Device Driver overwrite

[CJF]

Hi,
I want to overwrite one of the Windows .sys files in the
\windows\system32\drivers folder. I turned off system restore and rebooted.
I even disabled the system restore service. Even after doing so, when I
overwrite the .sys file (serial.sys to be specific) the Windows OS still
manages to restore the file back to its original state. How do I overwrite
this file without Windows monintoring it and changing it back? I tried
renaming the .cab file as well, but that was no help.

There didn't appear to be anything in group policy at the domain level
either.
thx,
Chris

 

[R. McCarty]

The only way to prevent it is:

Remove Windows File Protection's cached version of the file from
C:\Windows\System32\Dllcache.

Then replace the module, with the one you want to use. WFP will
attempt to replace it with the Dllcache version. Since it's been removed
it will prompt for the i386 folder or CD-ROM. If you click cancel it will
finally ask if you want to continue to use this version, in deference to the
monitored WFP one.

 

[Kelly]

Hi Chris,

Just curious, by why and which file?

--
All the Best,
Kelly (MS-MVP)

Troubleshooting Windows XP
http://www.kellys-korner-xp.com