在服务中创建用户进程的方法（C#版）

全栈程序员-站长 • 2021年7月25日下午12:00 • 未分类 • 阅读 57

Windows NT/2000提供了一个函数CreateProcessAsUser，它的功能类似于CreateProcess函数，所不同的是CreateProcessAsUser创建的新进程能以用户（任何用户）的安全上下文方式运行。

  1
//
PlatformInvoke Stuff

  2
        [StructLayout(LayoutKind.Sequential)]

  3

struct
STARTUPINFO

  4
        {

  5

public
Int32 cb;

  6
            [MarshalAs(UnmanagedType.LPTStr)]

  7

public
String lpReserved;

  8
            [MarshalAs(UnmanagedType.LPTStr)]

  9

public
String lpDesktop;

10
            [MarshalAs(UnmanagedType.LPTStr)]

11

public
String lpTitle;

12

public
UInt32 dwX;

13

public
UInt32 dwY;

14

public
UInt32 dwXSize;

15

public
UInt32 dwYSize;

16

public
UInt32 dwXCountChars;

17

public
UInt32 dwYCountChars;

18

public
UInt32 dwFillAttribute;

19

public
UInt32 dwFlags;

20

public
Int16 wShowWindow;

21

public
Int16 cbReserved2;

22

public
IntPtr lpReserved2;

23

public
HandleRef hStdInput;

24

public
HandleRef hStdOutput;

25

public
HandleRef hStdError;

26
        }

27

28

const

int
NORMAL_PRIORITY_CLASS
=

0x00000020
;

29

30

struct
PROCESS_INFORMATION

31
        {

32

public
HandleRef hProcess;

33

public
HandleRef hThread;

34

public
UInt32 dwProcessId;

35

public
UInt32 dwThreadId;

36
        }

37

38

struct
SECURITY_ATTRIBUTES

39
        {

40

public
UInt32 nLength;

41

public
IntPtr lpSecurityDescriptor;

42

public
Boolean bInheritHandle;

43
        }

44

45
        [DllImport(
“
advapi32.dll
“
, CharSet
=
CharSet.Unicode)]

46

static

extern
Boolean CreateProcessAsUser(

47
        IntPtr hToken,

48
        String lpApplicationName,

49
        String lpCommandLine,

50
        IntPtr lpProcessAttributes,

51
        IntPtr lpThreadAttributes,

52
        Boolean bInheritHandles,

53
        UInt32 dwCreationFlags,

54
        IntPtr lpEnvironment,

55
        String lpCurrentDirectory,

56

ref
STARTUPINFO lpStartupInfo,

57

out
PROCESS_INFORMATION lpProcessInformation);

58

59
        [DllImport(
“
advapi32.dll
“
, CharSet
=
CharSet.Unicode)]

60

static

extern
Boolean LogonUser(

61
        String lpszUsername,

62
        String lpszDomain,

63
        String lpszPassword,

64
        Int32 dwLogonType,

65
        Int32 dwLogonProvider,

66

ref
IntPtr phToken

67
        );

68

const

int
LOGON32_LOGON_INTERACTIVE
=

2
;

69

70

public

void
Execute(
string
File)

71
        {

72

try

73
            {

74

//
unsafe

75
                {

76
                    PROCESS_INFORMATION pi
=

new
PROCESS_INFORMATION();

77

78
                    STARTUPINFO si
=

new
STARTUPINFO();

79
                    si.cb
=
Marshal.SizeOf(si);

80
                    si.lpDesktop
=

“
winsta0\\default
“
;

81

82
                    IntPtr hToken
=

new
IntPtr(
0
);

83

if
(LogonUser(
“
auser
“
,
“
mydomain
“
,
“
Passw0rd!
“
,

84
                        LOGON32_LOGON_INTERACTIVE,
0
,
ref
hToken))

85
                    {

86
                        Boolean bResult
=
CreateProcessAsUser(

87
                            hToken,

88
                            File,
//
file to execute

89

null
,
//
command line

90
                            IntPtr.Zero,
//
pointer to process SECURITY_ATTRIBUTES

91
                            IntPtr.Zero,
//
pointer to thread SECURITY_ATTRIBUTES

92

false
,
//
handles are not inheritable

93

0
,
//
creation flags

94
                            IntPtr.Zero,
//
pointer to new environment block

95

null
,
//
name of current directory

96

ref
si,
//
pointer to STARTUPINFO structure

97

out
pi
//
receives information about new process

98
                            );

99

100

if
(bResult)

101
                        {

102
                        }

103
                    }

104
                }

105
            }

106

catch
(Exception e)

107
            {

108
            }

109
        }

发布者：全栈程序员-站长，转载请注明出处：https://javaforall.net/111073.html原文链接：https://javaforall.net