Hi Colin,
Perhaps have a look at the CCB (client control block) of the pipe.
If ClientSession is NULL the client is the local machine.
Else you might look at the Process pointer and work it from there.
The CCB is initialized in NpCreateClientEnd.
Struct _EPROCESS is declared eg. in pstypes.h.
HT
On 2016-10-05 03.10, Colin Finck wrote:
> Thanks to Dmitry Chapyshev's generous donation of rare FB-DIMM memory
> modules, our Buildserver has enough RAM for the Win7 buildslave VM now.
(y)
> Unfortunately, our HDDs were also lacking space, so I had to move the
> public "bootcd_old" folder from i