I have made a service which can launch interactive progs connected to
selectable desktops. Therefore I logon a user, try to add
access-allowed-aces of the logon-session to both the selected winsta and
desktop and call CreateProcessAsUser(...). Upun service stop I remove
the previously added aces.
Everything works as expected when I start the service from service applet.
When the service ist started upon system startup automatically it seems
as if appending the ace mostly to winsta0 doesn't work as expected: when
I try to remove the aces from the winsta my previously added ace can't
be found.
Can this be an access-problem arosen from conflicting access to
winsta0\default?
- How can access to Dacls synchronized with other processes which try
the same as I do?
- are there other issues regarding adding aces to winstas?
I would like to launch an app on Winsta0\Winlogon, so that some
information can be displayed to the user wo logging in.
Yes, I'm aware of the security risks, but those ain't important to my
environment!
Thanks in advance!