NDIS intermediate driver under Windows 7

I have a monitoring firewall app that uses NDIS intermediate driver.
Everything is fine under XP. But under Windows 7, I am able to install
the NDIS driver, but the app complains that it can not connect to
driver when it starts up.

Any hints or pointers?

--
Programmer's Goldmine collections:
http://preciseinfo.org

> the NDIS driver, but the app complains that it can not connect to
> driver when it starts up.

Access denied? is the app running with admin privileges?

--
Maxim S. Shatskih
Windows DDK MVP

http://www.storagecraft.com

In article <>, "Maxim S. Shatskih" <> wrote:
>> the NDIS driver, but the app complains that it can not connect to
>> driver when it starts up.
>
>Access denied? is the app running with admin privileges?

Not sure what the exect error is. But the driver could not be opened.
I have to look into the source code and see what exactly is the error.

Well, as far as privileges go I don't remember which account it was
installed from. Unfortunately, I never worked with win 7 or vista.
I do't like to run new stuff usually, especially the major o/s
versions. Plus i did not like the idea of vista bloat at all.

So, how would i check if the app is running with admin privileges?
On XP it does run with admin privileges.

Are there general no-nos for NDIS intermediate drivers under win 7?

>--=20
>Maxim S. Shatskih
>Windows DDK MVP
>
>http://www.storagecraft.com

--
Programmer's Goldmine collections:

http://preciseinfo.org

Code examples and expert discussions on
C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript

In article <8ba44aa9-3291-4218-b7e0->, eagersh <> wrote:
>On Dec 17, 9:20=A0pm, ta...@mongo.net (tanix) wrote:
>> In article <u5QkcW5fKHA.1...@TK2MSFTNGP06.phx.gbl>, "Maxim S. Shatskih" <=
>ma...@storagecraft.com.no.spam> wrote:
>>
>> >> the NDIS driver, but the app complains that it can not connect to
>> >> driver when it starts up.
>>
>> >Access denied? is the app running with admin privileges?
>>
>> Not sure what the exect error is. But the driver could not be opened.
>> I have to look into the source code and see what exactly is the error.
>>
>> Well, as far as privileges go I don't remember which account it was
>> installed from. Unfortunately, I never worked with win 7 or vista.
>> I do't like to run new stuff usually, especially the major o/s
>> versions. Plus i did not like the idea of vista bloat at all.
>>
>> So, how would i check if the app is running with admin privileges?
>> On XP it does run with admin privileges.
>>
>> Are there general no-nos for NDIS intermediate drivers under win 7?
>>
>> >--=3D20
>> >Maxim S. Shatskih
>> >Windows DDK MVP
>> >ma...@storagecraft.com
>> >http://www.storagecraft.com
>>
>> --
>> Programmer's Goldmine collections:
>>
>> http://preciseinfo.org
>>
>> Code examples and expert discussions on
>> C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript
>
>Maxim means that your application must run with Admin privilege.

Acutally, I was too busy to even think about it when I wrote it.
The problem is the app is started automatically.
So, it is not clear at which point it starts.
If it starts at teh point where I log in, depending on privileges
on that account it MAY start under non privileged account.

And once we are at it, the same thing probably applies to driver.
I do not remember at which point the NDIS intermediate driver
starts.

If you guys thing the only think preventing that app and to start
is an issue of privileges, that is a good news. We can fix that one.
Cause I prolly need to run win 7 even though at this point
I don't see what does it buy me. XP is just fine for me for
everything I need to run and I think microsoft has wasted several
years since vista on developing the stuff no one really needs
more or less.

What I hate to see with microsoft is every time they come up with
new version of something, you have to spend years relearning
everything you know. All the dialog boxes are different.
Things are no longer in place you know where they should be
and on and on and on.

From what I sess, it is a deliberate strategy to keep everyone
spinning the whells and wasting at least 2 years to catch up
with microsoft.

Instead of simply polishing things people do need, they keep
redesigning everything, at least from the user interface standpoint.

Don't they have at least someone with brains at microsoft?

