access denied or path not found. I want the OS keep silent, how could I?

2

User-mode call to SetErrorMode() is a keyword…

Anton Bassov

3

Thx. I’ll try it.