Folder Guard, Mounting images, Permissions? (PSMounterEx - STATUS_ACCESS_DENIED)


Author
Message
MacriumHK
MacriumHK
New Member
New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)
Group: Forum Members
Posts: 9, Visits: 38
Win 7 64-bit, Macrium Reflect Home Edition, Version 6.3 1821 (64-bit).

This morning I tried mounting an image from a network drive and assign a drive letter, without much luck.

It took me a while until I figured out I had to pause protection in 'Folder Guard' (not just allow full access to the drive as I would usually do).

I am using Folder Guard to have my B: (backup) drive letter protected.
I have defined a password for read access and another password for full access.
I have also added the various Macrium Reflect EXEs as trusted (so backups run as per schedule with or without the user logged in etc - and without the need to unlock the folder manually).

Macrium Reflect does have full access to the B: drive but I still couldn't mount the image.
I also tried to unlock the folder for full access, but Macrium Reflect still couldn't mount the image.
Only when I paused the full Folder Guard, I could mount the image.

EventLog showed the following:

https://forum.macrium.com/uploads/images/f22f6959-d5af-475d-8512-7d9a.jpg

When I had full access to the image, and moved some large files to my local drive, only "System" was showing up as taking some 5% resources via Windows Task Manager.

Am I right to assume that PSMounterEx is part of Macrium Reflect? What permissions would I need or what program would I need to add as Trusted to make this work without unlocking?

I already have the following listed under 'Trusted programs' in Folder Guard:
https://forum.macrium.com/uploads/images/ee488cf7-3aa3-4853-8418-228f.jpg

I also assume Windows permissions are not involved in this problem, as I can mount the image to a drive litter by simply pausing protection within Folder Guard.
I assume it's simply another process that tries to access/mount the image, or Macrium Reflect uses another Windows user.


Nick
Nick
Macrium Representative
Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)Macrium Representative (2.8K reputation)
Group: Administrators
Posts: 1.6K, Visits: 8.8K
@MacriumHK

Images are mounted in the Windows Kernel space by the Windows SYSTEM account. I'm not sure how Folder Guard is configured, but Read access should always be allowed, only Write is a potential threat.


Kind Regards

Nick - Macrium Support

Edited 25 June 2017 2:20 PM by Nick
MacriumHK
MacriumHK
New Member
New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)
Group: Forum Members
Posts: 9, Visits: 38
Thanks Nick.

The user SYSTEM is added as Trusted User in Folder Guard by default.

https://forum.macrium.com/uploads/images/20dbcf5f-078a-4bea-a7f5-814c.jpg

Going by that, it should work but for some reason it doesn't.

Also, even with read access allowed (by Folder Guard) or full access (also by Folder Guard), it doesn't mount. Only when Folder Guard protection is paused it mounts the image to a drive letter.

Something seems to be interfering.


Edited 26 June 2017 10:50 AM by MacriumHK
JamieW
JamieW
Macrium Representative
Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)Macrium Representative (164 reputation)
Group: Moderators
Posts: 110, Visits: 1.3K
@MacriumHK

We have installed a trial version of Folder Guard and tried numerous different configurations, but unfortunately we were unable to reproduce this issue.

You may wish to contact the support guys at Winability to see if they can provide more insight on this issue.

Kind Regards,
Macrium Support

https://forum.macrium.com/uploads/images/bf6acec0-cff3-49f3-b8d0-5fcd.png




Edited 26 June 2017 1:03 PM by Nick
MacriumHK
MacriumHK
New Member
New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)New Member (13 reputation)
Group: Forum Members
Posts: 9, Visits: 38
JamieW - 26 June 2017 12:39 PM
unfortunately we were unable to reproduce this issue.

You may wish to contact the support guys at Winability to see if they can provide more insight on this issue.

Hi Jamie

thanks for looking into this. Strange that you couldn't reproduce this issue.
I contacted Winability support and they are seeing what I am seeing. Seems they are going to make some changes in their next update.
Here is their reply:

I have tried to investigate the problem using the trial version of Macrium Reflect. It appears that when mounting a backup image, it uses a somewhat unusual approach that causes it to be restricted by Folder Guard even though all Reflect programs are declared as trusted. We will try to recognize such a situation and improve its handling in the next update to Folder Guard.

Meanwhile, it appears that the following solution should help:

- Using Folder Guard, create a filter with the following properties:

Apply to files: *.mrbak
(leave all other properties empty)

- Name this filter 'Reflect' for easy identification later on;

- Assign the 'Full access' attribute to this filter.

Apply the changes, and from now on Reflect should be able to mount its images.


Please note that 'Filters' needs a professional/business license of Folder Guard, which I don't have - I can't try this workaround at the moment but maybe it helps some other users. Also, I would probably not setup "Full access" as outlined by Winability, but rather just read access.



Edited 29 June 2017 12:45 AM by MacriumHK
GO

Merge Selected

Merge into selected topic...



Merge into merge target...



Merge into a specific topic ID...




Similar Topics

Reading This Topic

Login

Explore
Messages
Mentions
Search