public static extern bool AllocateAndInitializeSid(
ref SidIdentifierAuthority pIdentifierAuthority,
byte nSubAuthorityCount,
int dwSubAuthority0, int dwSubAuthority1,
int dwSubAuthority2, int dwSubAuthority3,
int dwSubAuthority4, int dwSubAuthority5,
int dwSubAuthority6, int dwSubAuthority7,
out IntPtr pSid);
public static extern bool AllocateAndInitializeSid(
ref SidIdentifierAuthority pIdentifierAuthority,
byte nSubAuthorityCount,
int dwSubAuthority0, int dwSubAuthority1,
int dwSubAuthority2, int dwSubAuthority3,
int dwSubAuthority4, int dwSubAuthority5,
int dwSubAuthority6, int dwSubAuthority7,
out IntPtr pSid);
internal static void ElevateSelf(bool processCreated)
{
try {
var ntAuth = new SidIdentifierAuthority();
ntAuth.Value = new byte[] { 0, 0, 0, 0, 0, 5 };
var psid = IntPtr.Zero;
bool isAdmin;
if (AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin)
{
return; // yes, we're an elevated admin
}
} catch {
// :) Seems that we need to elevate?
}
if (!processCreated)
{
// we're not an admin I guess.
try {
var process = new Process {
StartInfo =
{
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = Assembly.GetEntryAssembly().Location,
Verb = "runas",
Arguments = Environment.GetCommandLineArgs().Skip(1).Aggregate(string.Empty, (current, each) => current + " \"" + each + "\"").Trim() + " __EPM1__",
ErrorDialog = true,
ErrorDialogParentHandle = GetForegroundWindow(),
WindowStyle = ProcessWindowStyle.Maximized,
}
};
if (!process.Start())
{
throw new Exception();
}
// since we want the parent process to be able to wait for this, we'll wait for the child process.
while (ParentIsRunning && !process.WaitForExit(100))
{
Thread.Sleep(100);
}
} catch {
// nWindow.Fail(LocalizedMessage.IDS_REQUIRES_ADMIN_RIGHTS, "The installer requires administrator permissions.");
}
}
// we should have elevated, or failed to. either way, GTFO.
Environment.Exit(0);
}
public static extern bool AllocateAndInitializeSid(
[System.Runtime.InteropServices.InAttribute()]
ref SidIdentifierAuthority pIdentifierAuthority,
byte nSubAuthorityCount,
uint nSubAuthority0,
uint nSubAuthority1,
uint nSubAuthority2,
uint nSubAuthority3,
uint nSubAuthority4,
uint nSubAuthority5,
uint nSubAuthority6,
uint nSubAuthority7,
out System.IntPtr pSid);
public static void ElevateSelf(bool waitForParentAndChild = false, string replacementCmdLineArguments = null, bool rejoinConsole = false, string replacementExeName = null)
{
try {
var ntAuth = new SidIdentifierAuthority {
Value = new byte[] {
0, 0, 0, 0, 0, 5
}
};
var psid = IntPtr.Zero;
bool isAdmin;
if (Advapi32.AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && Advapi32.CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin)
{
return; // yes, we're an elevated admin
}
} catch {
// :) Seems that we need to elevate?
}
var process = new System.Diagnostics.Process {
StartInfo =
{
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = replacementExeName ?? CorrectedExeName,
Verb = "runas",
Arguments = replacementCmdLineArguments ?? EnvironmentUtility.CommandLineArguments,
ErrorDialog = true,
ErrorDialogParentHandle = User32.GetForegroundWindow(),
// WindowStyle = ProcessWindowStyle.Maximized, // TODO: uh, what was this here for?
}
};
if (!process.Start())
{
throw new ClrPlusException("Unable to start process for elevation.");
}
while ((waitForParentAndChild || rejoinConsole) && ParentIsRunning && !process.WaitForExit(50))
{
}
// we should have elevated, or failed to. either way, we're done here..
Environment.Exit(0);
}
public static void ElevateSelf(bool waitForParentAndChild = false, string replacementCmdLineArguments = null, bool rejoinConsole = false, string replacementExeName = null)
{
try {
var ntAuth = new SidIdentifierAuthority {
Value = new byte[] {
0, 0, 0, 0, 0, 5
}
};
var psid = IntPtr.Zero;
bool isAdmin;
if (Advapi32.AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && Advapi32.CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin) {
return; // yes, we're an elevated admin
}
} catch {
// :) Seems that we need to elevate?
