创建特定用户的进程

最新推荐文章于 2023-02-25 16:33:55 发布

darthas

最新推荐文章于 2023-02-25 16:33:55 发布

阅读量641

点赞数

分类专栏： Windows开发文章标签： null access token query class

Windows开发专栏收录该内容

5 篇文章 0 订阅

订阅专栏

用于创建特定用户的进程，比如在服务进程中创建基于当前用户的进程等等

BOOL GetTokenByName(HANDLE &hToken,LPTSTR lpName)
{
if(!lpName)
{
return FALSE;
}
HANDLE hProcessSnap = NULL;
BOOL bRet = FALSE;
PROCESSENTRY32 pe32 = {0};

hProcessSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
if (hProcessSnap == INVALID_HANDLE_VALUE)
return (FALSE);

pe32.dwSize = sizeof(PROCESSENTRY32);

if (Process32First(hProcessSnap, &pe32))
{
  do
  {
   if(!_tcscmp(_tcsupr(pe32.szExeFile),_tcsupr(lpName)))
   {
    HANDLE hProcess = OpenProcess(PROCESS_QUERY_INFORMATION,FALSE,pe32.th32ProcessID);
    bRet = OpenProcessToken(hProcess,TOKEN_ALL_ACCESS,&hToken);
    CloseHandle (hProcessSnap);
    return (bRet);
   }
  }
  while (Process32Next(hProcessSnap, &pe32));
  bRet = TRUE;
}
else
  bRet = FALSE;

CloseHandle (hProcessSnap);
return (bRet);
}

BOOL LaunchProcess(LPWSTR lpCmdLine)
{
if(!lpCmdLine)
{
return FALSE;
}
HANDLE hToken;
if(!GetTokenByName(hToken,L"EXPLORER.EXE"))
{
return FALSE;
}
STARTUPINFO si;
PROCESS_INFORMATION pi;

ZeroMemory(&si, sizeof(STARTUPINFO));
si.cb= sizeof(STARTUPINFO);
si.lpDesktop = TEXT("winsta0\\default");

BOOL bResult = CreateProcessAsUser(hToken,NULL,lpCmdLine,NULL,NULL,
FALSE,NORMAL_PRIORITY_CLASS,NULL,NULL,&si,&pi);
CloseHandle(hToken);
return bResult;
}