|
Hi all,
we're developing a filter driver for the ip stack. Everything on XP works fine. On Vista we have to switch off UAC, otherwise the dll accessing the driver gets an access denied error. Running the app as admin works, too.
I do not understand why the app does not work in normal user mode. All applications accessing hardware do not have to run elevated. So, why do we have to elevate our app in order to get the access to our driver?
We've tried to use signed driver and application without success.
Any thoughts?
jung-kreidler
|
|
|
|
|
Add a manifest file to the executable.
Morality is indistinguishable from social proscription
|
|
|
|
|
Hi fat_boy,
thanks for your comment.
Manifest is already part of the app and the dll. Additionally we've signed the app, dll and sys, but it does not help.
jung-kreidler
|
|
|
|
|
So it works on XP as a non administrator but on Vista doesnt? (ie, it needs admin rights to work).
This should be the same, the issue on Vista is whether the exe will auto prompt for permission (thats what the manifest file does).
Have you checked the local security policy on the machines? Also, depending on how you are accessing the filter driver, you can accept a lower security level. If its via IOCTLs you can down grade the security needed so a non admin can access it. (You then use MAXIMUM_ALLOWED in the call to CreateFile() )
Morality is indistinguishable from social proscription
|
|
|
|
|
Yes on XP it works, but Vista needs to elevate (run as 'admin') with UAC enabled.
Mhmm, local security is a point, but not practicable (...sorry), since most of our users won't dig around (or even worse: do not have the knowledge) in the security settings. We have to deal with a default Vista installation and there the UAC is enabled for sure, while security settings are strong...
We thought about having a second driver, which does the IO control between the app and the filter driver, but are not sure if this will work. 
At the moment we're stuck  ...
|
|
|
|
|
OK, so is the issue:
1) The app, when run, doesnt elevate, and thus cant access the driver.
or
2) The app, when run, does elevate, but then cant acces the driver?
Morality is indistinguishable from social proscription
|
|
|
|
|
The issue is 1). We do not want to elevate our application, in order to avoid the popup dialog of the UAC. The app should run without any annoying dialogs, the way it runs on XP. E.g. Wireshark also accesses a filter driver, but without any elevation... and we do not know how...
|
|
|
|
|
OK, so you want without a popup. Two questions:
1) Are you accessing the filter driver through IOCTLs?
2) Does your CreateFile() specify MAXIMUM_ALOWED?
Morality is indistinguishable from social proscription
|
|
|
|
|
1) Yes we need IOCTLs
2) Actually this is GENERIC_READ|GENERIC_WRITE
CreateFile works, but the DeviceIOControl returns 87.
|
|
|
|
|
1) How are the IOCTLS declared? Can you paste in an example of one?
2) Make this MAXIMUM_ALOWED. If you can have GENERIC_READ|GENERIC_WRITE it will be given to you. If you are only alowed WRITE that will be given to you. So using this macro means you will always het the highest rights you can get which means you have the highest chance of your code succeeding.
Morality is indistinguishable from social proscription
|
|
|
|
|
 Jep!!!! MAXIMUM_ALLOWED did the trick!
Driver works now without any UAC issues!
Thank you!
jung-kreidler
|
|
|
|
|
Buy me a beer sometime! 
Yeah, its a good trick to always use this value, you always get whatever the system can give you, and in combination with setting the security on the IOCTLs very low you could even get this working under a user profile.
Morality is indistinguishable from social proscription
|
|
|
|
|
|
I recently upgraded my PC. but I have the Hard disc with old IDE type. i have made it as slave and put my DVD drive as master. when I access my DVD drive ,my HDD performance is getting affected. can any one suggest some idea to rectify it...
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
Make the HDD master. Then in concurrent usage scenarios that DVD will be the one slowed by having to wait to send/receive data. Alternately put the drives on separate channels.
As long as they're sharing a ribbon, one will be the loser anytime you're trying to use both at once.
Today's lesson is brought to you by the word "niggardly". Remember kids, don't attribute to racism what can be explained by Scandinavian language roots.
-- Robert Royall
|
|
|
|
|
Thanks for ur suggestion....
If U Get Errors U Will Learn
If U Don't Get Errors U Have Learnt
|
|
|
|
|
flqfqijfq;ofuejcbjehqofyqfqjlyqljfhouyuh2fofhjnlquy0
just enjoy
|
|
|
|
|
Please keep your cat/feral animals away from your keyboard unless they have a hardware/device drivers question.
Regards,
--Perspx
"I've got my kids brainwashed: You don't use Google, and you don't use an iPod." - Steve Ballmer
"Some people have told me they don't think a fat penguin really embodies the grace of Linux, which just tells me they have never seen an angry penguin charging at them in excess of 100mph." - Linus Torvalds
|
|
|
|
|
Can u please decode it 
The Stifler
--
Bugs can neither be created nor be removed from software by a developer. They can only be converted from one form to another. The total number of bugs in the software always remain constant.
|
|
|
|
|
I designed a filter driver which is located in device stack between "bus driver" and "function driver". The filter driver has a "symbolic link".
Assuming there is two win32 applicaiton named "App-1" and "App-2". "App-1" is communicating filter driver through symbolic link. On the other side the aim of the "App-2" is going to prevent/permit communicaiton between "App-1" and "symbolic link".
Is there a method to prevent/permit DeviceoIoControl(...) for "symbolic link"? OR prevent an applicaiton to communicate with symbolic links.
Thanks for your help.
(Platform is WinXP)
|
|
|
|
|
Yes, put another filter on your symbolic link and disable devioctl.
Morality is indistinguishable from social proscription
|
|
|
|
|
Hi all!
I'm not sure if this is the best place to ask, but here goes.
I was wondering if it was possible to change the BIOS Font Color (EG: RAM Count) away from white, to an alternate color (Say Red?) in Windows XP?
I have searched Google, yet found nothing.
Thank you for your time!
- Reelix
-= Reelix =-
|
|
|
|
|
Nope. Windows XP has nothing to do with it since Windows isn't running when the BIOS screens are visible.
You'd have to know exactly where the color number is stored in the BIOS Flash code, change the value, then reflash your system BIOS with the updated code.
You, more than likely, will not find any information on the web on how to do this since noone to very, very few people ever does attempts it, let alone succeeds at it.
|
|
|
|
|
Hi. I was wondering if anyone has done work on controlling where a webcam looks (its viewpoint)?
I am interested in controlling webcams that have full range of view (360-degree, 0..90 degree above horizon).
I only started researching the Logitech line (QuickCam Orbit AF). Other products out there?
Software Development Kits (SDKs)?
Thanks,
John John
|
|
|
|
|
john john mackey wrote: I am interested in controlling webcams that have full range of view (360-degree, 0..90 degree above horizon).
Isn't this only a half FOV? You'd need a minimum elevation of -90* to get the other half.
Today's lesson is brought to you by the word "niggardly". Remember kids, don't attribute to racism what can be explained by Scandinavian language roots.
-- Robert Royall
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
. Look here (...sorry, german website, but the picture tells enough...):