private static void RemoveDesktopPermission(string userName) { if (Environment.UserInteractive == false) { var desktopPermissionManager = new DesktopPermissionManager(userName); desktopPermissionManager.RemoveDesktopPermission(); } }
static void Main(string[] args) { try { permissionManager.AddDesktopPermission(); using (var jobObject = new JobObject("StartProcessAsUserJob")) { jobObject.KillProcessesOnJobClose = true; RunProcs: for (ushort i = 0; i < 1; ++i) { try { var p = DoCreateProcessAsUser(); // var p = DoCreateProcessWithLogon(); // jobObject.AddProcess(p.hProcess); } catch (Win32Exception ex) { Console.Error.WriteLine("ERROR: '{0}' Error code: '{1}' Native error code: '{2}'", ex.Message, ex.ErrorCode, ex.NativeErrorCode); } catch (Exception ex) { Console.Error.WriteLine("ERROR: '{0}'", ex.Message); } } Console.WriteLine("Type 'again' to create again, hit enter to exit..."); string cmd = Console.ReadLine().Trim().ToLowerInvariant(); if (cmd == "again") { goto RunProcs; } } } finally { permissionManager.RemoveDesktopPermission(); } }
public async Task WhenCredentialsGiven_LoadsUserEnvironment() { var desktopPermissionManager = new DesktopPermissionManager(); LocalPrincipalManager manager = new LocalPrincipalManager(desktopPermissionManager, "IIS_IUSRS"); string userName = "******"; if (manager.FindUser(userName) != null) { manager.DeleteUser(userName); } var user = manager.CreateUser(userName); desktopPermissionManager.AddDesktopPermission(userName); try { var si = CreateRunSpec("cmd.exe", new[] { "/C", "set USERNAME" }); si.Credentials = user; si.BufferedInputOutput = true; si.WorkingDirectory = Environment.SystemDirectory; using (var p = Runner.Run(si)) { WaitForGoodExit(p, 1000); var output = await p.StandardOutput.ReadToEndAsync(); string expectedUserName = string.Format("USERNAME={0}", user.UserName); Assert.Contains(expectedUserName, output); } } finally { desktopPermissionManager.RemoveDesktopPermission(userName); manager.DeleteUser(userName); } }
private void ServiceMain() { const string testFile = @"C:\tmp\test-it.ps1"; File.Delete(testFile); File.WriteAllText(testFile, testPowershellScript); var permissionManager = new DesktopPermissionManager(userName); var startupInfo = new NativeMethods.StartupInfo(); string lpApplicationName = @"C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe"; var cmdLine = new StringBuilder(1024); cmdLine.AppendFormat(@" -InputFormat None -NoLogo -NoProfile -NonInteractive -File {0}", testFile); permissionManager.AddDesktopPermission(); using (var jobObject = new JobObject("StartProcessServiceJobObject")) { jobObject.KillProcessesOnJobClose = true; while (!ct.IsCancellationRequested) { try { log.Debug("Executing command: '{0}'", cmdLine); // Now create the process as the user NativeMethods.ProcessInformation pi; var saProcessAttributes = new NativeMethods.SecurityAttributes(); var saThreadAttributes = new NativeMethods.SecurityAttributes(); var createProcessFlags = NativeMethods.CreateProcessFlags.CREATE_NO_WINDOW | NativeMethods.CreateProcessFlags.CREATE_UNICODE_ENVIRONMENT; IntPtr primaryToken = Utils.LogonAndGetPrimaryToken(userName, password); if (NativeMethods.CreateProcessAsUser(primaryToken, lpApplicationName, cmdLine, saProcessAttributes, saThreadAttributes, false, createProcessFlags, IntPtr.Zero, workingDir, startupInfo, out pi)) { log.Debug("created process: '{0}' pid: '{1}'", cmdLine.ToString(), pi.dwProcessId); jobObject.AddProcess(pi.hProcess); log.Debug("job object has '{0}' processes in it.", jobObject.GetJobProcesses().Count()); NativeMethods.CloseHandle(pi.hProcess); NativeMethods.CloseHandle(pi.hThread); } else { int err = Marshal.GetLastWin32Error(); log.Error("Error '{0}' creating process.", err); } } catch (Exception ex) { log.ErrorException("Exception creating process.", ex); } finally { Thread.Sleep(TimeSpan.FromSeconds(10)); } } } permissionManager.RemoveDesktopPermission(); }