Is it possible to create a driver specfic SID for an UMDF driver?

kk 1 Reputation point
2021-08-12T17:44:12.02+00:00

Similar to creating a service specific SIDs for windows services, Is it possible to create a driver specific SID for an umdf driver to differentiate between different umdf drivers. My goal is to allow a specific umdf driver access to my KMDF driver by adding the driver specific SID in the allowed ACLs. Allowing entire class of UMDF driver provides access to all umdf drivers, which is undesirable. UMDF runs in a local service account, but although not a windows service. It should be a unique SID across the entire world. Please suggest.

Reference: https://techcommunity.microsoft.com/t5/ask-the-performance-team/ws2008-windows-service-hardening/ba-p/372702

Windows for business | Windows Client for IT Pros | Devices and deployment | Configure application groups
0 comments No comments
{count} votes

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.