|
Overview:
I'm trying to write a util that will allow users in the local 'Power Users' security group the ability to add/remove their access to regedit, .cpl entries, mmc, etc. Unfortunately, Power Users don't (by default) have access to make changes to hkcu\software\microsoft\windows\currentversion\policies (where these registry keys need to be created/modified)
By calling CreateProcessWithLogonW (passed local Administrator credentials) with a NULL parameter for the dwLogonFlags parameter, I thought it wouldn't perform a LOGON_WITH_PROFILE -- but it does anyway. This causes the Power Users HKCU hive to be overwritten with that of the local Administrator.
So, currently my plan is to have two processes:
a.exe: Runs CreateProcessWithLogonW to call process b.exe (which will run as local administrator):
b.exe runs NetLocalGroupAddMembers to add NT AUTHORITY\Authenticated Users to the local Administrators group , thereby giving them access to make changes to the registry key above. control returned to caller (a)
a.exe: Make registry key changes to HKCU hive of the Power User. Changes are complete. Remove user from Local Security Group (don't need admin rights for this)
Summary:
As you can see, to perform this task I need two executables. Seems a bit silly (and there's probably an easier way to do all this). Any way to combine everything into one file? Don't suppose there's some way to use run my code snippet/function for NetLocalGroupAddMembers using elevated privileges without creating an entirely new execuable for that?
Thanks for any help
|
|
|
|
|
Sorry to reply to my own thread before anyone replied, but I thought of something and just wanted some input regarding whether its good / bad / other:
process b.exe described above will be created & deleted during runtime of process 'a'
the way i'll do this is by storing and writing a binary array, etc. to a file and saving it as b.exe, then I'll execute b.exe with CreateProcessWithLogonW
Next, b.exe will be deleted (from a.exe) once its execution completes
Its a messy solution but certainly doable right?
Thanks..
|
|
|
|
|
One issue that immediately comes to mind is the concept of obfuscating the credentials. It's very tempting to attempt IT chores such as changing HKCU registry changes, changing priviledges for user/groups, etc...
However, simply right clicking on the exe and opening with Notepad allows a user to scroll down to where your string literals all get bunched together, and where all that plain text sticks out like a sore thunb amongst all that binary crud and low and behold, there's the admin's password staring back at you. Anytime a sensitive password is one shell action away from every Joe Blow on the network, (This password obviously is the same for more than one box or you wouldn't go through all this trouble to automate the action) I tend to cringe.
You can choose to obfuscate the string literal using and encryption library but the key still needs to be stored in a literal. You could create a function that generates some string and decrypt your string literals as you use them which would eliminate any unencrypted strings be stored in the exe. This only abstracts the sensitive data but since you don't know who will get a copy of this exe as it is deployed, any determined and capable person could disassemble and trace through the code to determine the key produced by the function. How important is it to you to protect your network, machines, data, company, job?
Anyway, I'm just trying to give you a friendly sober second thought to consider at least obfuscating your credentials in the exe at a minimum instead of making it easy for the power users to see those credentials.
|
|
|
|
|
credentials are already hidden in the code via an encryption/decryption routine run during runtime
Thanks for the heads up though
|
|
|
|
|
i got a file.txt:
Test1 < - 1rst line
Test2
How i put a string:
CString TString = "How I write text in files";
in the file (but each line hold 10 chars so the file.txt would be):
Test1 <-1rst line
Test2
How I writ (10 chars)
e text in (10 chars)
files
|
|
|
|
|
CString sFilePath="your path/filename go here";
CStdioFile file;
CString sOutput="How I writ (10 chars)\r\ne text in (10 chars)\r\nfiles";
try {
if (file.Open(sFilePath,CFile::modeReadWrite|CFile::modeNoTruncate)) {
file.SeekToEnd(); // Go to end of file.
file.WriteString(sOutput); // Append text
file.Close();
}
}
catch (CException * e) {
e->ReportError(); // Popup description of exception
e->Delete(); // Clean up.
}
catch (...) { // Catch any other exceptions
AfxMessageBox("Failed to open file!");
}
-- modified at 12:32 Sunday 28th May, 2006
|
|
|
|
|
Thx i am going to try this.
But the CString sOutput it would have random char lenght
(so i have to GetLength(); )
int m_Count = sOutput.GetLenght();
int m_Edit = m_Count / 10 // = How many lines i need
if ( m_Edit%10 != 0)
{
m_Edit = m_Edit +1;
}
Now to edit the the sOutput in the form i want :
for ( m_Edit >= 1 ;m_Edit-- )
sOutput.SetAt(m_Edit*10)="\\n";
SetAt is the right command to add the \n in the string?
-- modified at 12:50 Sunday 28th May, 2006
|
|
|
|
|
Your making it harder than it should be. (NOTE: the appending to existing file thing was an assumption so if your wanting to create the file new each time if it doesn't exist and overwrite the previous file if any, use the modified open flags below)
CString sFilePath="c:\\temp\\myfile.txt";
CStdioFile file;
CString sOutput="This is a long string to see how to append every 10 chars in the string to a file";
int nCount=sOutput.GetLength();
try {
if (file.Open(sFilePath,CFile::modeReadWrite|CFile::modeCreate)) {
file.SeekToEnd(); // Go to end of file.
for (int i=0;i<nCount;i+=10) {
file.WriteString(sOutput.Mid(i,10)+"\r\n"); // Append text
}
file.Close();
}
}
catch (CException * e) {
e->ReportError(); // Popup description of exception
e->Delete(); // Clean up.
