Win7中普通管理员权限的进程如何创建受限制的进程，该进程可以接受Explorer进程的拖拽
最近在工作中遇到在win7环境下管理员权限进程创建的进程无法支持文件拖拽的问题，关于这个问题困恼了好长时间，发现网上关于这个问题文章较少。终于找到一篇整理代码如下。1 //
2 // FUNCTION: CreateLowIntegrityProcess(PCWSTR)
3 //
4 // PURPOSE: The function launches an application at low integrity level.
5 //
6 // PARAMETERS:
7 // * pszCommandLine - The command line to be executed. The maximum length
8 // of this string is 32K characters. This parameter cannot be a pointer
9 // to read-only memory (such as a const variable or a literal string).
10 // If this parameter is a constant string, the function may cause an
11 // access violation.
12 //
13 // RETURN VALUE: If the function succeeds, the return value is TRUE. If the
14 // function fails, the return value is zero. To get extended error
15 // information, call GetLastError.
16 //
17 // COMMENT:
18 // To start a low-integrity process,
19 // 1) Duplicate the handle of the current process, which is at medium
20 // integrity level.
21 // 2) Use SetTokenInformation to set the integrity level in the access
22 // token to Low.
23 // 3) Use CreateProcessAsUser to create a new process using the handle to
24 // the low integrity access token.
25 //
26 BOOL CreateLowIntegrityProcess(LPCTSTR pszApplicationName)
27 {
28 DWORD dwError = ERROR_SUCCESS;
29 HANDLE hToken = NULL;
30 HANDLE hNewToken = NULL;
31 SID_IDENTIFIER_AUTHORITY MLAuthority = SECURITY_MANDATORY_LABEL_AUTHORITY;
32 PSID pIntegritySid = NULL;
33 TOKEN_MANDATORY_LABEL tml = { 0 };
34 STARTUPINFO si = { sizeof(si) };
35 PROCESS_INFORMATION pi = { 0 };
36
37 // Open the primary access token of the process.
38 if (!OpenProcessToken(GetCurrentProcess(), TOKEN_DUPLICATE | TOKEN_QUERY |
39 TOKEN_ADJUST_DEFAULT | TOKEN_ASSIGN_PRIMARY, &hToken))
40 {
41 dwError = GetLastError();
42 goto Cleanup;
43 }
44
45 // Duplicate the primary token of the current process.
46 if (!DuplicateTokenEx(hToken, 0, NULL, SecurityImpersonation,
47 TokenPrimary, &hNewToken))
48 {
49 dwError = GetLastError();
50 goto Cleanup;
51 }
52
53 // Create the low integrity SID.
54 if (!AllocateAndInitializeSid(&MLAuthority, 1, SECURITY_MANDATORY_LOW_RID,
55 0, 0, 0, 0, 0, 0, 0, &pIntegritySid))
56 {
57 dwError = GetLastError();
58 goto Cleanup;
59 }
60
61 tml.Label.Attributes = SE_GROUP_INTEGRITY;
62 tml.Label.Sid = pIntegritySid;
63
64 // Set the integrity level in the access token to low.
65 if (!SetTokenInformation(hNewToken, TokenIntegrityLevel, &tml,
66 (sizeof(tml) + GetLengthSid(pIntegritySid))))
67 {
68 dwError = GetLastError();
69 goto Cleanup;
70 }
71
72 // Create the new process at the Low integrity level.
73 if (!CreateProcessAsUser(hNewToken, pszApplicationName, NULL, NULL, NULL,
74 FALSE, 0, NULL, NULL, &si, &pi))
75 {
76 dwError = GetLastError();
77 goto Cleanup;
78 }
79
80 Cleanup:
81 // Centralized cleanup for all allocated resources.
82 if (hToken)
83 {
84 CloseHandle(hToken);
85 hToken = NULL;
86 }
87 if (hNewToken)
88 {
89 CloseHandle(hNewToken);
90 hNewToken = NULL;
91 }
92 if (pIntegritySid)
93 {
94 FreeSid(pIntegritySid);
95 pIntegritySid = NULL;
96 }
97 if (pi.hProcess)
98 {
99 CloseHandle(pi.hProcess);
100 pi.hProcess = NULL;
101 }
102 if (pi.hThread)
103 {
104 CloseHandle(pi.hThread);
105 pi.hThread = NULL;
106 }
107
108 if (ERROR_SUCCESS != dwError)
109 {
110 // Make sure that the error code is set for failure.
111 SetLastError(dwError);
112 return FALSE;
113 }
114 else
115 {
116 return TRUE;
117 }
118 }
页:
[1]