可执行文件是否可以要求管理员权限? (Windows 7的) [英] Is it possible for the executable to ask for Administrator rights? (Windows 7)
问题描述
我正在开发一个分区磁盘程序,我要读取 \\\\.\\PhysicalDrive0
我需要管理员权限。 / p>
我想知道在运行时是否可以让程序获得管理员权限?有没有胜利的api?
我想这样做,因为我想让程序只有在读/写磁盘时才能以管理员权限执行。出于安全原因,我不想让程序一直执行管理员权限,因为有人可能在某些模块中发现错误(例如堆栈或堆溢出),并执行任意命令作为adm。
在进程启动后,您无法获取提升的权限。您的选项是:
- 将需要提升权限的应用程序部分放入一个单独的进程中,并显示
require
- 将需要提升权限的应用程序的一部分作为未处理的COM对象运行。
- Put the part of your application that requires elevated privileges into a separate process and manifest that with
requireAdministrator
. - Run the part of your application that requires elevated privileges as an out-of-proc COM object.
I am developing a partition disk program, and for me to read the \\\\.\\PhysicalDrive0
I need admin rights.
I am wondering if it is possible, in the run time, for the program to gain admin rights? Is there any win api for that?
I want to do that because I want the program to execute with admin rights only when it is reading/writing the disk. For security reasons, I don't want the program to execute all the time with admin rights, because someone could find a bug (stack or heap overflow for example) in some module and execute arbitrary commands as adm.
You cannot acquire elevated privileges after the process has started. Your options are:
这篇关于可执行文件是否可以要求管理员权限? (Windows 7的)的文章就介绍到这了,希望我们推荐的答案对大家有所帮助,也希望大家多多支持IT屋!