|
I am Logon user to create the impresonate user. When the run the code on windows 2000 I am getting the message "A required privilege is not held by the client."
Can any one let me know what privalages has to set.
For reference I am attaching the code also.
[assembly:SecurityPermissionAttribute(SecurityAction.RequestOptional, UnmanagedCode=true)]
[assembly:PermissionSetAttribute(SecurityAction.RequestOptional, Name = "FullTrust")]
[DllImport("advapi32.dll", SetLastError=true)]
public static extern bool LogonUser(String lpszUsername, String lpszDomain, String lpszPassword,
int dwLogonType, int dwLogonProvider, ref IntPtr phToken);
[DllImport("kernel32.dll", CharSet=System.Runtime.InteropServices.CharSet.Auto)]
private unsafe static extern int FormatMessage(int dwFlags, ref IntPtr lpSource,
int dwMessageId, int dwLanguageId, ref String lpBuffer, int nSize, IntPtr *Arguments);
[DllImport("kernel32.dll", CharSet=CharSet.Auto)]
public extern static bool CloseHandle(IntPtr handle);
[DllImport("advapi32.dll", CharSet=CharSet.Auto, SetLastError=true)]
public extern static bool DuplicateToken(IntPtr ExistingTokenHandle,
int SECURITY_IMPERSONATION_LEVEL, ref IntPtr DuplicateTokenHandle);
public unsafe static string GetErrorMessage(int errorCode)
{
int FORMAT_MESSAGE_ALLOCATE_BUFFER = 0x00000100;
int FORMAT_MESSAGE_IGNORE_INSERTS = 0x00000200;
int FORMAT_MESSAGE_FROM_SYSTEM = 0x00001000;
//int errorCode = 0x5; //ERROR_ACCESS_DENIED
//throw new System.ComponentModel.Win32Exception(errorCode);
int messageSize = 255;
String lpMsgBuf = "";
int dwFlags = FORMAT_MESSAGE_ALLOCATE_BUFFER | FORMAT_MESSAGE_FROM_SYSTEM | FORMAT_MESSAGE_IGNORE_INSERTS;
IntPtr ptrlpSource = IntPtr.Zero;
IntPtr prtArguments = IntPtr.Zero;
int retVal = FormatMessage(dwFlags, ref ptrlpSource, errorCode, 0, ref lpMsgBuf, messageSize, &prtArguments);
if (0 == retVal)
{
throw new Exception("Failed to format message for error code " + errorCode + ". ");
}
return lpMsgBuf;
}
string userName;
userName = System.Security.Principal.WindowsIdentity.GetCurrent().Name.ToString();
MessageBox.Show(userName);
IntPtr tokenHandle = new IntPtr(0);
IntPtr dupeTokenHandle = new IntPtr(0);
tokenHandle = IntPtr.Zero;
dupeTokenHandle = IntPtr.Zero;
const int LOGON32_PROVIDER_DEFAULT = 0;
const int LOGON32_LOGON_INTERACTIVE = 2;
bool returnValue = LogonUser(textBox1.Text, textBox2.Text, textBox3.Text,
LOGON32_LOGON_INTERACTIVE, LOGON32_PROVIDER_DEFAULT,
ref tokenHandle);
somebody please help me
|
|
|
|
|
From the documentation[^]:
Windows 2000: The process calling LogonUser requires the SE_TCB_NAME privilege. If the calling process does not have this privilege, LogonUser fails and GetLastError returns ERROR_PRIVILEGE_NOT_HELD. In some cases, the process that calls LogonUser must also have the SE_CHANGE_NOTIFY_NAME privilege enabled; otherwise, LogonUser fails and GetLastError returns ERROR_ACCESS_DENIED. This privilege is not required for the local system account or accounts that are members of the administrators group. By default, SE_CHANGE_NOTIFY_NAME is enabled for all users, but some administrators may disable it for everyone.
SE_TCB_NAME is known as "Act as part of the operating system" in the privilege-setting user interface. It's only given to the SYSTEM/LocalSystem account by default.
Since you don't say what you're trying to do, it's difficult to help further. If you want to create a process running under a different user account, try CreateProcessWithLogonW[^].
Stability. What an interesting concept. -- Chris Maunder
|
|
|
|
|
Thanks Mike,
This is the first time I am working on the windows security can you please let me where to set the SE_TCB_NAME and SE_CHANGE_NOTIFY_NAME privalage.
