如何強制某個應用程序不能以管理員身份運行

Question

是否可以禁用以管理員身份運行的應用程序，以允許其僅以本地用戶身份運行。

Answer 1

我不認爲你可以阻止以管理員身份啓動進程;但是，您可以檢查它是否正在使用提升的特權執行，如果是這種情況，請退出。

static bool IsRunningWithElevatedPrivileges() 
    { 
     IntPtr hToken; 
     int sizeofTokenElevationType = Marshal.SizeOf(typeof(int)); 
     IntPtr pElevationType = 
      Marshal.AllocHGlobal(sizeofTokenElevationType); 

     if (OpenProcessToken(GetCurrentProcess(), TokenQuery, out hToken)) 
     { 
      uint dwSize; 
      if (GetTokenInformation(hToken, 
       TokenInformationClass.TokenElevationType, pElevationType, 
       (uint)sizeofTokenElevationType, out dwSize)) 
      { 
       TokenElevationType elevationType = (TokenElevationType)Marshal.ReadInt32(pElevationType); 
       Marshal.FreeHGlobal(pElevationType); 

       switch (elevationType) 
       { 
        case TokenElevationType.TokenElevationTypeFull: 
         return true; 
        default: 
         //case TokenElevationType.TokenElevationTypeLimited: 
         //case TokenElevationType.TokenElevationTypeDefault: 
         return false; 
       } 
      } 
     } 

     return false; 
    } 

    [DllImport("kernel32.dll")] 
    static extern IntPtr GetCurrentProcess(); 

    [DllImport("advapi32.dll", SetLastError = true)] 
    static extern bool OpenProcessToken(
     IntPtr processHandle, 
     uint desiredAccess, 
     out IntPtr tokenHandle); 

    [DllImport("advapi32.dll", SetLastError = true)] 
    static extern bool GetTokenInformation(
     IntPtr tokenHandle, 
     TokenInformationClass tokenInformationClass, 
     IntPtr tokenInformation, 
     uint tokenInformationLength, 
     out uint returnLength); 

    const UInt32 TokenQuery = 0x0008; 

    enum TokenElevationType 
    { 
     TokenElevationTypeDefault = 1, 
     TokenElevationTypeFull, 
     TokenElevationTypeLimited 
    } 

    enum TokenInformationClass 
    { 
     TokenUser = 1, 
     TokenGroups, 
     TokenPrivileges, 
     TokenOwner, 
     TokenPrimaryGroup, 
     TokenDefaultDacl, 
     TokenSource, 
     TokenType, 
     TokenImpersonationLevel, 
     TokenStatistics, 
     TokenRestrictedSids, 
     TokenSessionId, 
     TokenGroupsAndPrivileges, 
     TokenSessionReference, 
     TokenSandBoxInert, 
     TokenAuditPolicy, 
     TokenOrigin, 
     TokenElevationType, 
     TokenLinkedToken, 
     TokenElevation, 
     TokenHasRestrictions, 
     TokenAccessInformation, 
     TokenVirtualizationAllowed, 
     TokenVirtualizationEnabled, 
     TokenIntegrityLevel, 
     TokenUIAccess, 
     TokenMandatoryPolicy, 
     TokenLogonSid, 
     MaxTokenInfoClass 
    }