CreateProcessAsUser - 错误1305

Question

我有服务，我需要使用此服务的当前用户priveleges运行gui应用程序。这是我的代码，它总是返回带有1305 CreateProcessAsUser功能的GetLastError。我如何解决它或可能是我的代码是不对的，你可以建议我一些有用的东西。 THX。

void ConnectionManager::LaunchDialer ()
{
    HANDLE currentToken;
    HANDLE primaryToken;

    int dwSessionId = 0;
    PHANDLE hUserToken = 0;
    PHANDLE hTokenDup = 0;

    PWTS_SESSION_INFO pSessionInfo = 0;
    DWORD dwCount = 0;

    // Get the list of all terminal sessions
    WTSEnumerateSessions (WTS_CURRENT_SERVER_HANDLE, 0, 1,
            &pSessionInfo, &dwCount);

    int dataSize = sizeof (WTS_SESSION_INFO);

    // look over obtained list in search of the active session
    for (DWORD i = 0; i < dwCount; ++i)
    {
        WTS_SESSION_INFO si = pSessionInfo [i];
        if (WTSActive == si.State)
        {
            // If the current session is active – store its ID
            dwSessionId = si.SessionId;
            break;
        }
    }

    WTSFreeMemory (pSessionInfo);

    // Get token of the logged in user by the active session ID
    BOOL bRet = WTSQueryUserToken (dwSessionId, &currentToken);
    if (!bRet)
    {
        ModemDetectorService::instance ()->logMessage (QString ("WTSQueryUserToken: %1")
                .arg (GetLastError ()));
        return;
    }

    bRet = DuplicateTokenEx (currentToken,
             TOKEN_ASSIGN_PRIMARY | TOKEN_ALL_ACCESS,
             0,
             SecurityImpersonation,
             TokenPrimary,
             &primaryToken);
    if (!bRet)
    {
        ModemDetectorService::instance ()->logMessage (QString ("DuplicateTokenEx: %1")
                    .arg (GetLastError ()));
        return;
    }

    if (!primaryToken)
    {
        ModemDetectorService::instance ()->logMessage ("Invalid user token");
        return;
    }

    STARTUPINFO StartupInfo;
    PROCESS_INFORMATION processInfo;
    ZeroMemory(&StartupInfo, sizeof(STARTUPINFO));
    StartupInfo.cb= sizeof(STARTUPINFO);
    StartupInfo.lpDesktop = TEXT("winsta0\\default");

    SECURITY_ATTRIBUTES Security1;
    SECURITY_ATTRIBUTES Security2;

    QSettings settings ("HKEY_LOCAL_MACHINE\\Software\\Olive\\OliveDialer",
                QSettings::NativeFormat);
    const QString path = QDir::toNativeSeparators (settings.value ("InstallationDirectory").toString ());
    QByteArray command = ("\"" + path + "\\" +
            ApplicationInfo::Olive::ShortApplicationName + ".exe" + "\"").toUtf8 ();

    void* lpEnvironment = NULL;
    // Get all necessary environment variables of logged in user
    // to pass them to the process
    BOOL resultEnv = CreateEnvironmentBlock (&lpEnvironment,
            primaryToken,
            FALSE);
    if (!resultEnv)
    {
        long nError = GetLastError ();
        ModemDetectorService::instance ()->logMessage (QString ("CreateEnvironmentBlock failed with: %1")
                .arg (nError));
    }

    // Start the process on behalf of the current user
    BOOL result = CreateProcessAsUser (primaryToken, 0,
            (LPSTR)(command.data ()),
            &Security1,
            &Security2,
            FALSE,
            NORMAL_PRIORITY_CLASS | CREATE_UNICODE_ENVIRONMENT,
            lpEnvironment,
            NULL,
            &StartupInfo,
            &processInfo);
    if (!result)
    {
        DWORD errorCode = GetLastError ();
        ModemDetectorService::instance ()->logMessage (QString ("Application start failed: %1 %2")
                .arg (errorCode)
                .arg (command.data ()));
    }
    else
        ModemDetectorService::instance ()->logMessage ("Application started successfully");
    DestroyEnvironmentBlock (lpEnvironment);
    CloseHandle (primaryToken);
}

Answer 1

错误1305是ERROR_UNKNOWN_REVISION（“修订级别未知”），通常是指安全对象。实际上，您传递了两个从未初始化的SECURITY_ATTRIBUTES结构（Security1和Security2）。

您需要通过NULL而不是&Security1和&Security2，或正确初始化结构。

Answer 2

尝试将lpCurrentDirectory设置为类似C：\ Windows

的内容

或使用LoadUserProfile

加载用户个人资料