Is it possible to get Logged in user Non Restricted token from a service on Vista?

Question

Hello All,

I need to create a process with integrity level high, so that it can do all the administrative tasks. But the created process should run in the current logged in desktop i.e. it should not run in session 0. By default only administrators will log on to the console.

The service should launch the process, as service is running in session 0 and system account. Can it any how get the non restricted token and use it in CreateProcessAsUser, so that the process created does have integrity level of high or system. Is it possible? One more thing is i should get the non restricted token with out prompting for user name or password of the logged in user.

Thanks

Answer 1

Yes it is possible, we need to query for the linked token.

http://www.eggheadcafe.com/software/aspnet/28532422/-starting-administrato.aspx

http://www.tech-archive.net/Archive/Development/microsoft.public.win32.programmer.kernel/2008-05/msg00356.html

Thanks