You would like to use the ProcMon tool in order to troubleshoot complicated issue on Win XP Embedded; however that tool fails with an error similar to: “Unable to load Process Monitor device driver”.

Note: The ProcMon will not run on Windows XP Embedded due to the fact that it requires Microsoft Filesystem Filter Manager (Fltmgr.sys) which is not installed on this OS type by default.

I decided to write a simple batch file (Install.bat) which will:

-Install necessary files into %temp% (like fltmgr.sys, fltlib.dll etc.)
-Merge FltReg.reg (It will be executed under SYSTEM account to bypass permissions issues)
-Install the KB914882 (A patch for FltMgr)

Note: After reboot you should be able to execute ProcMon successfully.

Additional information:

### Install.bat:

@ECHO OFF
 ECHO
 ECHO InstallFltMgr driver...
 ECHO Copy fltlib.dll to System32 folder...
 copy fltlib.dll %windir%\System32\fltlib.dll /y
 ECHO Copy fltmgr.sys to System32\drivers...
 copy fltmgr.sys %windir%\System32\drivers\fltmgr.sys /y
 ECHO Copy FltReg.reg to %temp%\FltReg.reg ...
 Copy FltReg.reg %temp%\FltReg.reg /y
 ECHO Copy FltMgr (KB914882) to %temp%\KB914882
 xcopy /S /I KB914882 %temp%\KB914882
 ECHO Update FltMgr service registry under SYSTEM account...
 psexec -is /accepteula regedit /S %temp%\FltReg.reg
 ECHO Update FltMgr (KB914882) under SYSTEM account...
 psexec -s /accepteula %temp%\KB914882\update\update.exe /passive /warnrestart
 del %temp%\FltReg.reg
 ECHO END...
 set /p e=Click Enter to exit...

### FltReg.reg:

Windows Registry Editor Version 5.00
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FltMgr]
 "Description"="File System Filter Manager Driver"
 "DisplayName"="FltMgr"
 "ErrorControl"=dword:00000001
 "Group"="FSFilter Infrastructure"
 "ImagePath"=hex(2):73,00,79,00,73,00,74,00,65,00,6d,00,33,00,32,00,5c,00,64,00,\
 72,00,69,00,76,00,65,00,72,00,73,00,5c,00,66,00,6c,00,74,00,6d,00,67,00,72,\
 00,2e,00,73,00,79,00,73,00,00,00
 "Start"=dword:00000000
 "Type"=dword:00000002
 "Tag"=dword:00000001
 "AttachWhenLoaded"=dword:00000000
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\FltMgr\Enum]
 "0"="Root\\LEGACY_FLTMGR\\0000"
 "Count"=dword:00000001
 "NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_FLTMGR]
 "NextInstance"=dword:00000001
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_FLTMGR\0000]
 "Service"="FltMgr"
 "Legacy"=dword:00000001
 "ConfigFlags"=dword:00000020
 "Class"="LegacyDriver"
 "ClassGUID"="{8ECC055D-047F-11D1-A537-0000F8753ED1}"
 "DeviceDesc"="FltMgr"
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Enum\Root\LEGACY_FLTMGR\0000\Control]
 "ActiveService"="FltMgr"

Kind Regards,
Witold Lawacz (Ławacz)

FltMgr-install V2
FltMgr-install V2
FltMgr-install_v2.zip
9.6 MiB
388 Downloads
Details...