How can I work around Windows File Protection such that I can rename a system file?

How do I use PendingFileRenameOperations to rename a file which is in use? Especially system files, like tcpip.sys. I have created a key PendingFileRenameOperations (REG_MULTI_SZ) in

HKLM\System\CurrentControlSet\Control\Session Manager

And wrote there something like this:

\??\C:\windows\system32\tcpip.sys \??\C:\windows\system32\tcpip.bkp

I have found that Windows File Protection doesn't let me do that. What's wrong with it?


It looks to me like you have an error in the long filename prefix syntax. Instead of \??\, try \\?\.