No privileges to access HID Filter Driver in Windows XP Non-Admin User Account?

No privileges to access HID Filter Driver in Windows XP Non-Admin User Account?

Post by Bruce Tomp » Sat, 23 Aug 2003 01:21:15


I have developed a keyboard filter driver for a Symbol
barcode scanner which appears as a HID Keyboard Device in
Device Manager. The filter driver (which is not signed)
works great in a Windows XP Admin User account but it
doesn't work in a Windows XP non-admin User account? I
get the error Access denied - Insufficient Privileges?
(I can't remember the exact text of the error but this is
basically it. I don't have the barcode scanner at the
moment to run it!).

Does anyone know how I can have a Windows XP non-admin
user access this filter driver?

Thanks, ..bruce
 
 
 

No privileges to access HID Filter Driver in Windows XP Non-Admin User Account?

Post by kuma » Wed, 27 Aug 2003 06:06:55


Hi Bruce,

You should use appropriate Security descriptor when you create control
device object using IoCreateDeviceSecure in order to allow access rights to
non-admin users. The default security descriptor in the toaster filter
driver allows only the admins to have generic all access to the control
object.

Here is the link to SDDL documentation in DDK:
http://www.yqcomputer.com/
march/devobjts_5e07.asp

Thanks,

Kumar Rajeev
---
This posting is provided "AS IS" with no warranties, and confers no rights.
{\rtf1\ansi\ansicpg1252\deff0\deflang1033{\fonttbl{\f0\fnil\fprq2\fcharset0 MS Sans Serif;}}
\viewkind4\uc1\pard\f0\fs20 Hi Bruce,
\par
\par You should use appropriate Security descriptor when you create control device object using IoCreateDeviceSecure in order to allow access rights to non-admin users. The default security descriptor in the toaster filter driver allows only the admins to have generic all access to the control object.
\par
\par Here is the link to SDDL documentation in DDK:
\par http://www.yqcomputer.com/
\par
\par Thanks,
\par
\par Kumar Rajeev
\par ---
\par This posting is provided "AS IS" with no warranties, and confers no rights.
\par }