■ Thread 클래스를 사용해 특정 사용자 권한으로 스레드를 실행하는 방법을 보여준다.
▶ SECURITY_IMPERSONATION_LEVEL.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 |
namespace TestProject { /// <summary> /// 보안 가장 레벨 /// </summary> public enum SECURITY_IMPERSONATION_LEVEL { /// <summary> /// SecurityAnonymous /// </summary> SecurityAnonymous = 0, /// <summary> /// SecurityIdentification /// </summary> SecurityIdentification = 1, /// <summary> /// SecurityImpersonation /// </summary> SecurityImpersonation = 2, /// <summary> /// SecurityDelegation /// </summary> SecurityDelegation = 3 } } |
▶ TOKEN_TYPE.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 |
namespace TestProject { /// <summary> /// 토큰 타입 /// </summary> public enum TOKEN_TYPE { /// <summary> /// TokenPrimary /// </summary> TokenPrimary = 1, /// <summary> /// TokenImpersonation /// </summary> TokenImpersonation = 2 } } |
▶ Program.cs
|
1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 |
using System; using System.Runtime.InteropServices; using System.Security.Principal; using System.Threading; namespace TestProject { /// <summary> /// 프로그램 /// </summary> class Program { //////////////////////////////////////////////////////////////////////////////////////////////////// Import ////////////////////////////////////////////////////////////////////////////////////////// Static //////////////////////////////////////////////////////////////////////////////// Private #region 사용자 로그온하기 - LogonUser(userName, domain, password, logonType, logonProvider, userToken) /// <summary> /// 사용자 로그온하기 /// </summary> /// <param name="userName">사용자명</param> /// <param name="domain">도메인</param> /// <param name="password">패스워드</param> /// <param name="logonType">로그온 타입</param> /// <param name="logonProvider">로그온 공급자</param> /// <param name="userToken">사용자 토큰</param> /// <returns>처리 결과</returns> [DllImport("advapi32", EntryPoint = "LogonUser", SetLastError = true)] private static extern bool LogonUser(string userName, string domain, string password, int logonType, int logonProvider, out IntPtr userToken); #endregion #region 토큰 복제하기 (확장) - DuplicateTokenEx(existingTokenHandle, desiredAccess, threadAttributeHandle, tokenType, impersonationLevel, duplicateTokenHandle) /// <summary> /// 토큰 복제하기 (확장) /// </summary> /// <param name="existingTokenHandle">기존 토클 핸들</param> /// <param name="desiredAccess">희망 액세스</param> /// <param name="threadAttributeHandle">스레드 어트리뷰트 핸들</param> /// <param name="tokenType">토큰 타입</param> /// <param name="impersonationLevel">가장 레벨</param> /// <param name="duplicateTokenHandle">복제 토큰 핸들</param> /// <returns>처리 결과</returns> [DllImport("advapi32", EntryPoint = "DuplicateTokenEx")] private static extern bool DuplicateTokenEx ( IntPtr existingTokenHandle, uint desiredAccess, IntPtr threadAttributeHandle, int tokenType, int impersonationLevel, ref IntPtr duplicateTokenHandle ); #endregion #region 스레드 토큰 설정하기 - SetThreadToken(threadHandle, tokenHandle) /// <summary> /// 스레드 토큰 설정하기 /// </summary> /// <param name="threadHandle">스레드 핸들</param> /// <param name="tokenHandle">토큰 핸들</param> /// <returns>처리 결과</returns> [DllImport("advapi32", SetLastError = true)] [return: MarshalAs(UnmanagedType.Bool)] private static extern bool SetThreadToken(IntPtr threadHandle, IntPtr tokenHandle); #endregion //////////////////////////////////////////////////////////////////////////////////////////////////// Method ////////////////////////////////////////////////////////////////////////////////////////// Static //////////////////////////////////////////////////////////////////////////////// Private #region 프로그램 시작하기 - Main() /// <summary> /// 프로그램 시작하기 /// </summary> private static void Main() { Console.WriteLine($"Main 함수 : {WindowsIdentity.GetCurrent().Name}"); IntPtr userTokenHandle; LogonUser("user2", ".", "password2", 8, 0, out userTokenHandle); IntPtr copyUserTokenHandle = IntPtr.Zero; DuplicateTokenEx ( userTokenHandle, 0, IntPtr.Zero, (int)SECURITY_IMPERSONATION_LEVEL.SecurityImpersonation, (int)TOKEN_TYPE.TokenImpersonation, ref copyUserTokenHandle ); Thread thread = new Thread(new ParameterizedThreadStart(ExecuteThread)); thread.Start(copyUserTokenHandle); } #endregion #region 스레드 실행하기 - ExecuteThread(parameter) /// <summary> /// 스레드 실행하기 /// </summary> /// <param name="parameter">매개 변수</param> private static void ExecuteThread(object parameter) { IntPtr userTokenHandle = (IntPtr)parameter; SetThreadToken(IntPtr.Zero, userTokenHandle); WindowsIdentity windowsIdentity = WindowsIdentity.GetCurrent(); Console.WriteLine($"ProcessThread 함수 : {WindowsIdentity.GetCurrent().Name}"); } #endregion } } |
