在服务中用管理员权限创建一个可弹出UI的进程 (转载)

Posted 2020-10-02 车臣

转载:http://blog.csdn.net/woshinia/article/details/7850295

转载:http://blog.csdn.net/hurryboylqs/article/details/53004970

转载:http://blog.csdn.net/fakine/article/details/8537763

    HANDLE hToken = NULL;
    HANDLE hTokenDup = NULL;
    do 
    {
        if(OpenProcessToken(GetCurrentProcess(),TOKEN_ALL_ACCESS,&hToken))
        {
            if(DuplicateTokenEx(hToken, TOKEN_ALL_ACCESS,NULL, SecurityIdentification, TokenPrimary, &hTokenDup))
            {
                //得到当前用户回话ID
                DWORD dwSessionId = WTSGetActiveConsoleSessionId();
                if(!SetTokenInformation(hTokenDup,TokenSessionId,&dwSessionId,sizeof(DWORD)))
                {
                    PrintfDbgStr(TEXT("SetTokenInformation error ！error code：%d\n"),GetLastError());
                    bSuccess = FALSE;
                    break;
                }

                STARTUPINFO si;
                PROCESS_INFORMATION pi;
                ZeroMemory(&si,sizeof(STARTUPINFO));
                ZeroMemory(&pi,sizeof(PROCESS_INFORMATION));
                si.cb = sizeof(STARTUPINFO);
                si.lpDesktop = _T("WinSta0\\Default");
                si.wShowWindow = SW_SHOW;
                si.dwFlags     =   STARTF_USESHOWWINDOW /*|STARTF_USESTDHANDLES*/;

                LPVOID pEnv = NULL;
                DWORD dwCreationFlag = NORMAL_PRIORITY_CLASS | CREATE_NEW_CONSOLE | CREATE_UNICODE_ENVIRONMENT;
                if(!CreateEnvironmentBlock(&pEnv,hTokenDup,FALSE))
                {
                    PrintfDbgStr(TEXT("CreateEnvironmentBlock error ！error code：%d\n"),GetLastError());
                    bSuccess = FALSE;
                    break;
                }

                if(!CreateProcessAsUser(hTokenDup,NULL,pBuf,NULL,NULL,FALSE,dwCreationFlag,pEnv,NULL,&si,&pi))
                {
                    PrintfDbgStr(TEXT("CreateProcessAsUser error ！error code：%d\n"),GetLastError());
                    bSuccess = FALSE;
                    break;
                }

                if(pEnv)
                {
                    DestroyEnvironmentBlock(pEnv);
                }
            }
            else
            {
                PrintfDbgStr(TEXT("DuplicateTokenEx error ！error code：%d\n"),GetLastError());
                bSuccess = FALSE;
                break;
            }

                
        }
        else
        {
            PrintfDbgStr(TEXT("cannot get administror！error code：%d\n"),GetLastError());
            bSuccess = FALSE;
            break;
        }
    }while(0);

    if(hTokenDup != NULL && hTokenDup != INVALID_HANDLE_VALUE)
        CloseHandle(hTokenDup);
    if(hToken != NULL && hToken != INVALID_HANDLE_VALUE)
        CloseHandle(hToken);