}
catch (...) { // Catch any other exceptions
AfxMessageBox("Failed to open file!");
}
-- modified at 13:35 Sunday 28th May, 2006
|
|
|
|
|
Also, a word of caution concerning the \n.
newlines can be \n or \r\n in text files but when outputting your results to an edit control, you will need the \r\n pair. Not that it matters but in case you start dumping your text output to a GUI I thought I'd give you a heads up since your just using a newline in your snippets.
For what it's worth...
|
|
|
|
|
thx 
|
|
|
|
|
Hi,
I'm new in Visual C++ .net 2005 and I'm writing a Newsreader and i have the following problem:
on my form load event i'm reading a text file into my listview, the textfile contains about 66000 lines, so when the form loads it doesn't respond for a few seconds. I have already searched the new for an answer to my question but nothing could help me out...it also tried to use the virutal mode for the listview but I don't get on with this mode 
I'm becoming desperate...so it would be very nice if someone could help me on this, maybe sending me a tutorial or a very simple sample code
thx in advance
No need to invent new thing when they already exist
|
|
|
|
|
Master Gollom wrote: textfile contains about 66000 lines
I think I know why it's taking so long to load the listview.;P
|
|
|
|
|
I also know that the 66000 lines are taking much time but there must be a way to load them faster
|
|
|
|
|
make 11 threads which load 6000 lines ? (isnt that be 11 times faster )
|
|
|
|
|
|
thanks for your answer, but i have already found this link on the net but it couldn't help me out because this code is not in vc++ .net 2005
|
|
|
|
|
I need to have a control like CDragListBox (I need dragging), but it should also have a check box and a small bitmap for each item. Is it posible (and quite easy) to add check box and bitmap to CDragListBox control?
Or should I rather use CListCtrl? What's easier to implement?
Can you give me some advice please? And by the way some samples if you have any.
~~~~
|
|
|
|
|
Pls, give me some tip
~~~~
|
|
|
|
|
I am not a code writer, except in HTML, and I don't plan on learning the super long code for a print out, or in this case a window.
So I have a program that will save files, open and make new ones (for a thing you wouldnt understand)but I dont know how to make a new window. I Have actualy read and skipped around and I know that in there the code is "Make_A_WINDOW()" but wouldn't know where to put it...
Also, I have a menu but I dont know how to link them together.
~I'm using the Microsoft Visual Studio .NET 2003 program and all (hopefuly)in visual mode.
Hmm, how do I make this stupid thing WORK!
|
|
|
|
|
Haun the 2nd wrote: How do i make another window w/o code
You close your eyes, breathe deeply (very important), and say (three times) "another window without any stupid code"
If that doesn't work, you may want to look up CWnd::Create in MSDN. I'm guessing that's not what you wanted but since this is a Visual C++/MFC discussion board, I'd have to say that CWnd::Create is the way to go around here to get create another window. I've never heard of "Make_A_WINDOW" but they don't let me out much.
.NET might have a "system.output.gui.windows.telepathy.commands.new.window.without.any.stinking.code" namespace so I would give that discussion board a try.
|
|
|
|
|
bob16972 wrote: .NET might have a "system.output.gui.windows.telepathy.commands.new.window.without.any.stinking.code"
Nice , I believe in 10 year time, might be it will part of Namespace
"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow
cheers,
Alok Gupta
VC Forum Q&A :- I/ IV
Support CRY- Child Relief and You
|
|
|
|
|
Hmmm...
I wonder if I could just do 2 diffrent progrects and then some how compile them together.
Or I could just learn the code...
|
|
|
|
|
Haun the 2nd wrote: I could just learn the code...
I better you learn the code, as learning never goes waste!
"Opinions are neither right nor wrong. I cannot change your opinion. I can, however, change what influences your opinion." - David Crow
cheers,
Alok Gupta
VC Forum Q&A :- I/ IV
Support CRY- Child Relief and You
|
|
|
|
|
What's wrong with this code? It draws, but with great flickering. I red many articles about double buffering, but it seems that I don't understand them.
Please help. :/
void CGrafikView::OnDraw(CDC* pDC)
{
CGrafikDoc* pDoc = GetDocument();
ASSERT_VALID(pDoc);
// TODO:
CRect rc;
GetClientRect(&rc);
CDC dcMem;
dcMem.CreateCompatibleDC(pDC);
CBitmap bmpMem;
bmpMem.DeleteObject();
bmpMem.CreateCompatibleBitmap( pDC, rc.right, rc.bottom );
CBitmap * oldBmp = dcMem.SelectObject( &bmpMem );
CPen penBorder( PS_SOLID, 1, crBordercolor );
CPen penNull;
penNull.CreateStockObject( NULL_PEN );
CBrush brushBg( crBgcolor );
CBrush brushFill( RGB(204,204,204) );
CBrush brushNull;
brushNull.CreateStockObject( NULL_BRUSH );
CPen * oldPen = dcMem.SelectObject( &penNull );
CBrush * oldBrush = dcMem.SelectObject( &brushBg );
dcMem.Rectangle(&rc);
dcMem.SelectObject( &penBorder );
dcMem.SelectObject( &brushFill );
dcMem.Rectangle( startX-1, startY-1, startX+uWidth+1, startY+uHeight+1 );
//--------------------------------------
pDC->BitBlt( 0, 0, rc.right, rc.bottom,
&dcMem, 0, 0, SRCCOPY ); //--------------------------------------
dcMem.SelectObject( &oldPen );
dcMem.SelectObject( &oldBrush );
dcMem.SelectObject( &oldBmp );
}
Lukas
~~~~
|
|
|
|
|
whats wrong in your code do you get error?code Can you be more specific
whitesky
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
