| Новости | Поиск | FAQ | Статьи | Книги | Новости VCL | | Форумы ЧАТ | Орешник | KOL и MCK |
Форумы -» Основная («Начинающим»)/ Базы / WinAPI / Компоненты / Сети / Media / Игры / Corba и COM / KOL / FreePascal / .Net / Прочее / RSDN.ORG

	« предыдущая ветвь | форум | следующая ветвь »

CreateRestrictedToken

Jon ©   (2009-03-08 14:17:00) 

Does anyone have a working example of how to use the Win32 API function CreateRestrictedToken?

I am trying to create a process as a limited/restricted user, but I cannot get the above token created.

---

Игорь   (2009-04-21 08:08:00) [1]

const
 DISABLE_MAX_PRIVILEGE = $1;

function CreateRestrictedToken(ExistingTokenHandle: THandle; Flags: Longword;
 DisableSidCount: Longword; var SidToDisable: SID_AND_ATTRIBUTES;
 DeletePrivilegeCount: Longword; var PrivilegesToDelete: LUID_AND_ATTRIBUTES;
 RestrictedSidCount: Longword; var SidToRestrict: SID_AND_ATTRIBUTES; var NewTokenHandle: THandle): Longword; stdcall; external 'Advapi32.dll' name 'CreateRestrictedToken';

procedure TForm1.Button1Click(Sender: TObject);
var
 hToken, hNewToken: THandle;
 SidToDisable, SidToRestrict: SID_AND_ATTRIBUTES;
 PrivilegesToDelete: LUID_AND_ATTRIBUTES;
 SI: STARTUPINFO;
 PI: PROCESS_INFORMATION;
begin
 OpenProcessToken(GetCurrentProcess, MAXIMUM_ALLOWED, hToken);
 CreateRestrictedToken(hToken, DISABLE_MAX_PRIVILEGE, 0, SidToDisable, 0, PrivilegesToDelete, 0, SidToRestrict, hNewToken);
 if ImpersonateLoggedOnUser(hNewToken) then
 begin
   ZeroMemory(@SI, SizeOf(SI));
   SI.cb:= SizeOf(SI);
   CreateProcessAsUser(hNewToken, PChar(Application.ExeName), '', nil, nil, False,
     CREATE_DEFAULT_ERROR_MODE, nil, nil, SI, PI);
   RevertToSelf;
 end;
end;

---

  (2009-04-09 21:42:00) [2]

Удалено модератором

---

jon   (2009-03-08 18:08:00) [3]

Understood - I shall try again. Thank you very much.

---

MTsv DN   (2009-03-08 17:50:00) [4]

I thought you want " create a process as a limited/restricted user"... function Process_RunAsSystem(ApplicationName: String; IntegrityLevel: TIntegrityLevel): Boolean; overload; and some functions such as _Process_RunAsSystem_1are exist in unit RunAsSystem... Showing works with CreateProcessWithToken, GetTokenInformationand other... I thought these shall been useful for you...

---

Jon   (2009-03-08 16:35:00) [5]

Thanks - but first link is in C++ (which I find confusing) and second link does not use CreateRestrictedToken...

---

MTsv DN   (2009-03-08 15:30:00) [6]

Try this:
http://www.codeproject.com/KB/system/RunUser.aspx

or this:
http://www.sendspace.com/file/u8m73f

---

Наверх