Start Windows Service From Application without Admin right(c++)

by

You just need to change the permissions on the service object, preferably at the same time you install it.

wchar_t sddl[] = L"D:"
  L"(A;;CCLCSWRPWPDTLOCRRC;;;SY)"           // default permissions for local system
  L"(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)"   // default permissions for administrators
  L"(A;;CCLCSWLOCRRC;;;AU)"                 // default permissions for authenticated users
  L"(A;;CCLCSWRPWPDTLOCRRC;;;PU)"           // default permissions for power users
  L"(A;;RP;;;IU)"                           // added permission: start service for interactive users
  ;

PSECURITY_DESCRIPTOR sd;

if (!ConvertStringSecurityDescriptorToSecurityDescriptor(sddl, SDDL_REVISION_1, &sd, NULL))
{
   fail();
}

if (!SetServiceObjectSecurity(service, DACL_SECURITY_INFORMATION, sd))
{
   fail();
}

I’m assuming here you’ve already opened the service handle. You need WRITE_DAC permission.

If you also want non-admin users to be able to stop the service, add the WP right, i.e.,

L"(A;;RPWP;;;IU)"                           
  // added permissions: start service, stop service for interactive users

SDDL codes for service rights can be found in Wayne Martin’s blog entry, Service Control Manager Security for non-admins.

More Related Contents:

  1. How does the Import Library work? Details?
  2. strptime() equivalent on Windows?
  3. How can I clear console
  4. Export all symbols when creating a DLL
  5. How do I calculate the week number given a date?
  6. boost_1_60_0 .zip installation in windows
  7. How to read a value from the Windows registry
  8. LPCSTR, LPCTSTR and LPTSTR
  9. c++, usleep() is obsolete, workarounds for Windows/MingW?
  10. know if .lib is static or import
  11. How can I redirect stdout to some visible display in a Windows Application?
  12. DLL redirection using manifests
  13. How to read output from cmd.exe using CreateProcess() and CreatePipe()
  14. Windows/C++: Is it possible to find the line of code where exception was thrown having “Exception Offset”
  15. How do I get the window handle of the desktop?
  16. How do I implement dragging a window using its client area?
  17. What is the purpose of the _chkstk() function?
  18. Clang C++ Cross Compiler – Generating Windows Executable from Mac OS X
  19. How to stop Windows service programmatically
  20. How do I add the MinGW bin directory to my system path?
  21. Programmatically access CPU fan on a laptop? (Windows)
  22. changing the directory from inside a c program under windows using system command
  23. What’s the differences between .dll , .lib, .h files?
  24. VC++ fatal error LNK1168: cannot open filename.exe for writing
  25. Get base address of process
  26. How can CString be passed to format string %s?
  27. EnumDisplayDevices vs WMI Win32_DesktopMonitor, how to detect active monitors?
  28. Install Windows Service created in Visual Studio
  29. “APIENTRY _tWinMain” and “WINAPI WinMain” difference
  30. How do I get at the exception information when using MiniDumpWriteDump out-of-process?

Leave a Comment