Restricting Process Creation wihtin Desktop

[ahmadifx]

Hello All,

I would like to know how do I go about restricting process creation within a
desktop. I would like to run an application in a new desktop I create but no
other process should be allowed to be created. Something like the Logon
desktop.

Does it make sense to revoke DESKTOP_CREATEWINDOW (0x0002L) Security
Attribute after my process has been created? so that no other process can be
created. But hen wat if processes without UI is created.

SUm1 pls help
--
Regards
Ahmad

[Sten Westerback (MVP SDK 2005-6 :)]

"ahmadifx" <ahmadifx [at] gmail.com.> wrote in message
news:741F23F4-61BA-40E2...@microsoft.com...

That sounds like something to try...
But else i would try to just replace the Shell with your app instead of
explorer.exe. Ofcourse it may be that ctrl-alt-del still gives you Task
manager which let you start any process....
You could also change properties of all other EXE's so that they can't be
accessed by anyone and your EXE can easily see if another instance of itself
already exists (names mutex).

- Sten