I need the User name, Password and the Domian name to provide it for a windows services developed by me. I am using "this accont" option in the properties dialog of the service manager as I have to access few protected resource on the system.
While installing the service in the for the first time I need to give these deatils. So I have UI which will query for the User name and the password then I would want to validate the user name and password before mounting and starting the service.
My initial idea was to use logon user function, if it succeeds then the credential entered are correct and I can continue to start the service.
Is there any other alternate method of doing this. Please help me
thanks and regards
Sharath
|
|
|
|
|
sharathgowda wrote:
This is the first time I am working on the windows security can you please let me where to set the SE_TCB_NAME and SE_CHANGE_NOTIFY_NAME privalage.
That's why you need to read the documentation he linked. Those privileges are granted to users through the security configuration of the machine or domain (which applies to the machine). It's all covered in linked documentation from the documentation you were given.
You do not need to use LogonUser to prompt for the username and password, however. You only need the credentials. If you want to authenticate that the credentials are correct than calling LogonUser is by far the easiest way to authenticate them.
This posting is provided "AS IS" with no warranties, and confers no rights.
Software Design Engineer
Developer Division Sustained Engineering
Microsoft
[My Articles] [My Blog]
|
|
|
|
|
Hello...
I have some problems with my tabcontrol. I would like to make it transparent, but I cant....is there any way to make the tabpages AND the tabs transparent? If there is a way to do this, please help me..
//Carnilmo
|
|
|
|
|
Hi all,
Are there any good third-parties UI control components for .NET ?
I want to use them to re-decorate the view design of my project.
Thanks
|
|
|
|
|
|
Hi all,
My project need a MAPI component for those mapi and smtp encode
and decode. Do anyone know any good third-parties components on it which I
can called the component by C# ?
Thanks
|
|
|
|
|
hi all,
I am doing a C# Application.
I want to add check Boxes to Extra Column in a DataGrid..Other thing is when check Box Click I need to do some oprations..
("suppose that when I click check box in a DataGrid Column, I need to popup Message")
How do I do this?
please any one know this please help me.
Thanks in advance
|
|
|
|
|
I reckon the reason no-one is answering is that this question is well answered in CP articles, and elsewhere on the web.
Christian
I have several lifelong friends that are New Yorkers but I have always gravitated toward the weirdo's. - Richard Stringer
|
|
|
|
|
Hi all
how can I write programe in C# to get thw URL from the address bar when any one use the internet explorer .
Please help me.
Thanks.
|
|
|
|
|
You might want to explain why you want this first...people on here aren't too interested in helping with spyware applications...just in case that's what you had in mind.
|
|
|
|
|
If you're hosting the WebBrowser control in your Windows Forms application, get the LocationURL property. If you want to get the URL from a running instance of Internet Explorer, you can use the InternetExplorerClass from shdocvw.dll by creating an RCW (Runtime Callable Wrapper, or "interop assembly") like so:
tlbimp /out:Interop.SHDocVw.dll %windir%\system32\shdocvw.dll You can also create this in VS.NET by adding a reference to your project, click on the COM tab, and find "Microsoft Internet Controls". You can then do something like this:
InternetExplorerClass ie = new InternetExplorerClass();
return ie.LocationURL; There are rules regarding this property and what can retrieve the value, so you should read about it in the MSDN Library[^].
This posting is provided "AS IS" with no warranties, and confers no rights.
Software Design Engineer
Developer Division Sustained Engineering
Microsoft
[My Articles] [My Blog]
|
|
|
|
|
I write in my programe :
InternetExplorerClass ie = new InternetExplorerClass();
textBox1.Text = ie.LocationURL;
but when i excute it , it gives empty string not url ,what is the wrong???
|
|
|
|
|
I told you - you need to read the documentation for the property: it is protected for the very same reasons that the other reply mentioned - to prevent malware from gather information about your browsing habits out of process. There is more information about what is and isn't possible at http://msdn.microsoft.com/library[^].
This posting is provided "AS IS" with no warranties, and confers no rights.
Software Design Engineer
Developer Division Sustained Engineering
Microsoft
[My Articles] [My Blog]
|
|
|
|
|
I'm putting together a project and need to extend Windows' shell to add a owner-drawn menu item to the context menu. If I use only IContextMenu, the menu item and owner-drawn (blank) sub menu are added fine.