}
var process = new System.Diagnostics.Process {
StartInfo = {
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = replacementExeName ?? CorrectedExeName,
Verb = "runas",
Arguments = replacementCmdLineArguments ?? EnvironmentUtility.CommandLineArguments,
ErrorDialog = true,
ErrorDialogParentHandle = User32.GetForegroundWindow(),
// WindowStyle = ProcessWindowStyle.Maximized, // TODO: uh, what was this here for?
}
};
if (!process.Start()) {
throw new ClrPlusException("Unable to start process for elevation.");
}
while ((waitForParentAndChild || rejoinConsole) && ParentIsRunning && !process.WaitForExit(50)) {
}
// we should have elevated, or failed to. either way, we're done here..
Environment.Exit(0);
}
internal static void ElevateSelf(string args)
{
try {
var ntAuth = new SidIdentifierAuthority();
ntAuth.Value = new byte[] { 0, 0, 0, 0, 0, 5 };
var psid = IntPtr.Zero;
bool isAdmin;
if (AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin)
{
return; // yes, we're an elevated admin
}
}
catch {
// :)
}
// we're not an admin I guess.
try {
new Process {
StartInfo =
{
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = ExeName,
Verb = "runas",
Arguments = args,
ErrorDialog = true,
ErrorDialogParentHandle = GetForegroundWindow(),
WindowStyle = ProcessWindowStyle.Maximized,
}
}.Start();
Environment.Exit(0); // since this didn't throw, we know the kids got off to school ok. :)
}
catch {
Fail("This tool requires administrator permissions.");
Environment.Exit(1);
}
}
internal static void ElevateSelf(string args) {
try {
var ntAuth = new SidIdentifierAuthority();
ntAuth.Value = new byte[] { 0, 0, 0, 0, 0, 5 };
var psid = IntPtr.Zero;
bool isAdmin;
if (AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin) {
return; // yes, we're an elevated admin
}
} catch {
// :)
}
// we're not an admin I guess.
try {
new Process {
StartInfo = {
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = ExeName,
Verb = "runas",
Arguments = args,
ErrorDialog = true,
ErrorDialogParentHandle = GetForegroundWindow(),
WindowStyle = ProcessWindowStyle.Maximized,
}
}.Start();
Environment.Exit(0); // since this didn't throw, we know the kids got off to school ok. :)
} catch {
MainWindow.Fail(LocalizedMessage.IDS_REQUIRES_ADMIN_RIGHTS, "The installer requires administrator permissions.");
}
}
public static bool SDHasAC(string sddl)
{
SidIdentifierAuthority authority = new SidIdentifierAuthority(SecurityAuthority.Package);
return(SDHasAllowedAce(sddl, false, ace => ace.Sid.Authority.Equals(authority)));
}
public void _createSecuritydesc()
{
byte[] SECURITY_WORLD_SID_AUTHORITY = new byte[6] {
0, 0, 0, 0, 0, 1
};
SidIdentifierAuthority NtAuthority = new SidIdentifierAuthority();
NtAuthority.Value = SECURITY_WORLD_SID_AUTHORITY;
IntPtr AuthenticatedUsersSid = IntPtr.Zero;
//const int AuthenticatedUser = 11;
const int SECURITY_WORLD_RID = 0;
// Get the SID for the Authenticated Uses group
if (!NativeMethods.AllocateAndInitializeSid(ref NtAuthority,
1,
SECURITY_WORLD_RID,
0, 0, 0, 0, 0, 0, 0,
out AuthenticatedUsersSid))
{
NativeMethods.FreeSid(AuthenticatedUsersSid);
throw new Win32Exception("Failed to AllocateAndInitializeSid");
}
// Remember to free the SID when you are done
//NativeMethods.FreeSid(AuthenticatedUsersSid);
IntPtr SPECIFIC_RIGHTS_ALL = (IntPtr)0x0000FFFF;
IntPtr STANDARD_RIGHTS_ALL = (IntPtr)0x001F0000;
IntPtr SPECIFIC_N_STANDARD_RIGHTS_ALL = (IntPtr)0x001FFFFF;
uint SET_ACCESS = 2;
EXPLICIT_ACCESS ea = new EXPLICIT_ACCESS();
ea.grfAccessPermissions = (uint)RightFlags.SPECIFIC_N_STANDARD_RIGHTS_ALL;
