tags:

views:

272

answers:

0
Q: 

C# - modify process token to add deny flag to ACE for Administrator group membership

Greetings - I would like to remove privileges from my process, and elevated permissions conferred through membership in the local Administrators group. Just like DropMyRights.exe, but I want to modify the token of the current process.

ProcessPrivileges (on CodePlex) makes removing the privileges easy. Adding the deny flag for the Administrators group seems not so obvious.

There seems to be a lot of information on creating processes specifying a "*SAFER_LEVELID_NORMALUSER*". The only information I could find on modifying group membership of existing tokens was in ISBN: 0321294319.

Anyone done this?

Thanks - Greg

related questions

Displaying Flash content in a C# WinForms application
How to get the value of built, encoded ViewState?
Unhandled Exception Handler in .NET 1.1
How do I connect to a database and loop over a recordset in C#?
How do I most elegantly express left join with aggregate SQL as LINQ query
Get a new object instance from a Type in C#
.NET Testing Framework Advice
Automatically update version number
What is the difference between an int and an Integer in Java/C#?
How to write to Web.Config in Medium Trust ?
WinForms ComboBox data binding gotcha
How do you sort a C# dictionary by value?
Adding Scripting functionality to .NET applications
Floating Point Number parsing: Is there a Catch All algorithm?
How do I print an HTML document from a web service?
Decoding T-SQL CAST in C#/VB.net
Anatomy of a "Memory Leak"
How do I get a distinct, ordered list of names from a DataTable using Linq
Reliable Timer in a Console Application
How do I fill a DataSet or a DataTable from a LINQ query resultset ?
What's the difference between Math.Floor() and Math.Truncate() in .NET?
How do I calculate relative time?
How do I calculate someone's age in C#?
Are there any conversion tools for porting Visual J# code to C#?
When setting a form's opacity should I use a decimal or double?