How can I disable the specific folder sharing in kernel mode or user mode ?

How can I disable the specific folder sharing in kernel mode or user mode ?

Post by c3_010 » Wed, 26 Mar 2008 12:26:09


I wish to learn the principle of file sharing in windows.
Does it base on registry? Which module or driver does that work?

How can I disable the specific folder sharing in kernel mode or user
mode ?

And I have another question.

When I open a file shared on the other PC, IRP_MJ_CREATE comes
to \Device\LanmanRedirector device and PFO's file name is formed
as \192.168.1.1\sharedfoldername.
And when I open a shared file on my PC, it is also come in same form.

How can I distinguish between them?
And If it is on my shared file on my PC, How can I get the exact file
path
such as "C:\sharedfoldername\1.txt" from net path such as
\192.168.1.1\sharedfoldername\1.txt?

Thank you for your help.
 
 
 

How can I disable the specific folder sharing in kernel mode or user mode ?

Post by Maxim S. S » Wed, 26 Mar 2008 16:27:07

> I wish to learn the principle of file sharing in windows.

Yes, the list of shares is in
HKLM\SYSTEM\CurrentControlSet\Services\lanmanserver\Shares


SRV.SYS and SRVSVC.DLL inside one of the SVCHOSTs.


By NETWORK pseudo-group in access token.

--
Maxim Shatskih, Windows DDK MVP
StorageCraft Corporation
XXXX@XXXXX.COM
http://www.yqcomputer.com/

 
 
 

How can I disable the specific folder sharing in kernel mode or user mode ?

Post by m » Thu, 27 Mar 2008 07:36:23

Remove the File and Printer Sharing for Microsoft Networks protocol binding
from the desired network adapter(s).