#post-id: 3547-15-21
#original-date: 12.04.2010 Mon
#original-time: 3:21 PM
#original-day: 3547
#original-host: WinXP Prof SP3 (Build 2600)

Научилась брать права. Ну хоть что-то. Правда, я ещё и загружать профиль научилась (функция так и называлась - LoadUserProfile()), но что-то оно работает не совсем так, как нужно. Ну да ладно.

Type LUID
  LowPart As Long
  HighPart As Long
End Type

Type LUID_AND_ATTRIBUTES
  LUID As LUID
  Attributes As Long
End Type

Type TOKEN_PRIVILEGES
  PrivilegeCount As Long
  Privileges As LUID_AND_ATTRIBUTES
End Type

Declare Function LookupPrivilegeValue Lib "AdvAPI32" Alias "LookupPrivilegeValueA" ( _
  ByVal lpSystemName As BStr, _
  ByVal lpName As BStr, _
  ByRef lpLuid As LUID _
) As C_BOOL

Declare Function AdjustTokenPrivileges Lib "AdvAPI32" ( _
  ByVal TokenHandle As API_HANDLE, _
  ByVal DisableAllPrivileges As C_BOOL, _
  ByRef NewState As TOKEN_PRIVILEGES, _
  ByVal BufferLength As Long, _
  ByRef PreviousState As TOKEN_PRIVILEGES, _
  ByRef ReturnLength As Long _
) As C_BOOL

Declare Function AdjustTokenPrivilegesAsAny Lib "AdvAPI32" Alias "AdjustTokenPrivileges" ( _
  ByVal TokenHandle As API_HANDLE, _
  ByVal DisableAllPrivileges As C_BOOL, _
  ByRef NewState As TOKEN_PRIVILEGES, _
  ByVal BufferLength As Long, _
  ByRef PreviousState As Any, _
  ByRef ReturnLength As Any _
) As C_BOOL

Const SE_BACKUP_NAME = "SeBackupPrivilege"
Const SE_RESTORE_NAME = "SeRestorePrivilege"
Const SE_SHUTDOWN_NAME = "SeShutdownPrivilege"
Const SE_ASSIGNPRIMARYTOKEN_NAME = "SeAssignPrimaryTokenPrivilege"
Const SE_DEBUG_NAME = "SeDebugPrivilege"
Const SE_INCREASE_QUOTA_NAME = "SeIncreaseQuotaPrivilege"
Const SE_TCB_NAME = "SeTcbPrivilege"

Const SE_PRIVILEGE_ENABLED_BY_DEFAULT = &H1&
Const SE_PRIVILEGE_ENABLED = &H2&
Const SE_PRIVILEGE_REMOVED = &H4&
Const SE_PRIVILEGE_USED_FOR_ACCESS = &H80000000

Const SE_PRIVILEGE_VALID_ATTRIBUTES = SE_PRIVILEGE_ENABLED_BY_DEFAULT Or _
                                      SE_PRIVILEGE_ENABLED Or _
                                      SE_PRIVILEGE_REMOVED Or _
                                      SE_PRIVILEGE_USED_FOR_ACCESS

Const ERROR_NOT_ALL_ASSIGNED = 1300

'====================================================================
Private Function SetPrivilege(ByVal hToken As API_HANDLE, _
                              ByVal Privilege As BStr, _
                              ByVal EnablePrivilege As Boolean) As Boolean
  Dim TP As TOKEN_PRIVILEGES
  Dim LUID As LUID
  Dim RC As Long
  
  RC = LookupPrivilegeValue(vbNullString, Privilege, LUID)
  If RC = 0 Then
    ajpMain.ErrorDisplayAPI Err.LastDllError, , , "LookupPrivilegeValue() failed!"
    Exit Function
  End If
  
  TP.PrivilegeCount = 1
  TP.Privileges.LUID.HighPart = LUID.HighPart
  TP.Privileges.LUID.LowPart = LUID.LowPart
  If EnablePrivilege Then
    TP.Privileges.Attributes = SE_PRIVILEGE_ENABLED
  Else
    TP.Privileges.Attributes = 0
  End If
  
  ' Enable the privilege or disable all privileges.
  RC = AdjustTokenPrivilegesasany(hToken, C_FALSE, TP, Len(TP), ByVal 0&, ByVal 0&)
  If RC = 0 Then
    ajpMain.ErrorDisplayAPI Err.LastDllError, , , "AdjustTokenPrivileges() failed!"
    Exit Function
  End If
  
  If Err.LastDllError = ERROR_NOT_ALL_ASSIGNED Then
    MsgBox "The token does not have the specified privilege.", vbExclamation
    Exit Function
  End If
  
  SetPrivilege = True
End Function

Как-то так. Правда, пример перекатан из MSDN, но в общем и целом я поняла что к чему.

Смотрите также