Windows Freigabe als Write mit Read-Only realisieren?

#include <fltKernel.h>
#include <dontuse.h>
#include <suppress.h>

#define BACKUP_DIRECTORY L"\\Backup" 

PFLT_FILTER gFilterHandle;

NTSTATUS CreateBackupDirectory(_In_ PFLT_INSTANCE Instance)
{
    NTSTATUS status;
    UNICODE_STRING backupDirectory;
    OBJECT_ATTRIBUTES objAttr;

    RtlInitUnicodeString(&backupDirectory, BACKUP_DIRECTORY);

    InitializeObjectAttributes(&objAttr, &backupDirectory, OBJ_CASE_INSENSITIVE | OBJ_KERNEL_HANDLE, NULL, NULL);

    status = FltCreateDirectory(Instance, NULL, &objAttr);

    if (status == STATUS_OBJECT_NAME_COLLISION)
    {
        status = STATUS_SUCCESS;  // Backup directory already exists, no need to create
    }

    return status;
}

FLT_PREOP_CALLBACK_STATUS
PreOperationCallback(
    _Inout_ PFLT_CALLBACK_DATA Data,
    _In_ PCFLT_RELATED_OBJECTS FltObjects,
    _Flt_CompletionContext_Outptr_ PVOID *CompletionContext
)
{
    UNREFERENCED_PARAMETER(FltObjects);
    UNREFERENCED_PARAMETER(CompletionContext);

    NTSTATUS status;

    if (Data->Iopb->MajorFunction == IRP_MJ_WRITE || Data->Iopb->MajorFunction == IRP_MJ_SET_INFORMATION)
    {
        PFILE_OBJECT fileObject = FltObjects->FileObject;
        PFLT_FILE_NAME_INFORMATION fileNameInfo;

        status = FltGetFileNameInformation(Data, FLT_FILE_NAME_NORMALIZED | FLT_FILE_NAME_QUERY_DEFAULT, &fileNameInfo);

        if (NT_SUCCESS(status))
        {
            if (fileNameInfo->Name.Length > 0)
            {
                // Construct backup file path with timestamp
                UNICODE_STRING backupFileName;
                WCHAR backupFilePath[MAX_PATH];

                SYSTEMTIME systemTime;
                GetLocalTime(&systemTime);
                swprintf_s(backupFilePath, MAX_PATH, L"%ws\\%04d-%02d-%02d_%02d-%02d-%02d_%ws", BACKUP_DIRECTORY,  
                    systemTime.wYear, systemTime.wMonth, systemTime.wDay,
                    systemTime.wHour, systemTime.wMinute, systemTime.wSecond, fileNameInfo->Name.Buffer);

                RtlInitUnicodeString(&backupFileName, backupFilePath);

                // Copy file to backup directory
                status = FltCopyFile(FltObjects->Instance, fileObject, NULL, backupFileName.Buffer, TRUE, NULL, NULL);
            }

            FltReleaseFileNameInformation(fileNameInfo);
        }
    }

    return FLT_PREOP_SUCCESS_NO_CALLBACK;
}

FLT_POSTOP_CALLBACK_STATUS
PostOperationCallback(
    _Inout_ PFLT_CALLBACK_DATA Data,
    _In_ PCFLT_RELATED_OBJECTS FltObjects,
    _In_ PVOID CompletionContext,
    _In_ FLT_POST_OPERATION_FLAGS Flags
)
{
    UNREFERENCED_PARAMETER(Data);
    UNREFERENCED_PARAMETER(FltObjects);
    UNREFERENCED_PARAMETER(CompletionContext);
    UNREFERENCED_PARAMETER(Flags);

    return FLT_POSTOP_FINISHED_PROCESSING;
}

NTSTATUS
DriverEntry(
    _In_ PDRIVER_OBJECT DriverObject,
    _In_ PUNICODE_STRING RegistryPath
)
{
    UNREFERENCED_PARAMETER(RegistryPath);

    NTSTATUS status;

    // Register the filter with the filesystem
    status = FltRegisterFilter(DriverObject, &FilterRegistration, &gFilterHandle);

    if (!NT_SUCCESS(status))
    {
        return status;
    }

    // Start filtering I/O operations
    status = FltStartFiltering(gFilterHandle);

    if (!NT_SUCCESS(status))
    {
        FltUnregisterFilter(gFilterHandle);
        return status;
    }

    // Create the backup directory
    status = CreateBackupDirectory(NULL);

    if (!NT_SUCCESS(status))
    {
        FltUnregisterFilter(gFilterHandle);
        return status;
    }

    return STATUS_SUCCESS;
}

NTSTATUS
FilterUnload(
    _In_ FLT_FILTER_UNLOAD_FLAGS Flags
)
{
    UNREFERENCED_PARAMETER(Flags);

    FltUnregisterFilter(gFilterHandle);

    return STATUS_SUCCESS;
}