Re: How to give access rights to already-executing processes?

From: James John Farmer (jjf_at_usenet.twinlobber.org.uk)
Date: 09/06/04

  • Next message: RockinFewl: "CryptProtectData key." 
    Date: Mon, 06 Sep 2004 19:30:07 GMT

    In article <c9c931f5.0409051148.47abed46@posting.google.com>,
    m_pll@hotmail.com says...
    > Tokens don't contain access rights, they contain things liks SIDs and
    > privileges. Access rights are associated with handles.

    Okay, that would explain why I can't see how to do this. Thanks.

    > It shouldn't matter who starts first - if the service gives
    > PROCESS_DUP_HANDLE right to the application account then the app
    > should be able to do OpenProcess(PROCESS_DUP_HANDLE).
    >
    > What exactly fails in your scenario, and with what error code?

    I could've sworn when I was doing this on Friday and Saturday I was
    getting ERROR_ACCESS_DENIED on the call to OpenProcess
    (PROCESS_DUP_HANDLE) from the application, when the application was
    started first. But I've just tried it again and wasn't able to
    duplicate that error. In fact, it looks like it may all be down to a
    really simple mistake I've made.

    Maybe I was just tired.

    Thanks for your reply; I'd never have tried this again if you hadn't.
    Now I should be able to get this to work! Yippee! :)

    James.

  • Next message: RockinFewl: "CryptProtectData key."

    Relevant Pages

    • Re: GetFileVersionInfo returns 1812 for files with no access rights....
      ... I get where you and Joe are coming from.... ... not indicate that the reason is missing access rights. ... a error code that makes this clear, not just a 1812 in this case. ... 1812 as result even if you have a valid resource inside the image,... ...
      (microsoft.public.vc.mfc)
    • Re: ADMT V3 Migration Headache
      ... OK, as the error suggests and the error code further quantifies, you ... Insufficient access rights to perform the operation. ... Is the account that you are using a member of administrators in the domain? ... Microsoft MVP - Windows Server - Directory Services ...
      (microsoft.public.windows.server.active_directory)
    • RE: Installation Error Code 80070005
      ... Had same error code. ... Also tried changing various access rights. ... All without success. ... Cleared this ReadOnly flag and the installation of the updates worked ...
      (microsoft.public.windowsupdate)
    • Re: CreateProcessWithLogonW error
      ... > and the function GetLastErrorreturns the error code # 1314, ... the process that calls the API CreateProcessAsUser() must ... > following privileges: ... How do you set these access rights and priviledges? ...
      (microsoft.public.platformsdk.security)
    • Re: ImpersonateLoggedOnUser & ShellExecute
      ... now I've made sure that the calling account has the required privileges ... option to set the needed access rights there. ... > the access rights to the process's access tokens, ... > the process that calls the API CreateProcessAsUser(), ...
      (microsoft.public.win32.programmer.networks)