Get Handle Owner,...

Hi,

my application has sufficient privileges enabled
and i can open any process,thread,kernel/user-object
to query information from the objects. The Point is
that i want to find out, from who owns this handle, e.g.
the Username of the Owner. Calls to GetKernelObjectSecurity
and GetUserObjectSecurity return sometimes different information
than e.g. Process Explorer. I also dont want to do things like
get the process token->Impersonate->GetUserName->RevertToSelf.
Calls to GetSecurityInfo also just return owner of the token, but
not the Usercontext that was responsible for the creation of the
Token. Invoking LookupAccountSid works just fine after i got
the sid buffers. I hope, you know what i want to do. Who created
the handle and in what user context has it been created,...

SYSTEM_OBJECT_INFORMATION (ntquerysysteminformation) is
also not really helping, SYSTEM_OBJECT_INFORMATION neither,...

Am i missing something here, or am i just to tired, after a hard day
full of work...:-)

Regards

Kerem

--
--
-----------------------
Beste Grüsse / Best regards / Votre bien devoue
Kerem Gümrükcü
Microsoft Live Space: http://kerem-g.spaces.live.com/
Latest Open-Source Projects: http://entwicklung.junetz.de
-----------------------
"This reply is provided as is, without warranty express or implied."


.

Relevant Pages

  • Re: Get Handle Owner,...
    ... the User Context from just a service handle? ... to query information from the objects. ... the Username of the Owner. ... the sid buffers. ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Get Handle Owner,...
    ... Kerem Gümrükcü wrote: ... to query information from the objects. ... the Username of the Owner. ... What you seem to be asking for is "the SID of the owner of the token associated with the thread that created the object at the moment it created it". ...
    (microsoft.public.win32.programmer.kernel)