Databases
StackOverflow2013
Postsdbo
PO
 

Note that there are some explanatory texts on larger screens.

plurals
  1. PO
    primarykey
    data
    text
    <p>If you want to prevent users from killing the process from task manager, you can just use a security descriptor on the process to deny terminate access to everyone. Administrators technically can still kill the process by taking ownership of the process and resetting the DACL, but there is no interface to do either of these things from Task Manager. <a href="http://technet.microsoft.com/en-us/sysinternals/bb896653.aspx" rel="noreferrer">Process Explorer</a> may have an interface to though.</p> <p>When your process starts, use <a href="http://msdn.microsoft.com/en-us/library/aa379578(VS.85).aspx" rel="noreferrer">SetKernelObjectSecurity</a> with <code>DACL_SECURITY_INFORMATION</code> using the current process handle. Set a DACL with zero ACLs. This will deny all access to everyone, including those trying to end your process with task manager.</p> <p>Here is an example that also changes the process's owner:</p> <pre><code>SECURITY_DESCRIPTOR sd; ACL dacl; SID_IDENTIFIER_AUTHORITY ntauth = SECURITY_NT_AUTHORITY; PSID owner; assert(InitializeAcl(&amp;dacl, sizeof dacl, ACL_REVISION)); assert(AllocateAndInitializeSid(&amp;ntauth, 1, SECURITY_LOCAL_SYSTEM_RID, 0,0,0,0,0,0,0, &amp;owner)); assert(InitializeSecurityDescriptor(&amp;sd, SECURITY_DESCRIPTOR_REVISION)); assert(SetSecurityDescriptorDacl(&amp;sd, TRUE, &amp;dacl, FALSE)); assert(SetSecurityDescriptorOwner(&amp;sd, owner, FALSE)); assert(SetKernelObjectSecurity(GetCurrentProcess(), DACL_SECURITY_INFORMATION | OWNER_SECURITY_INFORMATION, &amp;sd)); assert(FreeSid(owner) == NULL); </code></pre> <p>Unfortunately, it doesn't seem to be effective. I can still close the process (although not as a limited user). Perhaps Task Manager is taking ownership or invoking some other privilege to kill the process? I seem to remember this working in previous versions of Windows (I was testing 2003), but I could be mistaken.</p>
    singulars
    1. This table or related slice is empty.
    1. POHow do I hide a process in Task Manager in C#?
      singulars
      1. PTQuestion
    1. PTAnswer
    1. USChris Smith
    1. USChris Smith
    plurals
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. This table or related slice is empty.
    1. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    2. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    3. VO
      singulars
      1. PO
      1. This table or related slice is empty.
      1. VTUpMod
    1. CO+10. This is definitely worth looking at...Thanks a bunch.
      singulars
      1. PO
      1. USGulzar Nazim
    2. COI've tried to do this in a sample app, but it didn't seem to have any effect (although all of the calls succeeded). I hate to say it, but can you link to some code that does this?
      singulars
      1. PO
      1. USStephen Deken
    3. COI was about to ask the same question. Thanks Stephen.
      singulars
      1. PO
      1. USGulzar Nazim
 

Querying!

 
Guidance
A row detail

Detail views are divided into sections. All the information in the data section comes from columns in the selected row. The other sections display data from other, related rows.

Related data can be related in a to-one or a to-many fashion. Captions of data related in a to-many fashion link to a list view showing a filtered view of the table.

Try moving around until you find a non-empty to-many entry and click on the label to get to one. You can move back to the root by clicking on the database name in the header.

SQuiL has stopped working due to an internal error.

If you are curious you may find further information in the browser console, which is accessible through the devtools (F12).

Reload