[英]WMI ConnectServer to ROOT\CIMV2 returns 'Access Denied' for C++ Application but works fine for C# Application
I am following this article to query for WMI. 我下面这个文章来查询WMI。 The intension is to get details of running processes by using the query Select * from Win32_Process
, once the query succeeds, iterate over the result. 目的是通过使用查询Select * from Win32_Process
获得正在运行的进程的详细信息,查询成功后,将遍历结果。 But during the call to pLoc->ConnectServer(_bstr_t(L"\\\\ROOT\\\\CIMV2"), NULL, NULL,0,NULL,0,0,&pSvc);
但是在调用pLoc->ConnectServer(_bstr_t(L"\\\\ROOT\\\\CIMV2"), NULL, NULL,0,NULL,0,0,&pSvc);
, i get HRESULT_FROM_WIN32(ERROR_SERVICE_DOES_NOT_EXIST) : The specified service does not exist as an installed service.
,我得到HRESULT_FROM_WIN32(ERROR_SERVICE_DOES_NOT_EXIST) : The specified service does not exist as an installed service.
I have checked for permissions on WMI Control in compmgmt.msc
and it seems to be fine. 我已经在compmgmt.msc
检查了WMI Control的权限,这似乎很好。 I tried to run the application as an Administrator with the same result. 我试图以管理员身份运行该应用程序,但结果相同。
EDIT Code 编辑代码
HRESULT hres;
// Initialize COM.
hres = CoInitializeEx(0, COINIT_MULTITHREADED);
if (FAILED(hres))
{
cout << "Failed to initialize COM library. "
<< "Error code = 0x"
<< hex << hres << endl;
return 1; // Program has failed.
}
// Initialize
hres = CoInitializeSecurity(
NULL,
-1, // COM negotiates service
NULL, // Authentication services
NULL, // Reserved
RPC_C_AUTHN_LEVEL_DEFAULT, // authentication
RPC_C_IMP_LEVEL_IMPERSONATE, // Impersonation
NULL, // Authentication info
EOAC_NONE, // Additional capabilities
NULL // Reserved
);
if (FAILED(hres))
{
cout << "Failed to initialize security. "
<< "Error code = 0x"
<< hex << hres << endl;
CoUninitialize();
return 1; // Program has failed.
}
// Obtain the initial locator to Windows Management
// on a particular host computer.
IWbemLocator *pLoc = 0;
hres = CoCreateInstance(
CLSID_WbemLocator,
0,
CLSCTX_INPROC_SERVER,
IID_IWbemLocator, (LPVOID *)&pLoc);
if (FAILED(hres))
{
cout << "Failed to create IWbemLocator object. "
<< "Error code = 0x"
<< hex << hres << endl;
CoUninitialize();
return 1; // Program has failed.
}
IWbemServices *pSvc = 0;
// Connect to the root\cimv2 namespace with the
// current user and obtain pointer pSvc
// to make IWbemServices calls.
hres = pLoc->ConnectServer(
_bstr_t(L"\\ROOT\\CIMV2"), // WMI namespace
NULL, // User name
NULL, // User password
0, // Locale
NULL, // Security flags
0, // Authority
0, // Context object
&pSvc // IWbemServices proxy
);
if (FAILED(hres))
{
cout << "Could not connect. Error code = 0x"
<< hex << hres << endl;
pLoc->Release();
CoUninitialize();
return 1; // Program has failed.
}
cout << "Connected to ROOT\\CIMV2 WMI namespace" << endl;
// Set the IWbemServices proxy so that impersonation
// of the user (client) occurs.
hres = CoSetProxyBlanket(
pSvc, // the proxy to set
RPC_C_AUTHN_WINNT, // authentication service
RPC_C_AUTHZ_NONE, // authorization service
NULL, // Server principal name
RPC_C_AUTHN_LEVEL_CALL, // authentication level
RPC_C_IMP_LEVEL_IMPERSONATE, // impersonation level
NULL, // client identity
EOAC_NONE // proxy capabilities
);
if (FAILED(hres))
{
cout << "Could not set proxy blanket. Error code = 0x"
<< hex << hres << endl;
pSvc->Release();
pLoc->Release();
CoUninitialize();
return 1; // Program has failed.
