Adds or removes a message from the User Interface Privilege Isolation (UIPI) message filter.

Syntax

BOOL ChangeWindowMessageFilter(      
    UINT message,
    DWORD dwFlag
);

Parameters

message

[in] Specifies the message to add to or remove from the filter.

dwFlag

[in] Specifies the action to be performed. One of the following values.

MSGFLT_ADD

Adds the message to the filter. This has the effect of allowing the message to be received.

MSGFLT_REMOVE

Removes the message from the filter. This has the effect of blocking the message.

Return Value

TRUE if successful; otherwise, FALSE. To get extended error information, call GetLastError.

Note  A message can be successfully removed from the filter, but that is not a guarantee that the message will be blocked. See the Remarks section for more details.

Remarks

UIPI is a security feature that prevents messages from being received from a lower integrity level sender. All such messages with a value above WM_USER are blocked by default. The filter, somewhat contrary to intuition, is a list of messages that are allowed through. Therefore, adding a message to the filter allows that message to be received from a lower integrity sender, while removing a message blocks that message from being received.

Certain messages with a value less than WM_USER are required to pass through the filter regardless of the filter setting. You can call this function to remove one of those messages from the filter and it will return TRUE. However, the message will still be received by the calling process.

Processes at or below SECURITY_MANDATORY_LOW_RID are not allowed to change the filter. If those processes call this function, it will fail.

For more information on integrity levels, see Understanding and Working in Protected Mode Internet Explorer.

Function Information

Minimum DLL Version	user32.dll
Header	Declared in Winuser.h, include Windows.h
Import library	User32.lib
Minimum operating systems	Windows Vista