>If
>you click on application and click on right button of mouse you could
>see in the top of Window a item "Run as administrator". Click on this
>and your application will run with admin privilege. If you just simple
>double click on the application it will not have such privilege.

Hey, thanx for a tip.
I only ran win 7 once or twice.
People say it is glittery but so far I see more problems with it.
I think this whole concept of increasing security is basically
a failure. They should have looked at the way Linux Ubuntu does it
instead of putting ALL sorts of hard restrictions and not allowing
the users to chose they way they want to run their box.

Just look at Linux world. There is no such a thing as viruses or
trojans. True, it is primarily becasue you are dealing with
pub domain code and there is a single release point, Ubuntu in
this case and you can trust those.

But they also have a sudo command to run anything with su priveleges.
So, overall, nothing runs on your box as su account except some
rare time slices when you need to modify the system parameters
or what have you.

And what windows does?
Well, they just put the most stringent and more or less utterly
useless limitations that can only provide user inconvenience
at the end.

You can hardly find a box that is NOT running the antivirus program.
Every time you run some program or even touch the zip file,
the antivirus program scans it for viruses.

So...
What IS the point in all this "improved" security?
I really do not see a SINGLE benefit so far.
But I do see ALL sorts of potential and actual problems.
I could not install some perfectly good working apps on win 7
because of some utter garbage I don't even have time to get into
beyond knowing full well it is utter nonsense.

>Igor Sharovar

--
Programmer's Goldmine collections:

http://preciseinfo.org

Tens of thousands of code examples and expert discussions on
C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript,
organized by major topics of language, tools, methods, techniques.

> But they also have a sudo command to run anything with su priveleges.
> So, overall, nothing runs on your box as su account except some
> rare time slices when you need to modify the system parameters
> or what have you.
>
> And what windows does?

Vista and later do the same as "sudo". You just do not need to type "sudo", only to push a button.

--
Maxim S. Shatskih
Windows DDK MVP

http://www.storagecraft.com

In article <uhd$>, "Maxim S. Shatskih" <> wrote:
>> But they also have a sudo command to run anything with su priveleges.
>> So, overall, nothing runs on your box as su account except some
>> rare time slices when you need to modify the system parameters
>> or what have you.
>>=20
>> And what windows does?
>
>Vista and later do the same as "sudo". You just do not need to type =
>"sudo", only to push a button.

Oh, cool. That is a good idea.

Btw, someone told me to tell my up to run in compatibility mode
and that allowed it to talk to intermediate NDIS driver.

I wonder what could be an issue with the app that would require
it to run in compatibility mode?

>--=20
>Maxim S. Shatskih
>Windows DDK MVP
>
>http://www.storagecraft.com

--
Programmer's Goldmine collections:

http://preciseinfo.org

Tens of thousands of code examples and expert discussions on
C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript,
organized by major topics of language, tools, methods, techniques.

>>Vista and later do the same as "sudo". You just do not need to type =
>>"sudo", only to push a button.
>
> Oh, cool. That is a good idea.

Yes.

Windows ecosystem had a long and _evil_ tradition of running everything with admin rights. UNIX ecosystem had no such traditions.

This is a question of traditions, and not of technical quality of the OS.

So, with Vista, MS have chosen to break this evil tradition, and thus UAC was introduced - "reduced admin" mode with automatic prompts about the administrative action being performed. This replaces "sudo".

Now note the following: "not sure what the exect error is" is NOT a way of asking questions on forums. The first step you must do (after all, it's your app and your problems) is to at least determine the exact point of failure - error code and the call which fails.

Usually (but not always) the Vista-only problems is due to permissions and UAC - the app no more runs as administrator, and the required permissions are administrative. So, try running the admin command prompt and your app from it.

Then, if this is really the case, embed the "requireAdministrator" manifest to the resource section of the EXE - this is the simplest way of asking Vista to always ask for admin access when running your EXE.