}
// Use the IWbemServices pointer to make requests of WMI.
// Make requests here:
// For example, query for all the running processes
IEnumWbemClassObject* pEnumerator = NULL;
hres = pSvc->ExecQuery(
bstr_t("WQL"),
bstr_t("SELECT * FROM Win32_Process"),
WBEM_FLAG_FORWARD_ONLY | WBEM_FLAG_RETURN_IMMEDIATELY,
NULL,
&pEnumerator);
if (FAILED(hres))
{
cout << "Query for processes failed. "
<< "Error code = 0x"
<< hex << hres << endl;
pSvc->Release();
pLoc->Release();
CoUninitialize();
return 1; // Program has failed.
}
else
{
IWbemClassObject *pclsObj;
ULONG uReturn = 0;
while (pEnumerator)
{
hres = pEnumerator->Next(WBEM_INFINITE, 1,
&pclsObj, &uReturn);
if (0 == uReturn)
{
break;
}
VARIANT vtProp;
// Get the value of the Name property
hres = pclsObj->Get(L"Name", 0, &vtProp, 0, 0);
wcout << "Process Name : " << vtProp.bstrVal << endl;
VariantClear(&vtProp);
pclsObj->Release();
pclsObj = NULL;
}
}
// Cleanup
// ========
pSvc->Release();
pLoc->Release();
pEnumerator->Release();
CoUninitialize();
return 0; // Program successfully completed.
} }
I have an similar code base in C# too. 我在C#中也有类似的代码库。 I am using the ObjectQuery
to form the sql query and ManagementObjectSearcher
to get the result back. 我正在使用ObjectQuery
形成sql查询,并使用ManagementObjectSearcher
来获取结果。 The query that i use is slightly different Select * from Win32_Process Where ProcessID = '" + PID + "'
. 我使用的查询略有不同Select * from Win32_Process Where ProcessID = '" + PID + "'
。 PID is passed by iterating over the result of Process.GetProcesses()
. 通过对Process.GetProcesses()
的结果进行迭代来传递PID。 This C# application works fine and i am able to see the details of all the processes running. 这个C#应用程序工作正常,我能够看到所有正在运行的进程的详细信息。
EDIT Code 编辑代码
ObjectQuery sq = new ObjectQuery
("Select * from Win32_Process Where ProcessID = '" + PID + "'");
ManagementObjectSearcher searcher = new ManagementObjectSearcher(scope, sq);
if (searcher == null)
{
Console.WriteLine("Searcher is empty...returning");
return String.Empty;
}
if (searcher.Get().Count == 0)
return OwnerSID;
foreach (ManagementObject oReturn in searcher.Get())
{
using (ManagementObjectCollection oReturnC = searcher.Get())
{
FullPath = (from mo in oReturnC.Cast<ManagementObject>() select mo["ExecutablePath"]).First().ToString();
CommandLine = (from mo in oReturnC.Cast<ManagementObject>() select mo["CommandLine"]).First().ToString();
parentprocessid = (from mo in oReturnC.Cast<ManagementObject>() select mo["ParentProcessId"]).First().ToString();
ppid = Convert.ToInt32(parentprocessid);
Process parentProcess = Process.GetProcessById(ppid);
ppname = parentProcess.ProcessName;
}
}
Another strange behavior i found is when i change the C# from Application to a dll, and use this dll in a C++ application(legacy reasons) following this , i get the same error - The specified service does not exist as an installed service
. 另一个奇怪的现象,我发现是,当我从应用程序中更改C#的DLL,并在下面的C ++应用程序(遗留原因)使用此DLL 此 ,我得到了同样的错误- The specified service does not exist as an installed service
。
I have googled a lot and couldn't find any solution to this problem. 我已经在Google上搜索了很多,找不到任何解决此问题的方法。 Is there any reason why C# is able to access the WMI and not C++. 有什么原因使C#能够访问WMI而不是C ++。
下页指示在连接到本地系统时不要使用前导\\: https : //docs.microsoft.com/zh-cn/windows/desktop/wmisdk/creating-a-connection-to-a-wmi-namespace
声明:本站的技术帖子网页,遵循CC BY-SA 4.0协议,如果您需要转载,请注明本站网址或者原文地址。任何问题请咨询:yoyou2525@163.com.