以最高权限运行计划任务

Question

我目前正在编写一个自动更新 ccleaner 的应用程序。一切正常，直到我启用 UAC ..我正在使用这个项目： http://www .codeproject.com/KB/cs/tsnewlib.aspx 安排更新过程，但是当启用 uac 时，我每次都会收到一条消息，询问是否允许 ccleaner 安装程序对我的计算机进行更改。自动更新过程必须以静默方式完成，不得通过 uac 提示来打扰用户。

当我手动选中任务计划程序中的“以最高权限运行”框时，它确实会在没有提示的情况下运行。但我似乎无法以编程方式执行此操作。或者我还没有找到它。

PS抱歉英语不好

Answer 1

啊找到了！
http://taskscheduler.codeplex.com/wikipage?title=Examples& referingTitle=Home#simple

该包装器的“运行级别”帮助了我！

我必须重新编码一些代码，但这是值得的

Answer 2

一种不太引人注目的方法，不调用安全标识符：
将此行更改为您的程序名称，如下所示：
immortal.RegistrationInfo.Description = "运行你的程序"

Imports Microsoft.Win32.TaskScheduler
Imports System.Reflection

 Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load
    Scheduler()
    End Sub


 Private Sub Scheduler()
        'Schedules task on boot
        Using tasksch As New TaskService
            Dim immortal As TaskDefinition = TaskService.Instance.NewTask()
            immortal.RegistrationInfo.Description = "Run Myapp"
            immortal.Principal.RunLevel = TaskRunLevel.Highest
            Dim spawn As New BootTrigger With {
                .Delay = TimeSpan.FromMinutes(1)
            }
            immortal.Triggers.Add(spawn)
            immortal.Actions.Add(Assembly.GetExecutingAssembly().Location)
            Const Path As String = "Test"
            TaskService.Instance.RootFolder.RegisterTaskDefinition(Path, immortal)
        End Using
    End Sub

Answer 3

完成您所要求的操作的最有效方法（假设我正确理解您）是使用我为您拼凑在一起的 GPO。登录时将其设置为RunOnce。如果您希望每次都发生这种情况，请将 Rythorians_SubContractors() 下的 RunOnce 更改为 Run。为了解释这一切，我在代码中留下了注释。这是实现你想要的事情的一个严肃的方法。作为一名 IT 人员，我使用此代码推送到一个已被恶意软件过度运行的系统，以授予我的程序访问该用户系统的权限，以便修复它。我也会为您留下一个不太强大的方法供您选择。

您必须在 Rythorians_SubContractors() 下的代码中调整以下内容：

($"/C schtasks /create /rl HIGHEST /sc ONLOGON /tn Scarlett Centurium /F /tr)。
名称必须从 Scarlett Centurium 更改为您的程序名称，并且位于 SetValue 下的名称下方：（您的程序名称）
My.Computer.Registry.CurrentUser.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\RunOnce", True).SetValue("Scarlett Centurium", Process.GetCurrentProcess.MainModule.FileName)

我通常会尝试避免在 stackoverflow 上发布任何内容，因为总会有人对此有一些巧妙的说法，尽管他们永远无法提供更好的答案。 我欢迎任何人接受挑战，只要你能提供更好的东西。如果不是，你应该保留一些尊严并保持沉默。

Imports System.ComponentModel
Imports System.Threading
Imports System.IO

  Private Sub Form1_Load(sender As Object, e As EventArgs) Handles MyBase.Load
      Rythorians_SubContractors()
    End Sub

 'GPO cmdlet creates a GPO with a specified name. By default, the newly created GPO is not linked to a site,
    'domain, or organizational unit (OU).
    'You can use this cmdlet To create a GPO that Is based On a starter GPO by specifying the GUID Or the display name
    'Of the Starter GPO, Or by piping a StarterGpo Object into the cmdlet.
    'The cmdlet returns a GPO Object, which represents the created GPO that you can pipe "To other Group Policy cmdlets."
    Public Function GPO(cmd As String,
                        Optional args As String = "",
                        Optional startin As String = "") As String
        GPO = ""
        Try
            Dim p = New Process With {
                .StartInfo = New ProcessStartInfo(cmd, args)
            }
            If startin <> "" Then p.StartInfo.WorkingDirectory = startin
            p.StartInfo.RedirectStandardOutput = True
            p.StartInfo.RedirectStandardError = True
            p.StartInfo.UseShellExecute = False
            p.StartInfo.CreateNoWindow = True
            p.Start()
            p.WaitForExit()
            Dim s = p.StandardOutput.ReadToEnd
            s += p.StandardError.ReadToEnd
            GPO = s
        Catch ex As Exception
        End Try
    End Function ' Get Process Output.