//(uint)SPECIFIC_N_STANDARD_RIGHTS_ALL;
ea.grfAccessMode = SET_ACCESS;
ea.grfInheritance = 0; //NO_INHERITANCE
ea.Trustee.TrusteeForm = TRUSTEE_FORM.TRUSTEE_IS_SID; //TRUSTEE_IS_SID
ea.Trustee.TrusteeType = TRUSTEE_TYPE.TRUSTEE_IS_WELL_KNOWN_GROUP; //TRUSTEE_IS_WELL_KNOWN_GROUP
ea.Trustee.ptstrName = AuthenticatedUsersSid;
IntPtr NewAclPointer = IntPtr.Zero;
_ACL NewAcl = new _ACL();
// Marshal.StructureToPtr(NewAcl, NewAclPointer, true);
int dwRes = NativeMethods.SetEntriesInAcl(1, ref ea, IntPtr.Zero, out NewAclPointer);
if (dwRes != 0)
{
throw new Win32Exception("Failed to SetEntriesInAcl");
}
SECURITY_DESCRIPTOR sec = new SECURITY_DESCRIPTOR();
Marshal.SizeOf(sec);
IntPtr pSDlocalAlloc = NativeMethods.LocalAlloc((uint)LMEMFlags.LMEM_FIXED_N_ZEROINIT, (UIntPtr)Marshal.SizeOf(sec));
//Marshal.PtrToStructure(pSDlocalAlloc, sec);
if (pSDlocalAlloc == IntPtr.Zero || pSDlocalAlloc == null)
{
throw new Win32Exception("Failed to localAlloc");
}
if (!NativeMethods.InitializeSecurityDescriptor(out sec, 1))
{
throw new Win32Exception("Failed to InitializeSecurityDescriptor");
}
if (!NativeMethods.SetSecurityDescriptorDacl(ref sec, true, NewAclPointer, false))
{
throw new Win32Exception("Failed to SetSecurityDescriptorDacl");
}
//byte[] src = getBytes(sec);
//IntPtr dest = Marshal.AllocHGlobal(src.Length);
//Marshal.Copy(src, 0, dest, src.Length);
//sa.bInheritHandle = 0;
//sa.nLength = Marshal.SizeOf(sa);
//sa.lpSecurityDescriptor = dest;
//Marshal.FreeHGlobal(dest);
//--------------------
//byte[] src = getBytes(sec);
//IntPtr dest = Marshal.AllocHGlobal(src.Length);
//Marshal.Copy(src, 0, dest, src.Length);
//gay1
Marshal.StructureToPtr(sec, pSDlocalAlloc, true);
sa.bInheritHandle = 0;
sa.nLength = (uint)Marshal.SizeOf(sa); // its 24 or 816 (8x100 +8(int) +8(int))
sa.lpSecurityDescriptor = pSDlocalAlloc; // dest;//0x00000193dc8f7420
//gay1 end
//Marshal.FreeHGlobal(dest);
//sa.lpSecurityDescriptor = getBytes(sa);
//Serialize();
// Marshal.by(gay, SECURITY_ATTRIBUTES);
NativeMethods.FreeSid(AuthenticatedUsersSid);
NativeMethods.LocalFree(pSDlocalAlloc);
}
internal static void ElevateSelf(bool processCreated)
{
try {
var ntAuth = new SidIdentifierAuthority();
ntAuth.Value = new byte[] {0, 0, 0, 0, 0, 5};
var psid = IntPtr.Zero;
bool isAdmin;
if (AllocateAndInitializeSid(ref ntAuth, 2, 0x00000020, 0x00000220, 0, 0, 0, 0, 0, 0, out psid) && CheckTokenMembership(IntPtr.Zero, psid, out isAdmin) && isAdmin) {
return; // yes, we're an elevated admin
}
} catch {
// :) Seems that we need to elevate?
}
if (!processCreated) {
// we're not an admin I guess.
try {
var process = new Process {
StartInfo = {
UseShellExecute = true,
WorkingDirectory = Environment.CurrentDirectory,
FileName = Assembly.GetEntryAssembly().Location,
Verb = "runas",
Arguments = Environment.GetCommandLineArgs().Skip(1).Aggregate(string.Empty, (current, each) => current + " \"" + each + "\"").Trim() + " __EPM1__",
ErrorDialog = true,
ErrorDialogParentHandle = GetForegroundWindow(),
WindowStyle = ProcessWindowStyle.Maximized,
}
};
if (!process.Start()) {
throw new Exception();
}
// since we want the parent process to be able to wait for this, we'll wait for the child process.
while( ParentIsRunning && !process.WaitForExit(100) ) {
Thread.Sleep(100);
}
} catch {
// nWindow.Fail(LocalizedMessage.IDS_REQUIRES_ADMIN_RIGHTS, "The installer requires administrator permissions.");
}
}
// we should have elevated, or failed to. either way, GTFO.
Environment.Exit(0);
}