Changing ACL on already loaded device RRS feed

  • Question

  • I wondered if there was a way of changing/adding the ACL on already loaded device (eg COM1, LPT1, Bluetooth). I know that if i'm writing my own driver I can specify an ACL on my device via IoCreateDeviceIO, in my driver's .inf file
    or even via SetupDiSetDeviceRegistryProperty but, as I understand it, these only set up the ACL when the driver is loaded.

    However, I want to do this 'on the fly'  (ie. after the driver has been loaded and to be effective immediately) and for devices controlled by standard microsoft supplied drivers. I wondered if SetKernelObjectSecurity might be the way to go ?

    Any information or hints would be a great help.

    Wednesday, February 10, 2010 11:02 AM