-
-
Notifications
You must be signed in to change notification settings - Fork 1.4k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Show "??" entry in Object Manager #2074
Comments
Added in commit b84bdc9 |
Looks like the implementation got removed in #2197. |
Will look into adding it back 👍 |
I could removed this by mistake since many things were rewritten and added. I will look into and try to revert this and commit to #2284. |
fixed in 165f3a5 |
Description of the feature, modification, idea or suggestion
Tools - System - Object Manager shows the content of "\" by calling
NtQueryDirectoryObject
recursively.This approach overlooks one particular directory -
??
(a.k.a. "local\DosDevices
"), which is not returned when querying the root directory, unlike the global version of\DosDevices
(GLOBAL??
).This directory typically contains a symbolic link to
Global
, network drives, subst drives and whatever else the user defined withDefineDosDevice
.This information is also available under
\Sessions\<SESSION_ID>\DosDevices\<LOGON_SESSION_ID>
, but getting there is more cumbersome and requires Administrator rights.Proposed implementation details (optional)
It can be added manually (I'm not familiar with the code, so apologies if something is horribly wrong):
The result:
Links:
https://learn.microsoft.com/en-us/windows-hardware/drivers/kernel/local-and-global-ms-dos-device-names
https://www.osronline.com/article.cfm%5Earticle=381.htm
https://superuser.com/questions/884347/win32-and-the-global-namespace
https://stackoverflow.com/questions/4686897/sessions-window-stations-and-desktops
The text was updated successfully, but these errors were encountered: