Search found 5 matches

by nagylzs
Tue Nov 15, 2005 7:40 pm
Forum: madRemote
Topic: Get domain and user name of process
Replies: 9
Views: 28118

Yes, I just said it wrong. BTW you said that CreateRemoteThread doesn't work for other terminal server and fast user switching sessions. Is there a similar issue with CreateProcess? I'm not able to 'RemoteExecute' a 'CreateProcess' call within any terminal based/fast user switching session. But I ca...
by nagylzs
Tue Nov 15, 2005 6:38 pm
Forum: madRemote
Topic: Get domain and user name of process
Replies: 9
Views: 28118

Yes, I tried. In fact, I'm using this sequence: GetCurrentProcess() OpenProcessToken() GetTokenInformation(,TokenUser,) LookupAccountSid() Here is the problem. If I use this from a normal user account, it does not have the rights to do this. So I wrote a service and execute this function remotely wi...
by nagylzs
Tue Nov 15, 2005 9:01 am
Forum: madRemote
Topic: Get domain and user name of process
Replies: 9
Views: 28118

Solution found

Now I tried RemoteExecute with a function that uses LookupUserSID. I had to remove all Delphi related code, and only use Win32 API calls. It took a while, but now it is working like a dream! :-) The only problem is that when I try to use it on a system process, the whole Windows hangs. But I can liv...
by nagylzs
Mon Nov 14, 2005 7:24 pm
Forum: madRemote
Topic: Get domain and user name of process
Replies: 9
Views: 28118

>Can you do it with your own process? I can execute GetUserName in a remote thread to get the user name in that thread. I do it from a win32 service, running under the SYSTEM user account. I use an IPC queue to send requests from an application to the service. For Win2K, it works fine. But when many...
by nagylzs
Mon Nov 14, 2005 6:25 pm
Forum: madRemote
Topic: Get domain and user name of process
Replies: 9
Views: 28118

Get domain and user name of process

Do you know if madRemote is capable of returning the domain/workgroup and user name for a given process id? I was experimenting with OpenProcess, VirtualAllocEx, WriteProcessMemory, CreateRemoteThread but under windows XP it does not work for some processes. madRemote can get almost any information ...