Question

I want to create process with low integrity level from process with medium integrity level. I found msdn example: Designing Applications to Run at a Low Integrity Level

但它没有在我的系统工作。过程成功启动,但信息箱

"Alpplication failed to initialized properly(0xC0000022 -- STATUS_ACCESS_DENIED) ..." is appeared. Did anybody meet the same problem?

Answer 1

我也这样做。举例来说,SID使用的是不正确的。它应当是“S-1-16-4096”,而不是“S-1-16-1024”。

Answer 2

我夸大了@dyared的回答,因为它帮助我找到了完整的答案。首先,我要提到,我没有专门处理这一问题,这只是我调查结果的总结。

看来,MSDN实例并不与规定的。 source 源代码,S-1-16-1024 The SID used in the example is between EGRability_LEVEL_BELOW_LOW and INTEGRITY_LEVEL_UNTRUSTED:

const wchar_t* GetIntegrityLevelString(IntegrityLevel integrity_level) {
  switch (integrity_level) {
    case INTEGRITY_LEVEL_SYSTEM:
      return L"S-1-16-16384";
    case INTEGRITY_LEVEL_HIGH:
      return L"S-1-16-12288";
    case INTEGRITY_LEVEL_MEDIUM:
      return L"S-1-16-8192";
    case INTEGRITY_LEVEL_MEDIUM_LOW:
      return L"S-1-16-6144";
    case INTEGRITY_LEVEL_LOW:
      return L"S-1-16-4096";
    case INTEGRITY_LEVEL_BELOW_LOW:
      return L"S-1-16-2048";
    case INTEGRITY_LEVEL_UNTRUSTED:
      return L"S-1-16-0";
    case INTEGRITY_LEVEL_LAST:
      return NULL;
  }

此外,正如在S-1-16-4096<>。 • 在Windowsista 上建立“保护模式”程序。

然而,由于获得工作榜样还不够,这并不意味着对每一种情况都足够严格,必须选择适当的诚信度来理解其影响。

友情链接