User based working of file system Driver RRS feed

  • Question

  • I have created a legacy file system driver for controlling the storage device connected to the pc.
    Now it's working on the pc based policies (example: if I set block USB storage device then the driver will block all the USB storage device for all the user log on to the pc ).
    Now I am planning to set user-based policies (example: I need to allow USB for administrator and block for other users). Is legacy filter driver capable to do this?  better switch to mini filter?

    I am totally confused about KMODE UMODE drivers. How they are different in working.

    what are the major differences between them?

    what is the main difference between the legacy file system driver and a mini-filter driver?

    I need to create a driver that will work in windows 7 and all above os.

    KMODE and UMODE drivers are working on windows 7 os?

    Is there any tutorial available on the user-mode driver development?

    Please help.

    • Edited by Nikhil V S Thursday, November 1, 2018 10:10 AM
    Thursday, November 1, 2018 10:01 AM

All replies

  • First writing a legacy file system filter has been a bad idea for a long time.  Minifilters provide a better programming environment.   Second you cannot filter the file system at all from user mode, this has to be kernel mode.

    Don Burn Windows Driver Consulting Website:

    Friday, November 2, 2018 11:15 AM