--
Maxim S. Shatskih
Windows DDK MVP

http://www.storagecraft.com

In article <#hIGj#>, "Maxim S. Shatskih" <> wrote:
>>>Vista and later do the same as "sudo". You just do not need to type =
>=3D
>>>"sudo", only to push a button.
>>=20
>> Oh, cool. That is a good idea.
>
>Yes.
>
>Windows ecosystem had a long and _evil_ tradition of running everything =
>with admin rights. UNIX ecosystem had no such traditions.
>
>This is a question of traditions, and not of technical quality of the =
>OS.
>
>So, with Vista, MS have chosen to break this evil tradition, and thus =
>UAC was introduced - "reduced admin" mode with automatic prompts about =
>the administrative action being performed. This replaces "sudo".
>
>Now note the following: "not sure what the exect error is" is NOT a way =
>of asking questions on forums.

:--}

I know, I know...
I just happened to open the source code for the app just before
I read this group right now and I am willing to spend a few minutes
on it. Not to please people like you, but to fix one nasty bug that
apparently causes problem when the program is first ran after install
and a request is made to get the list of all adapters from the miniport.

So...

Strange how things happen in life, isn't it?

:--}

But I am not even going to bother tell you what I see.
You seem to be so important, you can hardly be bothered
with small things like that, right?

So...

Btw, are you in the Silicon Valley?

> The first step you must do (after all, =
>it's your app and your problems)

Insightful.

I know, I know.

> is to at least determine the exact =
>point of failure - error code and the call which fails.

I could not be bothered too much with it.
I have minutes to resolve this issue.
Someone already suggested to make sure the program runs in
compatibility mode, whatever that means. I never worked with vista
or win 7. It is the first time I am trying to deal with this stuff.
If I can run my monitoring firewall on it without spending more than
an hour in toto to make it work, fine, I'll give win 7 a chance.

Otherwise, sorry, XP is good enough for a poor guy like me.
It does everything I need for the most important things.
I already had some problem installing one other app I intend to use
that runs just fine on XP. So, that does not make me happy.
I can not take chances with a new O/S no matter how slick it looks.
Cause I am not after looks or playing the kill, kill, kill games
that need teraflops in performance.

I am just a poor guy.
Have mercy on me.
Pleeeeze.

>Usually (but not always) the Vista-only problems is due to permissions =
>and UAC - the app no more runs as administrator, and the required =
>permissions are administrative.

I see. Well, after I changed it to run in "compatibility" mode,
the app seem to be able to open driver and I do see some traffic
in the monitor window. It means everything is fine, we are in busness.

> So, try running the admin command prompt =
>and your app from it.

>Then, if this is really the case, embed the "requireAdministrator" =
>manifest to the resource section of the EXE - this is the simplest way =
>of asking Vista to always ask for admin access when running your EXE.

Thanx. Cya.

>--=20
>Maxim S. Shatskih
>Windows DDK MVP
>
>http://www.storagecraft.com

--
Programmer's Goldmine collections:

http://preciseinfo.org

Tens of thousands of code examples and expert discussions on
C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript,
organized by major topics of language, tools, methods, techniques.

In article <#hIGj#>, "Maxim S. Shatskih" <> wrote:

[...]

>Maxim S. Shatskih
>Windows DDK MVP
>
>http://www.storagecraft.com

Btw, I do have an archive of kernel and driver groups going back
several years.

Do you guys think that putting up the site that covers these issues
and filters archives with fancy filters and separates all the issues
by chapter that contain the appropriate articles only makes any
sense?

My sites are organized by two major sections:
code examples/snippets and expert discussions.
Then the sites are split into chapters, like a book.
Each chapter covers a set of related issues.
Archives are filtered with powerful filters that are orders
of magnitude more precise than of a search engine.

So... I can pretty much find you a single article in the entire
archive need be.

So, the question becomes: does it make sense to put up a site
that will allow you guys see several years worth of information
on these groups?

Secondly, anybody has a suggestion on which chapters to include?
I haven't started working on this particular site and am not sure
this is the one I am interested in doing next. There are other
sites that are itching to be created and a need for them is
probably much higher than for this site.

But who knows. May be you can give me a sufficient stimuli
to make this one next?

--
Programmer's Goldmine collections:

http://preciseinfo.org

Tens of thousands of code examples and expert discussions on
C++, MFC, VC, ATL, STL, templates, Java, Python, Javascript,
organized by major topics of language, tools, methods, techniques.