Why can't I get a shutdown notification in my PnP Windows driver?

NTDEV
1

I don't really need it for the purpose of doing anything for my driver itself. I was just trying to stick a logging (WPP) call into such notification to denote that the OS is shutting down (or rebooting.) From my previous experience, I noticed that a lot of concurrency issues happen during shutdown and thus it would be nice to have a logging message that the process had begun so in case of an issue I will have more information to debug with.

So why can't I get that notification in my pnp driver?

Is it because the PnP manager will dismantle my driver before the IRP_MJ_SHUTDOWN arrives, or what?

2

IRP_MJ_SHUTDOWN - Windows drivers | Microsoft Learn Explains how to receive this irp. Note sending this irp is not tied to the kernel pnp manager and thus not synchronized with your pnp state. Be very careful about unregistering the notification when your driver is unloading