Re: ZwQuerySecurityObject, FltQuerySecurityObject, ObGetObjectSecurity returning ACCESS DENIED on a network share file.

> I imagine the problem is because the kernel has not been authorised in
> the same way as the shell once the user owning that share has logged
> on. What is your take on this?

Your kernel code must be in the correct user thread context to make such SMB calls.

--
Maxim S. Shatskih
Windows DDK MVP

http://www.storagecraft.com

"matt_sykes" <> wrote in message
news:fd566716-1ac7-403d-ad82-
.........
> In another product we hooked NtCreateTokan in order to do
> impersonation but this isnt in this product.

That's good - no need to repeat the traditional mantras about hooking

-- pa