changing process access levels/rights

Hot Topic

ServicedComponent shared Transaction
Correlation Communication service: two activites using the same CorrelationParameter
Build 5308: No audio, Intel High Def Audio, D915PBL mobo
InkCanvas - CPU Hungry
Logon using the Administrator account
Embedded designer with ifElseActivity does not compile.
WWF Release Date
IndexOutOfRangeException while trying to access a workflow instance
Can TargetStateName of SetState Activity be dynamically modified?
Problem Using ifElseactivity in an Embedded workflow designer

Windows Vista

Dynamic Update to a Workflow Created from a XOML
Is SDK download link broken?
Install Issues - "a disk read error occurred"
DTCGetTransactionManagerEx error
DTC help
Drawing over fullscreen video from AudioVideoPlayback
ASP.NET And a State Machine Workflow
Support for multithreading workflows?
Sequence vs. CompositeActivity Guidance
May the downloadable hands-on labs also be used with the November CTP?

changing process access levels/rights

Hey, I'm trying to find some good information (articles, samples, whatever) on changing the access rights of a process. I believe the API methods include, OpenProcess, GetKernelObjectSecurity, GetSecurityDescriptorDacl, GetAclInformation, SetKernelObjectSecurity, etc.

I am trying to disable some rights in a process like PROCESS_TERMINATE though I am having trouble finding some good information.

Thanks all

Luke

Answer this question

changing process access levels/rights

  • UseCode

    Hey,

    I know you can use SubInAcl to see the rights of the process, but are you sure you can deny PROCESS_TERMINATE using it

    If so, can you show an example please

    Thanks ahead

    sternr@gmail.com

  • Anthony Duarte

    You can use SubInAcl command to do this.
    Note that version 4.0.1.1604 is not working, so download version 5.2.3790.1180 from microsoft site.

  • ferrad

    Get a handle to the process you want to protect (GetCurrentProcess for the
    current process).
    Pass the handle to GetKernelObjectSecurity to get its DACL.  Add a Denied
    ACE to it specifying the current user's SID (or better yet, the well-known
    SID for "Everyone"), and the PROCESS_TERMINATE right.  Call
    SetKernelObjectSecurity to update the process' DACL.



  • changing process access levels/rights
Answer this question