21pages ec042434be
use sihost.exe as fallback for run_as_user if no explorer.exe (#8305)
* There is no relevant information, but I found that each session has a unique sihost.exe, and the user name of the process is consistent with the user name of the session, and after using the task manager to kill this process, it will automatically restart. Checking sessionUserName=siHost UserName may be unnecessary, but since there is no evidence, check it anyway.
* GetFallbackUserPid is called only when explorer.exe does not exist.
* ProcessHacker shows that the tokens of explorer.exe and sihost.exe are the same, I know little about it.

Signed-off-by: 21pages <pages21@163.com>
2024-06-10 20:29:53 +08:00
..
2024-06-08 20:51:06 +08:00
2024-04-25 11:46:21 +08:00
2024-03-20 20:00:29 +08:00
2023-06-29 20:44:50 +08:00
2024-04-25 11:46:21 +08:00
2024-06-05 23:11:44 +08:00
2024-04-25 11:46:21 +08:00
2023-11-29 20:58:40 +08:00
2024-04-10 00:23:45 +08:00
2024-03-13 21:12:04 +08:00
2024-04-25 11:46:21 +08:00
2024-01-22 19:57:23 +08:00
2024-05-10 15:12:07 +08:00