Jump to content

Featured Replies

Posted

Hello,

 

I have a LH based service that does this .

 

- starts up with LocalSystem.

- Launches a thread. This thread impersonates a local user

defined Administrator account.

- This thread launches another child process.This is via

CreateProcess( , DETACHED_PROCESS, ) with a NULL security

descriptor.

- Periodically, this thread will do OpenProcess on the child's

process pid .

- This OpenProcess(Process_query_Information,FALSE, pid) fails

with ACCESS_DENIED error.

- This service has a RequireAdministrator manifest file.

 

- This service may be restared while the child process was

active. However, it will still need the facility to check on the

child's status as above.

 

Let me know if there are LH specific workarounds or other issues

here.

 

Thanks

--Chinta

Join the conversation

You can post now and register later. If you have an account, sign in now to post with your account.

Guest
Reply to this topic...