| UID | title | description | tech.root | ms.date | keywords | ms.keywords | req.header | req.include-header | req.target-type | req.target-min-winverclnt | req.target-min-winversvr | req.kmdf-ver | req.umdf-ver | req.lib | req.dll | req.irql | req.ddi-compliance | req.unicode-ansi | req.idl | req.max-support | req.namespace | req.assembly | req.type-library | targetos | f1_keywords | topic_type | api_type | api_location | api_name | |||||||
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
NF:ntifs.RtlSetProcessPlaceholderCompatibilityMode |
RtlSetProcessPlaceholderCompatibilityMode function (ntifs.h) |
RtlSetProcessPlaceholderCompatibilityMode sets the placeholder compatibility mode for the current process. |
ifsk |
10/19/2018 |
|
RtlSetProcessPlaceholderCompatibilityMode |
ntifs.h |
Universal |
Windows 10 (Version 1803) |
Windows |
|
|
|
|
|
RtlSetProcessPlaceholderCompatibilityMode sets the placeholder compatibility mode for the current process.
The placeholder compatibility mode to set.
This function returns the process's previous placeholder compatibility mode (PHCM_xxx), or a negative value on error (PCHM_ERROR_xxx).
It can be one of the following values:
| Compatibility Mode | Value |
|---|---|
| PHCM_APPLICATION_DEFAULT | 0 |
| PHCM_DISGUISE_PLACEHOLDER | 1 |
| PHCM_EXPOSE_PLACEHOLDERS | 2 |
| PHCM_MAX | 2 |
| PHCM_ERROR_INVALID_PARAMETER | -1 |
| PHCM_ERROR_NO_TEB | -2 |
When placeholders are exposed, characteristics such as the presence of a reparse point, the sparse bit, and the offline bit are plainly visible through directory enumeration and other types of file information queries. When placeholders are disguised, these details are completely hidden, making the file look like a normal file.
Most Windows applications see exposed placeholders by default. For compatibility reasons, Windows may decide that certain applications see disguised placeholders by default.
RtlQueryProcessPlaceholderCompatibilityMode