BOOLEAN
IsFromNetAccess (
	__in PFLT_IO_PARAMETER_BLOCK iopb
    )
{
	NTSTATUS	ntStatus;
	PACCESS_TOKEN pToken=NULL;
	PTOKEN_SOURCE pTokenSrc=NULL;
	PSECURITY_SUBJECT_CONTEXT secSubCtx;
	BOOLEAN		ret=FALSE;

	secSubCtx=&(iopb->Parameters.Create.SecurityContext->AccessState->SubjectSecurityContext);

	do
	{
		if(secSubCtx->ClientToken!=NULL || secSubCtx->PrimaryToken!=NULL)
		{
			pToken=SeQuerySubjectContextToken(secSubCtx);
		}

		if(pToken==NULL)
			break;

		ntStatus=SeQueryInformationToken(pToken,TokenSource,&pTokenSrc);
		if(NT_SUCCESS(ntStatus))
		{
			pTokenSrc->SourceName[TOKEN_SOURCE_LENGTH-1]=0x00;
			if(_stricmp(pTokenSrc->SourceName,"NtLmSsp")==0)
			{
				ret=TRUE;
			}
		}
		else
		{
			DbgPrint("SeQueryInformationToken  Failed!!!\n");
		}
	}while(0);

	if(pTokenSrc!=NULL)
		ExFreePool(pTokenSrc);

	return ret;
}