CODEWITHSUNDEEP
c++64-bitwinapi
edwinbs
edwinbs

Reputation: 525

Why does the token returned by LogonUser() in Win x64 not belong to LOCAL group?

I have a piece of code that calls LogonUser() followed by CreateProcessAsUser(). In Win32, the resulting process belongs to a user (say, TESTDOMAIN\user1) who belongs to the LOCAL group. However, in x64, the process owner does not belong to LOCAL. The owner still belongs to all other groups (Authenticated Users, Everyone, etc.)

Does anyone know if this is a documented behavior change? Or am I supposed to put some special flag in x64 when calling LogonUser()?

Thanks.

Upvotes: 2

Views: 737

Answers (2)

edwinbs
edwinbs

Reputation: 525

I confirmed this behavior with MSDN support. They cited security reasons for the behavior change.

Upvotes: 1

dexblack
dexblack

Reputation: 551

In no version of MS Windows is there such a thing as a group named "LOCAL". Read this http://technet.microsoft.com/en-us/library/bb726980.aspx Then try being more specific, and correct in your use of the names and terminology.

Please provide more context also: The specific operating system are you using? Is the caller of CreateProcessAsUser a Service?

Upvotes: 0

Related Questions