As soon as I implement IContextMenu2 and HandleMenuMsg, I get a memfault from Explorer whilst debugging. A breakpoint is hit inside the IContextMenu2.HandleMenuMsg but subsequently, Explorer crashes. I'm returning "0" from int HandleMenuMsg(uint, IntPtr, IntPtr).
Any ideas?
--------------------------------
Extension code:
[ComImport(), InterfaceType(ComInterfaceType.InterfaceIsIUnknown), GuidAttribute("000214e8-0000-0000-c000-000000000046")]
public interface IShellExtInit {
[PreserveSig()]
int Initialize (IntPtr pidlFolder, IntPtr lpdobj, uint /*HKEY*/ hKeyProgID);
}
[ComImport(), InterfaceType(ComInterfaceType.InterfaceIsIUnknown), GuidAttribute("000214e4-0000-0000-c000-000000000046")]
public interface IContextMenu {
[PreserveSig()]
int QueryContextMenu(HMenu hmenu, int iMenu, int idCmdFirst, int idCmdLast, CMF uFlags);
[PreserveSig()]
void InvokeCommand(IntPtr pici);
[PreserveSig()]
void GetCommandString(int idcmd, uint uflags, int reserved, StringBuilder commandstring, int cch);
}
[ComImport(), InterfaceType(ComInterfaceType.InterfaceIsIUnknown), GuidAttribute("000214e4-0000-0000-c000-000000000046")]
public interface IContextMenu2 : IContextMenu {
[PreserveSig()]
int HandleMenuMsg(uint Msg, IntPtr LParam, IntPtr WParam);
[PreserveSig()]
new int QueryContextMenu(HMenu hmenu, int iMenu, int idCmdFirst, int idCmdLast, CMF uFlags);
[PreserveSig()]
new void InvokeCommand(IntPtr pici);
[PreserveSig()]
new void GetCommandString(int idcmd, uint uflags, int reserved, StringBuilder commandstring, int cch);
}
--------------------------------
Shell code:
public int QueryContextMenu(HMenu hmenu, int iMenu, int idCmdFirst, int idCmdLast, CMF uFlags) {
//
HMenu AppMenu;
Int32 NewMenuID = 1;
// Check Flags
if ((uFlags & (CMF.CMF_VERBSONLY|CMF.CMF_DEFAULTONLY|CMF.CMF_NOVERBS)) == 0 ||
(uFlags & CMF.CMF_EXPLORE) != 0) {
//
// Create Popup Menu
AppMenu = Helpers.CreatePopupMenu();
// Append SubMenus
Helpers.AppendMenu(AppMenu, MFMENU.MF_OWNERDRAW|MFMENU.MF_ENABLED,
new IntPtr(idCmdFirst + NewMenuID++), null);
Helpers.InsertMenu(hmenu, 3, MFMENU.MF_BYPOSITION|MFMENU.MF_POPUP|MFMENU.MF_ENABLED, AppMenu.handle, "MediaExplorer");
}
return NewMenuID;
}
#region IContextMenu2 Members
public int HandleMenuMsg(uint Msg, IntPtr LParam, IntPtr WParam) {
//
return 0;
}
#endregion
--------------------------------
>
|
|
|
|
|
I don't think you need the redefinitions of IContextMenu methods in there, they may be causing your the problem when it tries to marshal the interface. Even if your interface inherits another interface, in this case IContextMenu2 : IContextMenu, you don't redefine the members from the original interface.
Also, if i remember correctly, there is an entry on Raymod Kim's blog as well an anecdotal evidence that IContextMenu2 isn't very useful. The system checks for IContextMenu2 and if present then tries to use IContextMenu3, if that isn't present it falls back to the original IContextMenu. So you will need to implement the 3 interface for it to work i think.
I think your definitions of IContextMeuu are wrong as well. PreserveSig is used to prevent the signiture being changed because typically COM methods will return an HResult value. Your methods aren't returning HResult (or int) values and yet you've marked them with PreserveSig. Either remove the attribute or change the function definitions to match the definitions found in the header files exactly, otherwise i think you're either hiding errors or causing deeper problems which may not be apparent until the shell dies on you.
|
|
|
|
|
Thanks for the comments Wraith.
In the .NET SDK, the IContext Interface is specified as such:
// IContextMenu methods
[PreserveSig()]
int QueryContextMenu(uint hmenu, uint iMenu, int idCmdFirst, int idCmdLast, uint uFlags);
[PreserveSig()]
void InvokeCommand (IntPtr pici);
[PreserveSig()]
void GetCommandString(int idcmd, uint uflags, int reserved, StringBuilder commandstring, int cch);
That's where I got it from. I've repeated the interface methods in the implemented IContextMenu2 because I read several articles that stated the implemented interfaces in COM interop fail if you don't redefine the methods. Wierd I know.
