一个简单的以User权限启动外部应用程序

BOOL ExecuteAsUser(LPCWSTR lpszUserName, LPCWSTR lpszPassword, LPCWSTR lpszApplication, LPCWSTR lpszCmdLine){if(NULL == lpszUserName){return FALSE;}if(NULL == lpszApplication){return FALSE;}BOOL bRet = FALSE;WCHAR* pUserName = NULL;WCHAR* pPassword = NULL;STARTUPINFO si = {sizeof(si)};PROCESS_INFORMATION pi = {0};WCHAR szApp[MAX_PATH * 2] = {0};// Check User Namesize_t nLen = wcslen(lpszUserName) + 1;pUserName = new WCHAR[nLen];StringCchPrintfW(pUserName, nLen, L"%s", lpszUserName);// Check PasswordnLen = (NULL != lpszPassword) ? (wcslen(lpszPassword) + 1) : 2;pPassword = new WCHAR[nLen];StringCchPrintfW(pPassword, nLen, L"%s", (NULL != lpszPassword) ? lpszPassword : L"");USER_INFO_1 ui;DWORD dwError = 0;DWORD dwLevel = 1;ui.usri1_name = pUserName;ui.usri1_password = pPassword;ui.usri1_priv = USER_PRIV_USER;ui.usri1_home_dir = NULL;ui.usri1_comment = NULL;ui.usri1_flags = UF_SCRIPT;ui.usri1_script_path = NULL;// Add Userif(NERR_Success != NetUserAdd(NULL, dwLevel, (LPBYTE)&ui, &dwError)){goto _END_;}if((NULL != lpszCmdLine) && wcslen(lpszCmdLine))StringCchPrintfW(szApp, _countof(szApp), L"%s %s", lpszApplication, lpszCmdLine);elseStringCchPrintfW(szApp, _countof(szApp), L"%s", lpszApplication);if(CreateProcessWithLogonW(lpszUserName, NULL, lpszPassword, LOGON_WITH_PROFILE, NULL, szApp, 0, NULL, NULL, &si, &pi)){bRet = TRUE;CloseHandle(pi.hThread);CloseHandle(pi.hProcess);}else{dwError = GetLastError();goto _CLEANUP_;}bRet = TRUE;_CLEANUP_:// Delete UserNetUserDel(NULL, lpszUserName);_END_:if(NULL != pPassword){delete[] pPassword;pPassword = NULL;}if(NULL != pUserName){delete[] pUserName;pUserName = NULL;}return bRet;}// 测试代码#include "stdafx.h"#include <Windows.h>#include <lm.h>#include <strsafe.h>#pragma comment(lib, "Netapi32.lib")int _tmain(int argc, _TCHAR* argv[]){ExecuteAsUser(L"ABC", L"Hello", L"F:\\11.exe", NULL);return 0;}