Geoff Chappell, Software Analyst
The public symbol file NTKRPAMP.PDB for the original release of Windows 10 tells that the kernel is built with the DISALLOWEDGUIDS.H header at
d:\th\minkernel\ntos\etw
and draws from it the following type definitions:
| Line Number | Type |
|---|---|
| 31 | struct _DISALLOWED_GUIDS |
The header DISALLOWEDGUIDS.H is not known in any Device Driver Kit (DDK) or Windows Driver Kit (WDK).