Re: Getting logged in user from a service?

"Ben Voigt [C++ MVP]" <rbv@xxxxxxxxxxxxx> wrote in message news:e3dxMO5pHHA.4532@xxxxxxxxxxxxxxxxxxxxxxx
CLR and the .NET Framework is all about. If you are coding directly against the OS services (that is, by directly calling WIN32 Api's) you have to consider a lot of things at "development" time, things like - is the API available on the *target* machine? - What are the security constraints, what privileges are there required to call these API when running as say "Local Service"? Can the API access a remote server instance? Most of these things are taken care of by the framework and it's underlying services, whatever these are, and in this particular case the underlying service is native WMI in top of Win32.

I don't see how using .NET Framework exempts you from worrying about security constraints, privileges, etc. It might automatically enable a held privilege in your token, that's about it.



No, the system.Management classes (and this is what we are talking about here) and WMI makes it possible to call OS services without YOU having the need to run with these elevated privileges.

Willy.

.

Relevant Pages

  • Re: Getting logged in user from a service?
    ... against the OS services (that is, by directly calling WIN32 Api's) you ... the API available on the *target* machine? ... underlying services, whatever these are, and in this particular case the ... security constraints, privileges, etc. ...
    (microsoft.public.dotnet.languages.csharp)
  • Re: Getting logged in user from a service?
    ... against the OS services (that is, by directly calling WIN32 Api's) you ... the API available on the *target* machine? ... security constraints, privileges, etc. ...
    (microsoft.public.dotnet.languages.csharp)
  • GetTokenInformation API
    ... I am using the GetTokenInformation API with the TokenPrivileges flag for the ... The API returns a structure whose first member is the Privileges ... As I go through the ATTRIBUTES portion of the LUID_AND_ATTRIBUTES structure, ...
    (microsoft.public.security)
  • Re: Logon broker
    ... I tried this and LoadUserProfile is still failing with Access Denied. ... Do I need to Enable these privileges as well or will the API try ... CreateEnvironmentBlock() ...
    (microsoft.public.win32.programmer.kernel)
  • Re: Logon Broker
    ... I tried this and LoadUserProfile is still failing with Access Denied. ... Do I need to Enable these privileges as well or will the API try ... CreateEnvironmentBlock() ...
    (microsoft.public.platformsdk.security)