Jonas L

or wait- is it in session 0 you try to open`?

Yep tried that one

HANDLE hToken = {}; OpenProcessToken( GetCurrentProcess(), TOKEN_ALL_ACCESS, &hToken ); DuplicateTokenEx( hToken, TOKEN_ALL_ACCESS, nullptr, SecurityAnonymous, TokenPrimary, &hToken ); SetTokenInformation(hToken, TokenSessionId, &sessionId, sizeof(sessionId));

OK so tried just that + ImpersonateLoggedOnUser(hToken); and verified with Process Hacker that that thread is running as Session 2 from a Thread Token it now has. Surprisingly this too fails with the NT Status of AccessDenied = 0xc0000022. Was a good try tho. Idk why it fails!

Not familiar with that or this tool. Can ya link me up and I’ll try this later?

Cool thanks . If I cook up a test project (using C#), do you have the ability to possibly try it out via a second session login (such as thru an RDPWrap mod to work with some windows 10 version). Still need to try the UIAccess thing tho

currently i only have one pc- is it doable then?