以编程方式提升进程权限? [英] Elevating process privilege programmatically?

问题描述

我正在尝试使用 InstallUtil.exe 安装服务，但通过 Process.Start 调用.代码如下:

I'm trying to install a service using InstallUtil.exe but invoked through Process.Start. Here's the code:

ProcessStartInfo startInfo = new ProcessStartInfo (m_strInstallUtil, strExePath);
System.Diagnostics.Process.Start (startInfo);

其中 m_strInstallUtil 是InstallUtil.exe"的完全限定路径和 exe，strExePath 是我的服务的完全限定路径/名称.

where m_strInstallUtil is the fully qualified path and exe to "InstallUtil.exe" and strExePath is the fully qualified path/name to my service.

从提升的命令提示符运行命令行语法有效；从我的应用程序运行(使用上面的代码)没有.我假设我正在处理一些流程提升问题，那么我将如何在提升状态下运行我的流程?我需要为此查看 ShellExecute 吗?

Running the command line syntax from an elevated command prompt works; running from my app (using the above code) does not. I assume I'm dealing with some process elevation issue, so how would I run my process in an elevated state? Do I need to look at ShellExecute for this?

这一切都在 Windows Vista 上.我在提升为管理员权限的 VS2008 调试器中运行该进程.

This is all on Windows Vista. I am running the process in the VS2008 debugger elevated to admin privilege.

我也尝试过设置 startInfo.Verb = "runas"; 但它似乎没有解决问题.

I also tried setting startInfo.Verb = "runas"; but it didn't seem to solve the problem.

推荐答案

您可以通过将 startInfo 对象的 Verb 属性设置为runas"来指示新进程应该以提升的权限启动，如下所示:

You can indicate the new process should be started with elevated permissions by setting the Verb property of your startInfo object to 'runas', as follows:

startInfo.Verb = "runas";

这将导致 Windows 的行为就像是使用以管理员身份运行"菜单命令从资源管理器启动进程一样.

This will cause Windows to behave as if the process has been started from Explorer with the "Run as Administrator" menu command.

这确实意味着会出现 UAC 提示并且需要用户确认:如果这是不合需要的(例如因为它会发生在一个漫长的过程中)，您需要运行整个通过创建和嵌入应用程序清单 (UAC) 提升权限的主机进程要求highestAvailable"执行级别:这将导致在您的应用启动后立即出现 UAC 提示，并导致所有子进程以提升的权限运行，而无需额外提示.

This does mean the UAC prompt will come up and will need to be acknowledged by the user: if this is undesirable (for example because it would happen in the middle of a lengthy process), you'll need to run your entire host process with elevated permissions by Create and Embed an Application Manifest (UAC) to require the 'highestAvailable' execution level: this will cause the UAC prompt to appear as soon as your app is started, and cause all child processes to run with elevated permissions without additional prompting.

我看到您刚刚编辑了您的问题，指出runas"对您不起作用.这真的很奇怪，因为它应该(并且在几个生产应用程序中对我来说也是如此).不过，通过嵌入清单来要求父进程以提升的权限运行应该肯定可行.

I see you just edited your question to state that "runas" didn't work for you. That's really strange, as it should (and does for me in several production apps). Requiring the parent process to run with elevated rights by embedding the manifest should definitely work, though.

这篇关于以编程方式提升进程权限?的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！