Want to protect your cyber security and still get fast solutions? Ask a secure question today.Go Premium

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 607
  • Last Modified:

Shutdown in NT

i am trying to programatically shut down the computer, in Windows NT, but i receive an "Access is denied" error on the call to InitiateSystemShutdown.  how can i gain this access?
(code snippet follows)

// shut down
iReturn = InitiateSystemShutdown (NULL,   // address of name of computer to shut down  
                                  NULL,   // address of message to display in dialog box
                                  0,      // seconds to display dialog box
                                  FALSE,  // force applications with unsave
                                  FALSE); // don't reboot flag
 
if (iReturn == FALSE) // if InitiateSystemShutdown call failed
    iError = GetLastError(); // iError = 5, which is "Access is denied"
0
jdaues
Asked:
jdaues
1 Solution
 
chensuCommented:
On Windows NT, the calling process must have the SE_SHUTDOWN_NAME privilege to shut down the system. The following is from the documentation.

Displaying the Shutdown Dialog Box
Windows NT only

The following example uses the InitiateSystemShutdown function to begin the system shutdown process on the computer on which is user is logged on. The application must first enable the SE_SHUTDOWN_NAME privilege.

HANDLE hToken;              // handle to process token
TOKEN_PRIVILEGES tkp;       // pointer to token structure
 
BOOL fResult;               // system shutdown flag
 
// Get the current process token handle so we can get shutdown
// privilege.
 
if (!OpenProcessToken(GetCurrentProcess(),
        TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken))
    ErrorHandler("OpenProcessToken failed.");
 
// Get the LUID for shutdown privilege.
 
LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME,
        &tkp.Privileges[0].Luid);
 
tkp.PrivilegeCount = 1;  // one privilege to set    
tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
 
// Get shutdown privilege for this process.
 
AdjustTokenPrivileges(hToken, FALSE, &tkp, 0,
    (PTOKEN_PRIVILEGES) NULL, 0);
 
// Cannot test the return value of AdjustTokenPrivileges.
 
if (GetLastError() != ERROR_SUCCESS)
    ErrorHandler("AdjustTokenPrivileges enable failed.");
 
// Display the shutdown dialog box and start the time-out countdown.
 
fResult = InitiateSystemShutdown(
    NULL,                                  // shut down local computer
    "Click on the main window and press \
     the Escape key to cancel shutdown.",  // message to user
    20,                                    // time-out period
    FALSE,                                 // ask user to close apps
    TRUE);                                 // reboot after shutdown
 
if (!fResult)
{
    ErrorHandler("InitiateSystemShutdown failed.");
}
 
// Disable shutdown privilege.
 
tkp.Privileges[0].Attributes = 0;
AdjustTokenPrivileges(hToken, FALSE, &tkp, 0,
        (PTOKEN_PRIVILEGES) NULL, 0);
 
if (GetLastError() != ERROR_SUCCESS)
{
    ErrorHandler("AdjustTokenPrivileges disable failed.");
}
 
If the AbortSystemShutdown function is executed in the time-out period specified by InitiateSystemShutdown, the system does not shut down. In this example, the user can prevent the system from shutting down by clicking on the application’s main window and pressing the esc key. The example processes the keystroke by calling AbortSystemShutdown.

HANDLE hToken;              // handle to process token
TOKEN_PRIVILEGES tkp;       // pointer to token structure
 
BOOL fResult;               // system shutdown flag
 
case WM_KEYDOWN:
 
    // Process only the Escape key.
 
    if (wParam != VK_ESCAPE)
    {
        break;
    }
 
    // Get the current process token handle  so we can get shutdown
    // privilege.
 
    if (!OpenProcessToken(GetCurrentProcess(),
            TOKEN_ADJUST_PRIVILEGES | TOKEN_QUERY, &hToken))
    {
        ErrorHandler("OpenProcessToken failed.");
    }
 
    // Get the LUID for shutdown privilege.
 
    LookupPrivilegeValue(NULL, SE_SHUTDOWN_NAME,
            &tkp.Privileges[0].Luid);
 
    tkp.PrivilegeCount = 1;  // one privilege to set    
    tkp.Privileges[0].Attributes = SE_PRIVILEGE_ENABLED;
 
    // Get shutdown privilege for this process.
 
    AdjustTokenPrivileges(hToken, FALSE, &tkp, 0,
        (PTOKEN_PRIVILEGES)NULL, 0);
 
    // Cannot test the return value of AdjustTokenPrivileges.
 
    if (GetLastError() != ERROR_SUCCESS)
    {
        ErrorHandler("AdjustTokenPrivileges enable failed.");
    }
 
    // Prevent the system from shutting down.
 
    fResult = AbortSystemShutdown(NULL);
 
    if (!fResult)
    {
        ErrorHandler("AbortSystemShutdown failed.");
    }
 
    // Disable shutdown privilege.
 
    tkp.Privileges[0].Attributes = 0;
    AdjustTokenPrivileges(hToken, FALSE, &tkp, 0,
        (PTOKEN_PRIVILEGES) NULL, 0);
 
    if (GetLastError() != ERROR_SUCCESS)
    {
        ErrorHandler("AdjustTokenPrivileges disable failed.");
    }
 
    break;
 

0
 
jdauesAuthor Commented:
i tried your suggestion and it worked perfectly!
thanks
0

Featured Post

Get your Conversational Ransomware Defense e‑book

This e-book gives you an insight into the ransomware threat and reviews the fundamentals of top-notch ransomware preparedness and recovery. To help you protect yourself and your organization. The initial infection may be inevitable, so the best protection is to be fully prepared.

Tackle projects and never again get stuck behind a technical roadblock.
Join Now