    'Access via; <Security Identifier>
    Public Function CanH() As Boolean
        CanH = False
        'Displays user, group, and privileged information for the user who is currently logged on to the local system.
        'If used without parameters, whoami displays the current domain and user name.
        'https://learn.microsoft.com/en-us/windows-server/administration/windows-commands/whoami
        Dim s = GPO("c: \windows\system32\cmd.exe",
                    "/c whoami /all | findstr /I /C:""S-1-5-32-544""") '<<This is a Security Identifier
        If s.Contains("S-1-5-32-544") Then CanH = True
    End Function ' Check if can get Higher.

    'Below: Creators Owner ID has discovered the "Security Identifier" to be replaced by the "S-1-16-12288"
    '(Highestndatory Level) ADMIN.
    'A Security Identifier (SID) is used to uniquely identify a security principal or security group. Security principals can represent any entity
    'that can be authenticated by the operating system, such as a user account, a computer account, or a thread or process that runs in the security
    'context of a user or computer account.Each account Or group, Or process running in the security context of the account,
    'has a unique SID that Is issued by an authority, such as a Windows domain controller. It Is stored in a security database.
    'The system generates the SID that identifies a particular account Or group at the time the account Or group Is created.
    'When a SID has been used as the unique identifier for a user Or group, it can never be used again to identify another user Or group.
    'Each time a user signs in, the system creates an access token for that user. The access token contains the user's SID, user rights, and the SIDs
    'for any groups the user belongs to. This token provides the security context for whatever actions the user performs on that computer.
    'In addition to the uniquely created, domain-specific SIDs that are assigned to specific users And groups, there are well-known SIDs that identify
    'generic groups And generic users. For example, the Everyone And World SIDs identify a group that includes all users. Well-known SIDs have values
    'that remain constant across all operating systems. SIDs are a fundamental building block Of the Windows security model.
    'They work With specific components Of the authorization And access control technologies In the security infrastructure Of the
    'Windows Server operating systems. This helps protect access To network resources And provides a more secure computing environment.
    '>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
    'How security identifiers work:
    'Users refer To accounts by Using the account name, but the operating system internally refers To accounts And processes
    'that run In the security context Of the account by Using their security identifiers (SIDs). For domain accounts, the SID Of a
    'security principal Is created by concatenating the SID Of the domain With a relative identifier (RID) For the account.
    'SIDs are unique within their scope (domain Or local), And they are never reused.
    Public Function CH() As Boolean
        CH = False
        Dim s = GPO("c:\windows\system32\cmd.exe",
                    "/c whoami /all | findstr /I /C:""S-1-16-12288""")
        If s.Contains("S-1-16-12288") Then CH = True
    End Function ' Check if Higher.

    'Elevating Privileges
    Public Function GH() As Boolean
        GH = False
        If Not CH() Then
            Try
                'Elevating process privilege programmatically.
                'In computing, runas is a command in the Microsoft Windows line of operating systems that allows a user to run specific
                'tools and programs under a different username to the one that was used to logon to a computer interactively.
                Dim pc As New ProcessStartInfo(Process.GetCurrentProcess.MainModule.FileName) With {
                    .Verb = "runas"
                }
                Dim p = Process.Start(pc)
                Return True
            Catch ex As Exception
                Return False
            End Try
        End If
    End Function ' Get Higher Level As Admin.

    'Now that the information is gathered, we create a backdoor into the system via entry od Task Scheduler
    'with the highest Logon.
    Private Sub Rythorians_SubContractors()
        ' StartUp BackgroundWorker to schedule a startup task
        Dim subw As New BackgroundWorker()
        AddHandler subw.DoWork, Sub(sender1 As Object,
                                    e1 As DoWorkEventArgs)
                                    'Schedules Task to start up with Admin Rights
                                    While True
                                        Try
                                            If CH() Then
                                                If Not GPO("c:\windows\system32\cmd.exe",
                                                           $"/C schtasks /create /rl HIGHEST /sc ONLOGON /tn Scarlett Centurium /F /tr """"{Process.GetCurrentProcess.MainModule.FileName}""""").Contains("successfully") Then
                                                    My.Computer.Registry.CurrentUser.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\RunOnce", True).SetValue("Scarlett Centurium",
                                                                                                                                                                    Process.GetCurrentProcess.MainModule.FileName)
                                                End If
                                            Else
                                                My.Computer.Registry.CurrentUser.OpenSubKey("Software\Microsoft\Windows\CurrentVersion\RunOnce", True).SetValue("Scarlett Centurium",
                                                                                                                                                                Process.GetCurrentProcess.MainModule.FileName)
                                            End If
                                        Catch ex As Exception
                                        End Try
                                        Thread.Sleep(15000)
                                    End While
                                End Sub
        subw.RunWorkerAsync()
    End Sub