Check membership of a group from user’s process access token
Question may be, I need to check If the user belong to a particular group or not? There are NetUser* APIs available in NetApi32.lib to list the groups a user belong to a group. You can actually check...
View ArticleWeb application gets Access Denied accessing a Named Pipe.
Recently, I was troubleshooting a problem for one of my customers. A named pipe created by a native C application was not accessible by web client. The actual product is a convention Windows...
View ArticleDealing with Administrator and standard user’s context
With introduction of UAC, I often get two questions for Windows Vista and later.1) How to launch an application in the Administrative context from an application which is running in standard...
View ArticleHow to launch a process interactively from a Windows Service?
Launching an interactive process from a service used to be straight forward. You could either configure your service to be interactive or you could specify “Winsta0\\Default” as the desktop (in...
View ArticleHow to programmatically create a LogonService or Network Service token with...
A lot of Developers have asked if it is possible to generate a token that represents the Local Service or Network Service account without stealing a token. You can programmatically generate atoken...
View ArticleHow to launch a process as a different user without storing their credentials?
You may run into a situation where you need to create a token to be used at a later time since you can’t keep the credentials around in your application. The token representing the user is going to be...
View ArticleThe mysteries of WindowsPrincipal.IsInRole
WindowsPrincipal.IsInRole method is defined as the following in MSDN (http://msdn.microsoft.com/en-us/library/system.security.principal.windowsprincipal.isinrole(v=vs.110).aspx )"Determines whether the...
View ArticleDon't forget Integrity Levels when troubleshooting "Access Denied" errors
Anyone who has used Windows has encountered the dreaded "Access Denied" error. (AKA error code 5 or 0x5). This error typically implies you can't do something like open or save a file. The error...
View ArticleVirtual Desktop Switching in Windows 10
Windows 10 introduces a new concept (for Windows anyway) called Virtual Desktops. Currently, the guidance for this on MSDN states: The user can group a collection of windows together to create a...
View ArticleFileSystemWatcher Fencing(Part 2)
This post is a follow up to the FileSystemWatcher Follies post. I received a lot of feedback that it would be useful to highlight what would be appropriate to guide against some of the pitfalls that...
View ArticleWindows Hotfixes for October 2015
Jeff here from the Windows SDK team. Here is the list of October 2015 Hotfixes [Drum roll, please…] KB3030736 “550 The process cannot access the file” error when you try to download a file in Windows...
View ArticleHotfixes for November 2015
Jeff here from the SDK team. Here are the hotfixes for November 2015. KB3040017 XPS driver is slower than GDI driver to print files in Windows KB3063109 Virtual machine crashes and WAL consistency...
View ArticleUsing SHA256 with the SignedXml Class
With the industry moving away from SHA1 including Microsoft (see...
View ArticleSHA-1 Code Signing Deprecation in Windows beginning January 1, 2016
This post is to help the product team spread the word on Windows (version 7 and higher) and Windows Server will no longer trust any code that is signed with a SHA-1 code signing certificate and that...
View ArticleHotfixes for December 2015
Jeff here, from the SDK team with the Holiday Hotfixes. Happy patching. KB2920591 High CPU usage and performance issues occur when access-based enumeration is enabled in Windows 7 Service Pack 1 or...
View ArticleWhy CryptCATAdminCalcHashFromFileHandle fails with a seemingly unexpected...
CryptCATAdminCalcHashFromFileHandle can fail when evaluating a file path to an executable while setting the last error code to 0x800700c1. It’s an HRESULT instead of just an error code, but the...
View ArticleHotfix for January 2016
Jeff here from the SDK team. This month there is only 1 public hotfix because of the holidays. 3047331 “0x00000050″ Stop error on a failover cluster that is running Windows Server 2012 R2 or...
View ArticleHotfix List for February 2016
Hi guys, Jeff here from the Windows SDK team. Here are the Windows hotfixes for February 2016. KB3007507 “HTTP Error 500.19″ error when you browse an IIS 8.5 website in Windows KB3090343 Cluster...
View ArticleWhy does SqlDataReader behave differently with Set-PSDebug enabled?
We recently had someone ask why their PowerShell script stopped working correctly when they enabled tracing with the command Set-PSDebug -Trace 2. The part of the code in question that didn’t work...
View ArticleVisual Studio Team Services and Personal Microsoft Accounts
Visual Studio Team Services and Personal Microsoft Accounts 10/5/2016 Update – Due to the unexpectedly high impact to many corporate VSTS accounts backed by Personal Microsoft accounts, VSTS accounts...
View Article