【转】windows服务程序提升权限

 1 void ImpersonateConsoleSession(DWORD dwSessionId)
 2 {
 3     PROCESSENTRY32 procEntry;
 4     HANDLE hSnap = CreateToolhelp32Snapshot(TH32CS_SNAPPROCESS, 0);
 5     procEntry.dwSize = sizeof(PROCESSENTRY32);
 6     Process32First(hSnap, &procEntry);
 7     DWORD winlogonPid = 0;
 8     do {
 9         if (!wcscmp(procEntry.szExeFile, L"winlogon.exe"))
10         {
11             DWORD winlogonSessId = 0;
12             if (ProcessIdToSessionId(procEntry.th32ProcessID, &winlogonSessId) && winlogonSessId == dwSessionId)
13             {
14                 winlogonPid = procEntry.th32ProcessID;
15                 break;
16             }
17         }
18     } while (Process32Next(hSnap, &procEntry) != 0);
19     CloseHandle(hSnap);
20     if (winlogonPid)
21     {
22         HANDLE hProcess = OpenProcess(MAXIMUM_ALLOWED, 0, winlogonPid);
23         HANDLE hPToken;
24         OpenProcessToken(hProcess, TOKEN_QUERY | TOKEN_DUPLICATE, &hPToken);
25         CloseHandle(hProcess);
26         HANDLE hUserTokenDup;
27         DuplicateTokenEx(hPToken, MAXIMUM_ALLOWED, 0, SecurityIdentification, TokenPrimary, &hUserTokenDup);
28         CloseHandle(hPToken);
29         ImpersonateLoggedOnUser(hUserTokenDup);
30         CloseHandle(hUserTokenDup);
31     }
32 }

ImpersonateConsoleSession(WTSGetActiveConsoleSessionId());
HANDLE hdevice = CreateFile(..., SECURITY_SQOS_PRESENT | SECURITY_IDENTIFICATION, 0);
RevertToSelf();


转自：https://oomake.com/question/1063645