Skip to content
  • Categories
  • Recent
  • Tags
  • Popular
  • World
  • Users
  • Groups
Skins
  • Light
  • Cerulean
  • Cosmo
  • Flatly
  • Journal
  • Litera
  • Lumen
  • Lux
  • Materia
  • Minty
  • Morph
  • Pulse
  • Sandstone
  • Simplex
  • Sketchy
  • Spacelab
  • United
  • Yeti
  • Zephyr
  • Dark
  • Cyborg
  • Darkly
  • Quartz
  • Slate
  • Solar
  • Superhero
  • Vapor

  • Default (No Skin)
  • No Skin
Collapse
Code Project
  1. Home
  2. Database & SysAdmin
  3. System Admin
  4. Suppressing "Interact with desktop" property of service

Suppressing "Interact with desktop" property of service

Scheduled Pinned Locked Moved System Admin
helpsecurityquestionworkspace
3 Posts 2 Posters 0 Views 1 Watching
  • Oldest to Newest
  • Newest to Oldest
  • Most Votes
Reply
  • Reply as topic
Log in to reply
This topic has been deleted. Only users with topic management privileges can see it.
  • R Offline
    R Offline
    rana74
    wrote on last edited by
    #1

    We have a windows service which spawns a browser. To enable this operation,the service has been configured to "Interact with Desktop",runig as localsystem account. This does the desired,in most of the windows environments(2000,XP,2003). However,in some of the Windows 2003 boxes(not all),we find no visible browser instance. However,we have confirmed that the browser is indeed spawned under the 'SYSTEM' account through the task manager. This confirms that there is no problem in the execution of the executable as such. We have explicitly set the 'visible' property of the IE browser handle to 'true'. Is there some security setting/configuration that may potentially have been flagged to suppress the 'visibility' of the browser in these specific 2003 hosts? Any help on finding the source of this 'invisibility' of the browser will be much appreciated. Note:This happens only when the browser is spawned from a service.When spwned from command line(interactive),things work fine even in these particular hosts.

    M 1 Reply Last reply
    0
    • R rana74

      We have a windows service which spawns a browser. To enable this operation,the service has been configured to "Interact with Desktop",runig as localsystem account. This does the desired,in most of the windows environments(2000,XP,2003). However,in some of the Windows 2003 boxes(not all),we find no visible browser instance. However,we have confirmed that the browser is indeed spawned under the 'SYSTEM' account through the task manager. This confirms that there is no problem in the execution of the executable as such. We have explicitly set the 'visible' property of the IE browser handle to 'true'. Is there some security setting/configuration that may potentially have been flagged to suppress the 'visibility' of the browser in these specific 2003 hosts? Any help on finding the source of this 'invisibility' of the browser will be much appreciated. Note:This happens only when the browser is spawned from a service.When spwned from command line(interactive),things work fine even in these particular hosts.

      M Offline
      M Offline
      Mike Dimmick
      wrote on last edited by
      #2

      We've found that it can take a system reboot before the interactivity of a newly-installed service starts working. In addition, this only works if you're logged in on the console session (session 0). For Remote Desktop/Terminal Services, run mstsc /console. You should move away from this approach ASAP as Windows Vista and Windows Server 2008 have locked down session 0: you can no longer spawn processes that will appear on the user's desktop.

      DoEvents: Generating unexpected recursion since 1991

      R 1 Reply Last reply
      0
      • M Mike Dimmick

        We've found that it can take a system reboot before the interactivity of a newly-installed service starts working. In addition, this only works if you're logged in on the console session (session 0). For Remote Desktop/Terminal Services, run mstsc /console. You should move away from this approach ASAP as Windows Vista and Windows Server 2008 have locked down session 0: you can no longer spawn processes that will appear on the user's desktop.

        DoEvents: Generating unexpected recursion since 1991

        R Offline
        R Offline
        rana74
        wrote on last edited by
        #3

        Thanks. One clarification - what is the option to do a similar operation on widows vista/2008 server? If we impersonate a logged-on user,though we do not see the browser,it serves the purpose for us. Will impersonating a interactvie user for a process launched from a windows service continue to work in vista/2008? Or will that be clamped on too?

        1 Reply Last reply
        0
        Reply
        • Reply as topic
        Log in to reply
        • Oldest to Newest
        • Newest to Oldest
        • Most Votes


        • Login

        • Don't have an account? Register

        • Login or register to search.
        • First post
          Last post
        0
        • Categories
        • Recent
        • Tags
        • Popular
        • World
        • Users
        • Groups