Re: Question about SID

From: Dave (Dave_at_discussions.microsoft.com)
Date: 10/30/04 

Date: Fri, 29 Oct 2004 19:26:01 -0700

Note that if you enumerate processes based on the user sid then you will get
all process for that user even from other logon sessions (if for some reason
the user has them.) You can enumerate the processes based on the logon sid to
monitor only processes from that logon

"Yu Chen [MS]" wrote:

> The user SIDs in primary tokens of all these processes should be the same
> since they are started under the same user account.
>
> --
> Yu Chen [MS]
> This posting is provided "AS IS" with no warranties, and confers no rights.
>
> "Krishna Monian" <KrishnaMonian@discussions.microsoft.com> wrote in message
> news:DCD967DE-83F8-4203-85E3-DF27AF392EDF@microsoft.com...
> > Hi,
> > Currently I create a process from my program as a different user (similar
> to
> > runas). This process that I create spawns several other processes (which
> are
> > also under this different user).
> >
> > My question is, will the SID of all these processes under this separate
> user
> > as obtained from the WTS_PROCESS_INFO structure(the pUserSid field) which
> I
> > get by calling WTSEnumerateProcesses be the same? If so can I just acquire
> > the SID once during the entire run of the process and use it to compare
> > whether a particular process is running under the user?
> >
> > Thanks
> > Krishna Monian
>
>
>

Relevant Pages

  • Re: User gets married, changes name & wants log-in changed
    ... home drive mapping on next logon and this might be perceived as a failure on ... knows you by your sid ... Doug Starkey ... Pecan Deluxe Candy Company ...
    (microsoft.public.windows.server.active_directory)
  • Re: Laptop users changing domains, mismatch DACLS
    ... change domains sometimes... ... Windows will however allow a user to LOGON to a machine ... Perhaps this ability to authenticate is all the users really ... files because the same SID is not in the DACL of the filesystem folders. ...
    (microsoft.public.windows.server.active_directory)
  • I want to logon interactively....
    ... I'm the network administrator, ... and I can logon fine, but I want to logon as the user who uses that PC, and ... Is the users SID I'm needing to delete ... are not user accounts. ...
    (microsoft.public.windowsxp.security_admin)
  • RE: Understaing Event Details in Windows NT
    ... Event ID from the viewer. ... Logon Type 3 is a network logon, ... GETSID resource kit utility to translate each user name into a SID. ... What does "LoginID: " mean? ...
    (Focus-Microsoft)
  • Re: SetUserObjectSecurity gives error ERROR_NOT_ENOUGH_QUOTA
    ... > procedures that you can use to remove any unnecessary ACEs. ... > enumerate processes, read the Logon Security Identifier (SID) or User ...
    (microsoft.public.vc.mfc)