• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 4190
  • Last Modified:

CreateProcess for Currently Logged On User from Service running System Account?

The problem I am having is this:

There is a service that runs using the Local System Account, it needs to run in this context to prevent users from closing it.  This service monitors an application that MUST always remain open, this application has to run as the currently logged on user.  When I use CreateProcess from within the service to restart the application if it has been terminated by the user, CreateProcess runs the application within the Local System Account, this creates a problem since the application must run in the users account for reasons I wont go into here.

Question:

How do I use CreateProcess to launch an instance of specified application from the Currently Logged On users account.  I do not want to enter username and password information by using LogOnUser because the currently logged on user is already authenticated I should not have to do this, also this is not an option since the user does not interact with this program.  I believe what I will need to use is ImpersonateLoggedOnUser, and obtaining the current users process handle by using OpenProcessToken but after messing with this for nearly 2 weeks now I cannot figure out how to get this to work...  Any help would be appreciated!!
0
Magadass
Asked:
Magadass
  • 3
  • 3
1 Solution
 
jkrCommented:
>>I believe what I will need to use is ImpersonateLoggedOnUser, and obtaining the
>>current users process handle by using OpenProcessToken

Indeed. E.g. like using

ImpersonateInteractiveUser()
{
   HANDLE hToken = NULL;                
   HANDLE hProcess = NULL;

   DWORD processID = GetExplorerProcessID();
   if( processID)
    {
    hProcess =
         OpenProcess(  
               PROCESS_ALL_ACCESS,
         TRUE,
          processID );

    if( hProcess)
        {
        if( OpenProcessToken(
                    hProcess,
              TOKEN_EXECUTE |
             TOKEN_READ |
             TOKEN_QUERY |
             TOKEN_ASSIGN_PRIMARY |
             TOKEN_QUERY_SOURCE |
             TOKEN_WRITE |
             TOKEN_DUPLICATE,
             &hToken))
        {
         ImpersonateLoggedOnUser( hToken);
          CloseHandle( hToken );
        }
        CloseHandle( hProcess );
    }
   }
}

Then, call 'CreateProcess()' to launch any application in the context of the logged on user and call 'RevertToSelf()'

BTW, 'GetExplorerProcessID();' can be implemented using http://support.microsoft.com/default.aspx?scid=http://support.microsoft.com:80/support/kb/articles/Q175/0/30.ASP&NoWebContent=1 ("HOWTO: Enumerate Applications Using Win32 APIs")
0
 
jkrCommented:
0
 
MagadassAuthor Commented:
Is this sufficient jkr?

DWORD GetExplorerProcessID()
{
      HANDLE hSnapshot;
      PROCESSENTRY32 pe32;
      ZeroMemory(&pe32,sizeof(pe32));
      DWORD temp;

    hSnapshot = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS,NULL);
      
      pe32.dwSize = sizeof(PROCESSENTRY32);

      if(Process32First(hSnapshot,&pe32))
      {
            do
            {
                  if(!strcmp(pe32.szExeFile,"explorer.exe"))
                  {
                        MessageBox(0,pe32.szExeFile,"test",0);
                        temp = pe32.th32ProcessID;
                        break;
                  }

            }while(Process32Next(hSnapshot,&pe32));
      }
return temp;
}
0
Get expert help—faster!

Need expert help—fast? Use the Help Bell for personalized assistance getting answers to your important questions.

 
MagadassAuthor Commented:
Wow that worked great man...  Very awesome, thanks for your help you are da man!!!
0
 
MagadassAuthor Commented:
Wow that worked great man...  Very awesome, thanks for your help you are da man!!!
0
 
jkrCommented:
You're welcome :o)

Sorry for the delay, but my notifs don't seem to be working...
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Introducing Cloud Class® training courses

Tech changes fast. You can learn faster. That’s why we’re bringing professional training courses to Experts Exchange. With a subscription, you can access all the Cloud Class® courses to expand your education, prep for certifications, and get top-notch instructions.

  • 3
  • 3
Tackle projects and never again get stuck behind a technical roadblock.
Join Now