I did have IContextMenu3 implemented as well but was receiving the same problem so I took it out to try and find which was causing the error. All implemented interface methods in my class receive notification (IShellExtInit.Initialize(), IContextMenu.QueryContextMenu() etc.) but the shell/explorer fails after having sent notification to IContextMenu2.HandleMenuMsg a few times. 
I'll try implement IContextMenu3 as well.
Also, what should be returned from IContextMenu2.HandleMenuMsg()? 0? One of the params?
>
|
|
|
|
|
Can you privode a link, or tell me how to find that definition you used? Because it seems to be contrary to the documentation i've read. I also couln'dt find a useful implementation of IContextMenu and provided my own. While i cant claim its perfect i've not had any problems with the shell crashing in quite a while now so i think i'm at or close to a correct definition. I'd also be interested to see those articles, i've read around COM interop articles a bit lately and i've not found any that specifically mentioned the redefinition argument.
IContextMenu2.HandleMenuMsg is defined as
HRESULT HandleMenuMsg(UINT uMsg, WPARAM wParam, LPARAM lParam);
In c# i'd probably make that
[PreserveSig] int HandleMenuMsg(uint uMsg, IntPtr wParam,IntPtr lParam);
though of course i'd have to look up the header definitions of LPARAM and WPARAM to be certain of their size/type. Without PreserveSig that would return void instead of int and if you have an error you'll have to throw an exception with an hresul generated using the Marshal class functions.
In my limited experience if you do something wrong with your marshalling you end up corrupting the shell memory and eventually it'll either start to behave very oddly or it'll just crash unexpectedly.
|
|
|
|
|
|
Interesting, Mattias Sjögren is very knowledgable about these things. I've come across posts of his many times.
The first thing that struck me was that the order of your methods doesn't match the example at the end of the discussion. COM methods have a defined order, if you change the order it won't work so well. If you look at the c or c++ definitions of the itnerfaces in the PSDK you'll find the correct order to use, this is also usually the order used in the documentation but its always worth checking to make sure. Make sure they are in the order IUnknown (implicitly added so don't bother), IContextMenu, IContextMenu2.
I'm no expert on COM, the shell interfaces are really my first try, but i've picked up a few things on the way through the docs. I think i'm being lucky and a bit cheeky with my definitions and that its working because the COM interop has to interpret the exported methods into a vtable rather than building it at compile time. I'm going to have a tinker with IContextMenu2 and IContextMenu3 and see what happens later. I do remember reading an article (possibly here ar codeproject) which states that you don't have ti implement inherited interfaces in the using interface but i'm more certain that Mattias is correct.
|
|
|
|
|
WRT the ordering, if I put HandleMenuMsg at the bottom of the decleration, it doesn't receive windows messages.
>
|
|
|
|
|
But does it crash? Because not getting any messages may be the correct behavior while crashign certainly isn't.
|
|
|
|
|
The method should receive a call when the context menu is activated via explorer. When it does receive a call, it receives the Msg, LParam and WParam no problems, but crashes shortly thereafter with a memory fault (explorer.exe - Application Error. Instruction at "0x78312aa5" referenced memory at "0x00000028". Memory could not be "read".) and subsequently shuts down the explorer window (not the process).
>
|
|
|
|
|
Personally i define crashing as an error condition, and one of the bigger ones as well. I realize that HandleMenuMsg should be called but it should also not cause the hosting application to crash. If you look at the definitions of ContextMenu, 2 and 3 in ShlObj.h the methods are specified in a specific and exact order. When the runtime interop does its work it doesn't have a lookup table of method names, it puts the methods in the order they are in the class/interface. If you've got them in the wrong order they wrong method could be called.
Put them in the right order and then go back and read through what is required for IContextMenu2 to run, perhaps a precondition isn't being met, perhaps a marshalling error is occuring before your function body is reached. Perhaps it is wrong in some way, but at least you'll know that the right method is being called with the right parameters at the right time if it ever is called.
|
|
|
|
|
General 
News 
Suggestion 
Question 
Bug 
Answer 
Joke 
Praise 
Rant 
Admin 
Submit an article or tip
