Seems this is the key: new OBJECT_ATTRIBUTES(hWindowStation, "Default", OBJ_CASE_INSENSITIVE); ... but for some reason not working on another user session. Even with Everyone + Full Control. Will have to dig more on that later
Show this thread
-
HANDLE hToken = {}; OpenProcessToken( GetCurrentProcess(), TOKEN_ALL_ACCESS, &hToken ); DuplicateTokenEx( hToken, TOKEN_ALL_ACCESS, nullptr, SecurityAnonymous, TokenPrimary, &hToken ); SetTokenInformation(hToken, TokenSessionId, &sessionId, sizeof(sessionId));
-
-
OK it may be something access related. I cannot NtOpenDirectoryObject with DIRECTORY_ALL_ACCESS. MAXIMUM_ALLOWED give me only Query, Traverse, Create objects, Read control, Write DAC ... I think this in turn is limited me to what I can open the Window Station with ....
-
And thus cannot enumerate the desktops, since cannot obtain a handle with this access right... NtUserOpenWindowStation(ref oaWinSta0, WINSTA_ENUMDESKTOPS) ... this is surprising with running as SYSTEM and all privileges enabled
End of conversation
New conversation -
Loading seems to be taking a while.
Twitter may be over capacity or experiencing a momentary hiccup. Try again or visit Twitter Status for more information.