Edit

FsRtlIsEcpFromUserMode function (ntifs.h)

  • Article

The FsRtlIsEcpFromUserMode routine determines whether an extra create parameter (ECP) context structure originated from user mode.

Syntax

BOOLEAN FsRtlIsEcpFromUserMode(
  [in] PVOID EcpContext
);

Parameters

[in] EcpContext

Pointer to the ECP context structure to test.

Return value

FsRtlIsEcpFromUserMode returns TRUE if the ECP context structure originated in user mode and FALSE if the ECP context structure originated in kernel mode.

Requirements

Requirement Value
Minimum supported client FsRtlIsEcpFromUserMode is available starting with Windows Vista.
Target Platform Universal
Header ntifs.h (include Ntifs.h)
Library NtosKrnl.lib
DLL NtosKrnl.exe
IRQL <= APC_LEVEL