Re: CreateFile() returns ERROR_ACCESS_DENIED to the user

Actually, a simpler way is to use IoCreateDeviceSecure with a SDDL string
that allows geneal users access.


--
Don Burn (MVP, Windows DDK)
Windows 2k/XP/2k3 Filesystem and Driver Consulting
http://www.windrvr.com
Remove StopSpam from the email to reply



"anton bassov" <soviet_bloke@xxxxxxxxxxx> wrote in message
news:1163454664.839974.119450@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Do i must modify user rights or driver rights ????

In actuality, none of the above....

You have to modify not user rights and DEFINITELY not driver rights,
but access permission to your target device (i.e. its ACL) Check MSDN,
namely, GetSecurityInfo()/SetSecurityInfo(), plus SetEntriesInAcl(),
for more info

Anton Bassov

SteM wrote:
Thanks Anton,
my guess was that, at least, open, close and DeviceIoControl was allowed
....
How can i solve ?
Do i must modify user rights or driver rights ????

Thanks
--
SteM


"anton bassov" <soviet_bloke@xxxxxxxxxxx> ha scritto nel messaggio
news:1163436308.076405.201750@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi mate

This is just absolutely normal default behaviour - limited users have
no access to devices by default. If you want non-privileged users to
gain access to it, you have to EXPLICITLY allow the above (it is
understandable that it can be done only from the Admin account)

Anton Bassov


SteM wrote:
Hello,
I've written a small wdm driver for Win2000 to access an old custom
hw
on
parallel port.
The accesses are via a couple of DeviceIoControl() custom commands.
It works fine, does exactly what i intended; however, it only works
if I
am
logged in as Administrator (or equivalent).
If I log in as a regular user (Power User) the call to CreateFile
fails
with
ACCESS_DENIED.

// Open driver
rv = CreateFile (
ifDetail->DevicePath,
0, // Desidered access
0, // Share mode
NULL, // Security attrb
CREATE_NEW, // How to create
FILE_FLAG_DELETE_ON_CLOSE, // File attribute
NULL // Template file
);

if (rv==INVALID_HANDLE_VALUE)
{
......



Thanks in advance for any pointers...
--
SteM




.

Relevant Pages

  • Re: CreateFile() returns ERROR_ACCESS_DENIED to the user
    ... INF file. ... Don Burn (MVP, Windows DDK) ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... You have to modify not user rights and DEFINITELY not driver rights, ...
    (microsoft.public.win32.programmer.kernel)
  • Re: CreateFile() returns ERROR_ACCESS_DENIED to the user
    ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... You have to modify not user rights and DEFINITELY not driver rights, ... The accesses are via a couple of DeviceIoControl() custom commands. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: DeviceIoControl with OVERLAPPED and KMDF
    ... user mode - and not reading the documentation carefully enough;) ... Maxim Shatskih, Windows DDK MVP ... DeviceIoControl() is called with OVERLAPPED, ... Like you replied, I thought KMDF (or my driver, no ...
    (microsoft.public.development.device.drivers)
  • Re: DeviceIoControl with OVERLAPPED and KMDF
    ... Maxim Shatskih, Windows DDK MVP ... DeviceIoControl() is called with OVERLAPPED, ... Like you replied, I thought KMDF (or my driver, no ...
    (microsoft.public.development.device.drivers)
  • Re: Switching from drv to svc
    ... A simpler and safer method is just to use DeviceIoControl and pend the IRP ... Don Burn (MVP, Windows DDK) ... Windows 2k/XP/2k3 Filesystem and Driver Consulting ... Remove StopSpam from the email to reply "zde" wrote in message ...
    (microsoft.public.development.device.drivers)