How can createprocessasuser still need a password?
First, Wtsgetactiveconsolesessionid get the current processing activation state SessionID
OpenProcessToken get token of service process
Duplicatetokenex Copy a token
Settokeninformation uses this function to set the session ID of the token to be copied to the SessionID that is activated above.
CreateProcessAsUser Create a user process using the SessionID that you just set up SessionID, this process is created by the user who is logged on,
------------------------------------------------------------------------------------------------
You can try this, using CreateRemoteThread () to create a remote thread execution CreateProcess () in the Explorer.exe process
------------------------------------------------------------------------------------------------
Createprocesswithtoken is possible, but XP does not support this function
In addition, the system permission to use this function can make the created process user into administrator, but not the session ID is still the system
Calling Settokeninformation doesn't seem to work either.
http://bbs.csdn.net/topics/390248917
Create a new process, three functions CreateProcessAsUser createprocesswithlogonw createprocesswithtokenw (with user's process)