Process information

[ranjan_j]

Hi,
I need to extract the information related to processes running in all user context even when I am not running in the administrator context.
I am using OpenProcess call to get process handle. but this call fails when I am not in the administrator context and I try to open a process running in administrator context.
My requirement is -
1. To list all processes running on the machine irrespective of the context I am running in.
2. To extract information about the process as to its start time.
Thanks in advance for the help.


regards,
Ranjan Juneja
Persistent Technologies Pvt Ltd.

[mahanare]

ranjan, have a look at the codeguru and codeproject sites and check the article under "system"
it may be helpful to you.
www.codeguru.com\system
www.codeproject.com\system

it may help u
cheers
mahanare

[mahanare]

http://www.mvps.org/win32/slava/
check this and
http://www.mvps.org/win32/security/
also

cheers
mahanare

[ranjan_j]

Hi Mahanare,
Thanks for your input. But the links could not solve my query completely.
I want to extract information about processes running in any system acount (or running in admin account while I am in non - admin account). All these links use OpenProcess to get process handle. But this call fails in my case (Due to different context). What I want to know is that is what I am asking possible ? if yes how ?

regards,
Ranjan.

[mahanare]

Ranjan, What i feel is Microsoft might be enforcing security concept in a strict way. So You may not be able to get the info about the process running totally. think abt this: u r a restricted user and if you can get all the info then isn't it a breach of security?
No I am not sure about this but telling a probability.
I am also interested doing this kind of work, but as i already of loads of work, i cann't work in this topic, that too i am also a newbie to vc++.

so best wishes for your project.

cheers
mahanare

[ranjan_j]

Hi Mahanare,

I agree with you till a certain extend. I think there should be atleast enough privileges provided so that any user can query information on the process so that atleast basic amount of information can be retrieved about the process. Or there should be a mechanisum to raise self privileges somehow so that you can request enough privileges from the system such that it allows you to query processes running in admin cotext.

regards,
ranjan

[mahanare]

Ranjan Did u check this out?.
when i run this once it was giving a big list (console application)
May be of some use to you.
http://www.codeguru.com/system/PList.html


cheers
mahanare

[the_ENIGMA]

adjust the token attributes of your process,
to allow it to do privileged tasks...

thinz like shutdown,TCB priv lets u act as part of OS,
SeProfileSingleProcessPrivilege for profiling processes..

openprocesstocken, and adjusttoken stuff.

but still, if you are in guest level account,
2K won't allow you to adjust the token attributes...
so your process atleast need to be half good...